Privacy Policy

BauBau (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the BauBau mobile application and web portal (collectively, the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your email address and password (securely managed by Firebase Authentication). Behaviourists also provide a practice name and optional practice address.

Client Invitations Created by Behaviourists

BauBau is the controller for client invitation records. A Behaviourist may create an invitation using a dog's name and, if they provide it, a client email address before the client has an account. We use that email only to send or resend the invitation. The invitation code, not the email address, is used to accept it.

Dog Profiles

You may provide information about your dog, including name, breed, date of birth, weight, and profile photos.

Encounter Data

When you log encounters, we collect: reaction level (0–10 scale), trigger type, estimated distance, optional notes, and timestamp. If you grant location permission, we also record approximate location coordinates.

Usage Data

We collect anonymous usage analytics and error reports to improve the Service. This may include device type, operating system version, and crash logs.

Cookies and analytics tracking (web portal only)

On the web portal we use Google Analytics 4 (provided by Google LLC) to understand how visitors interact with our marketing pages and product, so we can improve the experience. Analytics is off by default: nothing is sent to Google until you choose “Accept” on the cookie banner that appears on your first visit. If you choose “Decline”, the analytics SDK is not loaded and no analytics requests are made.

When you accept, we record anonymous events such as page views, button clicks, and form submissions. We do not collect sensitive personal data through analytics, and IP addresses are anonymised by Google before storage. Your decision is remembered for 12 months; after that, the banner will appear again so you can refresh your choice. You can change your mind any time by clearing your browser’s site data for this site, which will return you to the banner state.

In the BauBau mobile apps, you will be able to disable analytics at any time in the app’s privacy settings.

2. How We Use Your Information

• To provide and maintain the Service
• To display analytics and trends about your dog's reactivity
• To connect your dog data with a behaviourist when you accept a client invitation or share a connection code
• To process subscription payments
• To send service-related communications (e.g. email verification)
• To diagnose technical issues and improve the Service

3. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

• With your behaviourist: When you accept a client invitation or generate and share a connection code, your dog's encounter data becomes visible to that behaviourist.
• With family members and handlers: If you invite family members or handlers, they can view and log encounters for your dog.
• Service providers: We use third-party services to operate BauBau, including Firebase (authentication and infrastructure), Stripe (B2B payments), RevenueCat (mobile subscriptions), Cloudflare (content delivery and storage), and Sentry (error tracking).
• Legal requirements: We may disclose information if required by law or to protect our rights.

4. Data Storage and Security

Your data is stored on secure servers hosted by Heroku (Salesforce) in the EU region. Dog photos are stored on Cloudflare R2. We use encryption in transit (TLS 1.2+) and industry-standard security practices to protect your information.

5. Data Retention

We retain your data for as long as your account is active. Free tier accounts retain 30 days of encounter history; Pro accounts retain unlimited history.

If a client invitation is not accepted, we delete the invitation record and any email address it contains after the code expires.

Deactivating your account puts it to sleep without erasing anything — reactivate at any time and your data is exactly where you left it.

Deleting your account is a permanent erasure. We destroy the information that identifies you and your household — your email and name, your dogs’ names and photos, the notes you wrote in your own words, location data, and (when a dog owner deletes) the behaviourist’s clinical notes about their household. The remaining record — reaction levels, trigger types, distances, the dog’s response, timestamps, encounter outcomes, breed, stress-alert history, and whether the account was Free or Pro — is stripped of the identifiers above and retained in de-identified form, which we use to understand how dog reactivity changes over time. It becomes fully anonymous once the legally-retained records described below, together with our routine backups andsystem logs, age out. See our account-deletion page for the full field-by-field breakdown.

Some records are kept because we are legally required to keep them: billing and payment history (including our payment processors’ transaction logs) for tax and accounting, and a minimal fraud- or abuse-signal record where an account was suspended for a policy violation. These may contain identifiers such as your email until they age out of our standard retention windows.

6. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

7. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights,please contact us at support@bau-bau.app.