Privacy Policy

1. What Information Do We Collect?

Information you provide directly

• Account information: Your name, email address (required to create an account), and phone number (optional — used for lost dog contact purposes).
• Dog records: Any information you enter about your dogs, including health records, medications, vaccinations, food, training notes, titles, journal entries, equipment lists, contacts, and calendar events. This data belongs to you.
• Daily Note text: If you use voice input, transcription is performed entirely on your device by your phone's operating system (iOS or Android). We receive and store the resulting text only — never audio. With Plus, this text is also sent to Anthropic's API for AI parsing. See Section 5.
• Photos: With Plus, photos you attach to health records and journal entries. With Premium (when available), photos submitted for AI scanning are sent to Google Gemini. See Section 5.
• Contact and support submissions: Name, email, and message content submitted via our contact or data request forms.

Information collected automatically

• Push notification tokens: Firebase Cloud Messaging (FCM) tokens used to deliver reminders and alerts to your device.
• Device information: Device model, operating system, and app version used for crash reporting and customer support.
• Website usage data: IP address, browser type, pages visited, and timestamps when you access packleaderapp.com, collected via server logs and Google Analytics.
• Cookies: See our Cookie Policy and Section 7 below.

Information collected via the QR Found Dog feature

When someone scans a lost dog's QR tag, we collect their approximate geographic location (latitude and longitude), and optionally their name and phone number if they choose to provide it. See Section 6 for full details.

Information we do not collect

• Payment card details — handled entirely by Stripe. We never see or store your payment information.
• Audio recordings — voice input is transcribed on-device only.
• Precise GPS location of app users (other than QR scan reporter data described in Section 6).
• Biometric data.
• Human health or medical information.
• Information from third parties.

2. How Do We Process Your Information?

We process your information to:

• Provide the Services: Create and manage your account, store and sync your dog's records, process payments, and deliver app features.
• Power AI features: With Plus, send your Daily Note text to Anthropic's Claude API for intelligent parsing and routing. With Premium (when available), send photos to Google Gemini for scan processing.
• Send notifications: Use FCM tokens to deliver push notifications for medication reminders, calendar events, and lost dog alerts.
• Provide support: Respond to inquiries, process data subject access requests, and communicate about your account.
• Improve our services: Analyze usage patterns to identify and fix issues and improve the app experience.
• Communicate about new features: Notify you about updates and new capabilities. You can opt out at any time.
• Comply with the law: Respond to legal requests and fulfill compliance obligations.

We do not use your information for targeted advertising, behavioral profiling for third parties, or any sale of personal data.

3. What Legal Bases Do We Rely On?

Where required by applicable law (including GDPR), we rely on the following legal bases:

• Contract: Processing necessary to deliver the Services you have signed up for and fulfill our obligations to you.
• Consent: Processing based on your explicit agreement, such as optional features or marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Processing for our legitimate business purposes such as security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable law.

For users in Canada: We process your information where you have given express or implied consent, or where permitted without consent under PIPEDA or applicable provincial privacy legislation.

4. When and With Whom Do We Share Your Information?

We do not sell your personal information. We share data only with service providers necessary to operate PackLeader, each bound by appropriate data processing agreements:

We may also share your information if required by law or in connection with a merger, acquisition, or sale of our business, in which case we will notify you.

Pack sharing: If you add other users to your pack, they will have access to your dog's records as configured by your sharing settings.

5. AI Processing and Third-Party Models

Daily Note — Plus

When you use the Daily Note feature with a Plus subscription, the text of your note is sent to Anthropic's Claude API. The API parses the content and routes observations — health symptoms, behaviors, food entries, moods — to the appropriate records in your dog's profile.

Anthropic acts as a data processor on our behalf. You can review their data handling practices at anthropic.com/privacy.

With Basic, your note is saved as a plain text journal entry. No text is sent to any AI service.

Image Scanning — Premium (coming soon)

When Premium becomes available, photos submitted for AI scanning will be sent to Google Gemini's API for processing. Google acts as a data processor on our behalf. You can review Google's privacy practices at policies.google.com/privacy.

Voice input

Voice-to-text transcription is performed entirely on your device by iOS or Android. We never receive, store, or process audio. Only the resulting text is transmitted to our servers.

6. Location Data and the QR Found Dog Feature

The QR found dog feature allows anyone who finds your dog to scan a QR tag and contact you. When a tag is scanned, we collect:

• The approximate geographic location (latitude and longitude) of the scanning device
• The name of the person who scanned the tag (if they choose to provide it)
• The phone number of the person who scanned the tag (if they choose to provide it)
• The date and time of the scan

This data is stored and displayed to the dog's owner so they can identify where the dog was last located and contact the finder.

Use limitation: QR scan data is used solely for the found dog recovery feature. It is not used for advertising, analytics, or any other purpose, and is not shared with any third party.

Location data is sensitive under several applicable privacy laws. We collect only the minimum data necessary for this feature to function and delete it automatically when it is no longer needed.

7. Cookies and Tracking Technologies

Our website uses cookies for essential functionality, analytics, and cookie consent management. We do not use cookies for targeted advertising.

Cookie consent is managed through Osano. You can update your preferences at any time through the cookie banner on our website. For full details on specific cookies we use, see our Cookie Policy.

We use Google Analytics to understand how visitors use our website in aggregate. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

Residents of California, Colorado, Connecticut, Oregon, and other states that recognize Universal Opt-Out mechanisms: you may use a browser-level opt-out signal to communicate your privacy preferences. Our cookie consent manager will honor these signals where technically supported.

8. How Long Do We Keep Your Information?

We retain your personal information for as long as your account is active. When you delete your account, your data is deleted from our active databases. Some data may persist in backup systems temporarily before permanent deletion.

QR scan location data (latitude/longitude, optional name and phone of the scanner) is deleted automatically when the dog is marked as found in the app, or upon a verified deletion request submitted at packleaderapp.com/datarequest.

Contact form and data request submissions are retained for as long as necessary to fulfill the request and for fraud prevention and legal compliance purposes.

We do not retain any personal information longer than necessary for the purposes described in this policy, unless required by law.

9. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), Firebase security rules that restrict data access, Cloudflare Turnstile to prevent automated abuse of our web forms, and access controls limiting who can access production data.

However, no electronic transmission or storage system can be guaranteed to be 100% secure. While we do our best to protect your information, we cannot promise that unauthorized parties will never circumvent our measures. You are responsible for maintaining the security of your account credentials.

10. Do We Collect Information from Minors?

We do not knowingly collect data from, or direct our Services to, children under the age of 13. Our Services are intended for users who are at least 18 years of age, or who are parents or guardians managing their own accounts.

If you believe we have inadvertently collected personal information from a child under 13, please contact us at Support@packleaderapp.com and we will take prompt steps to delete that information.

11. Your Privacy Rights

Depending on where you live, you may have rights including:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that inaccurate information be corrected
• Deletion: Request that your personal data be deleted
• Portability: Request your data in a portable format
• Withdraw consent: Withdraw consent to processing at any time
• Opt out of marketing: Unsubscribe from feature and promotional communications at any time
• Object to processing: Object to processing based on legitimate interests

To exercise any of these rights, visit packleaderapp.com/datarequest or email Support@packleaderapp.com. We will acknowledge your request within 5 business days and respond within 30 days (GDPR) or 45 days (US state laws), with an extension of up to an additional 45 days where permitted by law.

We will not discriminate against you for exercising your privacy rights.

Account information

You can review and update your account information at any time by logging into the app and accessing your account settings. To delete your account and associated data, contact us or submit a request via the data request form.

12. Do-Not-Track Controls

Some browsers include a Do-Not-Track (DNT) signal that can be activated to signal your preference not to be tracked. There is currently no uniform technical standard for recognizing and implementing DNT signals, and we do not currently respond to DNT browser signals.

For California residents, California law requires us to disclose how we respond to DNT signals. We do not respond to them at this time. We will update this policy if an industry or legal standard is established.

13. United States Residents — Specific Privacy Rights

If you are a resident of one of the following states, you have specific rights under applicable state privacy law. These rights may be limited in some circumstances by law.

States with applicable comprehensive privacy laws: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.

Categories of personal information we collect

We do not sell or share your data

We have not sold or shared personal information with third parties for business or commercial purposes in the preceding 12 months, and we do not intend to do so in the future. We do not process personal information for targeted advertising.

Your rights

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies
• Right to request deletion
• Right to data portability
• Right to opt out of sale, sharing, or targeted advertising (we do not engage in these activities)
• Right to non-discrimination for exercising your rights

How to exercise your rights

Visit packleaderapp.com/datarequest, email Support@packleaderapp.com, or use the contact form at packleaderapp.com/contact.

You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization before processing agent requests.

Request verification

To protect your data, we will verify your identity before processing any access, correction, or deletion request. We will only use the information provided in your request for verification purposes.

Appeals

If we decline your request, you may appeal by emailing Support@packleaderapp.com with "Privacy Rights Appeal" in the subject line. We will respond in writing. If your appeal is denied, you may contact your state attorney general.

California "Shine the Light"

California Civil Code Section 1798.83 permits California residents to request information about personal data disclosed to third parties for direct marketing purposes. We do not disclose personal data to third parties for direct marketing purposes.

14. Do We Make Updates to This Policy?

Yes. We will update this policy as necessary to remain compliant with applicable laws and to accurately reflect our data practices. The "Last updated" date at the top of this page indicates when it was last revised.

If we make material changes, we will notify you by posting a prominent notice in the app or by sending you an email. We encourage you to review this policy periodically.

15. How to Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us:

• Email: Support@packleaderapp.com
• Contact form: packleaderapp.com/contact
• Phone: 850-396-1396
• Mail: Pendulum K9, Navarre, FL 32566, United States

16. How to Review, Update, or Delete Your Data

Based on the laws of your state or country of residence, you may have the right to request access to, correction of, or deletion of the personal information we hold about you.

To submit a request, visit packleaderapp.com/datarequest. We will acknowledge your request within 5 business days and fulfill it within the timeframes required by applicable law (30 days for GDPR, 45 days for US state laws).