Privacy Policy

This policy explains what information PupManager collects, why we collect it, how we use it, and the choices you have. It applies to pupmanager.com, the app at app.pupmanager.com, and the PupManager iOS and Android apps.

We've written this in plain English because we'd rather you read it than skim it. If something here is unclear, email us at info@pupmanager.com and we'll explain.

1. Who we are

PupManager is operated by PupManager Limited, registered at 82 Kingswood Road, Brookfield, Tauranga, New Zealand. For the purposes of data-protection law (including the GDPR and the NZ Privacy Act 2020), we are the data controller for the information you give us as a trainer or client.

2. What we collect

We collect only what we need to run the service. In practice, that means:

Account information (trainers)

• Your name, business name, email, and password (stored hashed — never in plain text).
• Profile details you choose to add: phone, photo, bio, business address.
• Billing details when you subscribe (handled by our payments processor — see §4).

Account information (clients of trainers)

• Name, email, and any contact details your trainer adds when inviting you.
• Information about your dog: name, breed, age, vaccination status, behavior notes, and similar — added by you or your trainer.
• Sign-in is via a one-time code sent to your email; we don't store a password for client accounts.

Training and business data

• Sessions, attendance, homework, progress notes, scores, and any video or photo attachments you upload.
• Schedules, session packages, group-class enrollments, and similar operational data.

Device and usage data

• IP address, device type, browser or app version, OS version, language, and approximate region (derived from IP).
• Usage events — e.g. pages visited, features used, errors encountered — to help us fix bugs and prioritize improvements.
• Push-notification tokens (Apple Push Notification service / Firebase Cloud Messaging) when you enable notifications.

What we do not collect

• Precise geolocation. We use approximate region only.
• Contacts, photo library, microphone, or camera unless you explicitly use a feature that requires it (e.g. attaching a video to a session note).
• Health data or mobile advertising identifiers (IDFA / AAID) inside the iOS and Android apps. (Our marketing website pupmanager.com does use advertising and analytics cookies — see §4a.)
• Children's data — see §9.

3. How we use your information

• To run the service — show you your sessions, deliver homework to clients, send appointment reminders, sync calendars, etc.
• To communicate with you — transactional email (booking confirmations, password resets, billing receipts), and product updates if you've opted in.
• To improve the product — aggregated usage data tells us what's working and what isn't.
• To keep accounts secure — detecting unusual sign-in activity, rate limiting, fraud prevention.
• To meet legal obligations — tax records, lawful requests from authorities, and similar.

We do not use your data to train AI models. We do not sell your data. We do not show you third-party ads inside PupManager.

4. Who we share information with

PupManager is built on top of a small number of trusted infrastructure providers ("subprocessors"). They process your data on our instructions and are bound by data protection terms.

We share your data with these providers only as needed to deliver the service. We don't share your personal data with anyone else except where we are legally required to (e.g. a court order), or where you ask us to (e.g. exporting your data to another tool).

4a. Cookies on our marketing website

This section applies to our marketing website pupmanager.com only. The PupManager iOS, Android, and in-app experience do not use advertising or cross-site tracking cookies.

• Essential — keep the site working and remember that you've seen this notice.
• Analytics — Google Analytics 4 and Vercel Analytics, to understand which pages are useful. You can opt out of Google Analytics with the Google Analytics opt-out add-on.
• Advertising / retargeting — the Meta (Facebook/Instagram) pixel. It lets us measure ad performance and show PupManager ads to people who have visited this site (retargeting), and build similar ("lookalike") audiences. You can control this through your Facebook ad preferences and your browser/OS tracking controls.

Data collected by the Meta pixel is shared with Meta Platforms, Inc. as an independent recipient for the purposes above.

5. How long we keep it

• Active account data — for as long as your account is active.
• After account deletion — within 30 days we delete or irreversibly anonymize your personal data, except where we are legally required to retain it (e.g. tax records for 7 years in most jurisdictions).
• Server logs — typically 30 days, unless flagged for security investigation.
• Backups — encrypted backups roll off within 35 days.

6. Your rights

Wherever you live, you can:

• Access the personal data we hold about you.
• Correct anything that's wrong.
• Export a machine-readable copy of your data.
• Delete your account and your personal data (see §7).
• Object to processing or withdraw consent for optional uses (e.g. product update emails).

If you live in the EU, UK, or Switzerland (GDPR / UK GDPR)

You also have the right to restrict processing, the right to data portability, the right to object to processing based on our legitimate interests, and the right to lodge a complaint with your local supervisory authority.

Our lawful bases for processing your data are: (a) contract — to deliver the service you signed up for; (b) legitimate interests — for security, fraud prevention, and product improvement; (c) consent — for optional things like product update emails; and (d) legal obligation — where retention or disclosure is required by law.

If you live in California (CCPA / CPRA)

You have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to opt out of the "sale" or "sharing" of personal information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information for money. The PupManager product does not use your data for cross-context behavioral advertising. Our marketing website pupmanager.com uses the Meta pixel for advertising and retargeting (see §4a) — under the CPRA this may be considered "sharing." You can opt out using the controls described in §4a and your browser/OS tracking settings.

If you live in Australia (Privacy Act 1988 / APPs)

We handle your personal information in accordance with the Australian Privacy Principles. You can request access to or correction of your personal information. If you have a complaint about how we've handled your data, contact us first; if you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

If you live in New Zealand (Privacy Act 2020)

We handle your personal information in accordance with the Information Privacy Principles in the Privacy Act 2020. You have the right to access and request correction of your personal information. Complaints can be made to the Office of the Privacy Commissioner.

To exercise any of these rights, email info@pupmanager.com from the address on your account. We respond within 30 days (or sooner where the law requires it).

7. Deleting your account

You can delete your PupManager account and all associated personal data at any time:

• In the iOS or Android app: Settings → Account → Delete account.
• On the web: Settings → Account → Delete account at app.pupmanager.com/settings.
• By email: request deletion from info@pupmanager.com using the email address on your account.

Deletion is irreversible. Within 30 days of your request we delete or irreversibly anonymize your personal data on our active systems and roll-off in backups within 35 days. Records we are legally required to keep (e.g. invoices for tax purposes) are retained for the minimum period required and then deleted.

Trainers, please note: when you delete your account, the records of your clients' dogs that you created stay with the affected client accounts. If you want us to also delete client records, request it explicitly.

8. Security

We take security seriously. In practice that means: data encrypted in transit (TLS 1.2+) and at rest, passwords stored using industry-standard hashing, narrow access controls for our team, mandatory two-factor on production systems, and regular dependency and infrastructure updates. No system is bulletproof; if we detect a breach that affects your data we will notify you and the appropriate regulator within the timelines required by law.

9. Children's privacy

PupManager is not intended for children under 16. We don't knowingly collect personal data from children. If you believe a child has provided us personal data, contact info@pupmanager.com and we'll delete it.

10. Push notifications

If you enable push notifications, we use Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android) to deliver session reminders, homework alerts, and account messages. We send your device a token at registration and use it only to deliver notifications associated with your account. You can disable notifications at any time in your device settings or in the app's notification preferences.

11. International transfers

PupManager is operated from New Zealand. Our infrastructure providers (see §4) host data in the United States, the European Union, and other regions. Where your data is transferred internationally, those transfers are protected by contractual safeguards (such as Standard Contractual Clauses) where required by law.

12. Changes to this policy

We'll update this page as the product evolves. The "Last updated" date at the top reflects the most recent change. For material changes, we'll notify active accounts by email at least 30 days before the change takes effect.

13. Contact us

For privacy questions or to exercise any of the rights listed above: info@pupmanager.com.

For everything else: info@pupmanager.com.