Privacy Policy

1. Who we are

This Privacy Policy explains how Eyal Katz (“Company,”
“we,” “us,” or “our”) collects, uses, shares, and stores personal information
when you use the Pawky iOS application (“Pawky” or “the App”) and related
legal/marketing pages on pawkycare.com.

Contact for privacy requests: support@pawkycare.com

2. Scope

This Policy covers personal information processed in connection with:

- account creation and sign-in;
- dog profiles and care tracking (daily care, walks, ongoing treatments and health records
you enter, reminders);
- Share Dog invitations and care-partner collaboration;
- subscriptions (Pawky Free / Pawky Together / Pawky Plus);
- App Lock, camera/photos, and notifications;
- analytics, crash reporting, and Remote Config;
- offline-first local storage and best-effort cloud sync;
- optional on-device monthly summary “intelligence” features; and
- Profile and account deletion.

It does not cover third-party websites or services that we do not control,
except to describe how we use them as processors/service providers.

3. Categories of information we process

Depending on how you use Pawky, we may process:

3.1 Account and identity

- Authentication identifiers from Sign in with Apple or Sign in with Google
(and related tokens/IDs);
- display name, email (if provided by the identity provider or you), and
profile photo you set;
- account identifiers used in our systems.

3.2 Dog and care information (may be sensitive in context)

- Dog profile details (name, photo, breed/attributes you enter, gender, and
similar fields);
- daily care entries (meals, walks, poops, and other care activities you enter);
- ongoing treatments (including occurrence status) and health records/notes you enter;
- reminders and notification-related scheduling metadata;
- care history, scores, and monthly summary inputs derived from your entries.

This information relates to pets you track. It is not intended as a human
health record. Still, treat it as sensitive household information.

3.3 Share Dog collaboration data

• Invitation metadata (public invite identifiers, expiry, status, participants);
• consent records (including terms/privacy version stamps, timestamps, locale);
• care-partner membership for a dog;
• attribution of who added certain care entries when the product shows it.

3.4 Device, usage, and diagnostics

- Device and app technical data (device type, OS version, app version, locale,
time zone);
- approximate diagnostics needed for crash reports;
- analytics events about feature use, screens, errors, and performance
(via Firebase Analytics and related tooling);
- Remote Config fetch data used to deliver flags and configuration;
- network connectivity state as needed for sync behavior.

3.5 Purchases and entitlements

- App Store transaction identifiers and subscription product identifiers as
needed to recognize entitlements;
- subscription tier and status mirrored in your user profile (Pawky Free,
Pawky Together, Pawky Plus; active/grace/unknown as applicable);
- RevenueCat (or similar) entitlement sync data.

We do not receive your full payment card number; Apple processes payment.

3.6 Permission-gated data

- Camera (for example, QR invite scanning or photos you capture);
- Photo library (dog or profile photos you choose);
- Notifications (reminder delivery);
- Biometrics / passcode via the OS for App Lock (we do not receive your
biometric templates; the OS performs local authentication).

3.7 On-device intelligence inputs/outputs

When the on-device monthly insight feature is enabled and available, the App may
send structured care facts from your device to an on-device model to generate
a narrative summary. Designed processing is on-device; we do not intend to
upload those prompts/outputs to our servers for model inference. Analytics may
still record whether generation succeeded or failed (without the narrative
text), subject to our analytics configuration.

4. How we use information

We use personal information to:

- create and secure your account;
- provide care tracking, reminders, history, and Profile features;
- sync data on a best-effort basis and support offline-first use;
- enable Share Dog invitations, consent, and care-partner collaboration;
- determine feature access for Pawky Free / Pawky Together / Pawky Plus;
- process and restore subscriptions with Apple / RevenueCat;
- operate App Lock and respect OS permissions;
- measure product usage, diagnose crashes, and improve reliability and UX
(Analytics / Crashlytics);
- configure the App via Remote Config (including legal version stamps and
feature flags);
- generate optional on-device summaries when enabled;
- respond to support requests;
- protect against fraud, abuse, and security incidents; and
- comply with law and enforce our Terms of Use.

5. Legal bases (EEA/UK and similar regimes)

Where GDPR/UK GDPR or similar laws apply, we rely on one or more of:

- Contract — to provide the App you request;
- Legitimate interests — to secure, improve, and understand the App, prevent
abuse, and support limited analytics, balanced against your rights;
- Consent — where required (for example, certain optional notifications,
tracking disclosures if applicable, or Share Dog disclosures you accept);
- Legal obligation — when we must retain or disclose information.

6. Offline-first storage and sync

6.1 Local device authority for care UI

Pawky is offline-first: for care-related UI, information stored on your device
is typically what you see first. Remote sync is best-effort and may lag or
fail.

6.2 Remote copies are not a guaranteed archive

We may store eligible data remotely (for example in Firebase/Firestore and
related storage) to enable sync, backup, multi-device use, and Share Dog.
Remote storage policy (what is stored remotely, retention windows, and sync
eligibility by tier/role) may change over time.

Except where law requires otherwise, we do not promise that a complete remote
copy of all historical care data will always exist or be deliverable on demand,
despite best-effort sync. See Sections 10–11 on retention, deletion, and
rights.

6.3 Multi-device and care-partner copies

If you use multiple devices or Share Dog, copies of relevant data may exist on
other devices belonging to you or your care partners until deleted or
overwritten through normal sync/deletion processes.

7. How we share information

We do not sell your personal information for money. We share information as
follows:

7.1 Service providers / processors

- Apple (authentication, App Store, push, on-device frameworks);
- Google (Sign in with Google where used);
- Google Firebase / Google Cloud (auth, database, storage, analytics,
crashlytics, remote config, and related);
- RevenueCat (subscription entitlement assistance);
- hosting/email/support tools we may use for customer support.

These parties process data under their terms and our configuration.

7.2 Other Pawky users (Share Dog)

When you use Share Dog, certain information is shared with the primary owner and
care partners for that dog — see the Share Dog excerpt below.

7.3 Legal and safety

We may disclose information if required by law, legal process, or governmental
request, or to protect rights, safety, and security.

7.4 Business transfers

If we are involved in a merger, acquisition, or asset sale, personal
information may be transferred subject to appropriate confidentiality and
notice practices.

8. Share Dog privacy

8.1 Personal information visible to primary owners and care partners

If you participate in Share Dog (as primary owner or care partner), other Pawky
users linked to that dog may see:

- your display name and profile photo (if set);
- the dog’s profile and care information in product scope (including daily care
and history/health records the product surfaces to care partners);
- invitation and participation status as shown in the App.

Do not invite or accept sharing unless you trust the other people involved.

8.2 Roles

- Primary owner: manages invitations (within product rules) and should only invite
trusted helpers.
- Care partner: can view shared information after accept; daily care writes on
shared dogs generally require Pawky Together or Pawky Plus with eligible
status.

8.3 Why we process Share Dog data

We process Share Dog data to enable trusted multi-person dog care collaboration
you request, to record consent version stamps, to enforce invitation expiry and
participant limits, and to authorize reads/writes according to role and plan.

8.4 Consent and invite retention

Share Dog consent records (including termsVersion / privacyVersion,
consentedAt, related invite identifiers, and locale) and invitation documents
are retained as needed to operate sharing, demonstrate consent, secure the
service, and meet legal requirements, then deleted or anonymized according to
our retention practices (Section 10). Expired or cancelled invites may remain
briefly for integrity and abuse prevention.

8.5 Hierarchy

This Share Dog section supplements the full Privacy Policy. The full Policy
controls if there is a conflict. In-app Share Dog privacy sheets are summaries
and are not a substitute for this Policy.

9. Analytics, Crashlytics, and Remote Config

9.1 Firebase Analytics and Crashlytics

We use Firebase Analytics to understand feature usage, funnels, and product
health (for example, screen views, selected user actions, operation results,
and feature-gate events). We use Firebase Crashlytics to collect crash and
error diagnostics to improve stability. These tools may process device
identifiers, app instance identifiers, and event parameters we configure.

You may also use iOS platform settings that limit ad tracking or analytics
where Apple provides them; note that Pawky’s analytics are primarily product
telemetry, not third-party advertising in the App’s core design.

9.2 Remote Config

Firebase Remote Config delivers configuration such as feature flags (including
Share Dog and monthly summary / on-device intelligence flags), numeric product
limits, and legal version values used when recording Share Dog consent. Remote
Config processing is for App configuration, not advertising.

10. Retention

We retain personal information only as long as needed for the purposes above,
including:

- account life + a limited post-deletion period for security, backups, and
legal claims;
- Share Dog consent/invite records as described in Section 8.4;
- analytics/crash data per Firebase and our configured retention;
- subscription records as needed for accounting, fraud prevention, and
entitlement disputes;
- local device data until you delete the App/data or we clear it via product
flows.

Because Pawky is offline-first, deleting remote data may not instantly remove
every local copy on every device. Care partners may retain locally cached
shared data until their devices sync deletion or they remove the dog/account.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete,
restrict, object, or port personal information, and to withdraw consent where
processing is consent-based.

11.1 Access, correction, deletion

Use in-app Profile controls where available to update profile information and
to request account deletion. You may also email support@pawkycare.com. We may
need to verify your request.

Account deletion is intended to remove or anonymize personal data in our
active systems associated with your account, subject to legal retention needs
and technical limits (including backups and residual copies). Dog data shared
with care partners may remain available to those users as part of the shared
dog record until they remove it or as otherwise required to keep shared care
consistent — counsel must validate the exact deletion matrix.

11.2 Export

If we offer an export tool, we will describe its format and limits in-product.
Where law grants a data portability right, contact support@pawkycare.com. We
do not guarantee on-demand delivery of a complete historical remote archive
beyond what law requires and what our systems can reasonably produce (see
Section 6).

11.3 Notifications and permissions

Control notifications, camera, photos, and App Lock in iOS Settings and in-app
toggles where provided.

12. Children

Pawky is not directed to children under 13, and we do not knowingly collect
personal information from children under 13. Users should be at least 16 (or
the higher age of digital consent in their country). If you believe a child
has provided personal information, contact support@pawkycare.com and we will
take appropriate steps to delete it.

13. Security

We use administrative, technical, and organizational measures designed to
protect personal information (including transport encryption for network
calls to our backends and access controls). No method of transmission or
storage is 100% secure. App Lock adds a local barrier on your device; it is
not a complete security program by itself.

14. International transfers

We may process information in the United States and other countries where we
or our processors operate (including Google Firebase infrastructure). Where
required, we use appropriate transfer mechanisms (such as Standard Contractual
Clauses) — counsel to insert exact mechanisms and locations.

15. Automated on-device summaries

Optional monthly insight text is generated on-device when enabled and does not
constitute veterinary advice. You can avoid this processing by not using the
feature, by remaining on a plan without access, or when the feature flag is
off. See also Terms of Use Section 10.

16. pawkycare.com and pawky.app

Legal and marketing pages on pawkycare.com may use standard website logs and
cookies/similar technologies as disclosed on those pages. App Universal Links
on pawky.app under /app/... are used to open App flows (such as Share Dog
invites) and are not a substitute for this Policy’s App disclosures.

17. Changes to this Policy

We may update this Policy. We will change VERSION / effective date on
https://pawkycare.com/privacy/ and may provide in-app notice or update Remote
Config legal version values used for Share Dog consent when material privacy
terms change. Continued use after the effective date means you acknowledge the
updated Policy, except where law requires additional consent.

18. Contact

Privacy questions and requests: support@pawkycare.com
Company: Eyal Katz
Governing law: State of Israel

END OF PRIVACY POLICY — VERSION 1.1-draft — counsel_review