Effective from: 01.10.2026 Controller: Heppsu Consulting EOOD, UIC 208418861, registered office: 14 Lyublyana St., fl. 1, apt. 6, Ovcha Kupel district, 1618 Sofia, Bulgaria Data enquiries: privacy@heppsu.com
Without an account, your dog's record does not leave your phone — the profile, photos, documents, health record, journey and travel readiness stay on the device. Without an account, only three things go out, all visible: the map fetches tiles from OpenStreetMap (they see your device's address, not who you are); "Nearby" sends the area you are looking at to our server to find places (not your identity); and "Report a problem" sends what you yourself wrote.
An account is needed for Dog Journey Plus and the features that require a server: the cloud copy, sharing with a veterinarian, the pack. With Plus, the dog's photos and documents are copied to the server together with the record — so they are waiting on your new device — and deleted from there when you remove them.
Locally on the device: dogs, photos, documents (for example a lab result or a passport page you photographed), health events, medications, weight, reminders, travel documents, language, country and settings. Sent nowhere. The exceptions above: map tiles (OpenStreetMap receives requests for map areas and the device's address), "Nearby" (our server receives the map area and the category you asked for) and the reports you send via "Report a problem" (the text you entered).
| Data | Why | Legal basis |
|---|---|---|
| email address and password (hashed) | signing in | performance of a contract |
| the dog's data: name, breed or mix, date of birth or age, sex, microchip, photo, weight, health events, medications, conditions, documents, travel documents | the cloud copy and sharing — the service itself | performance of a contract |
| the owner's name, if entered | the pet passport and sharing with a veterinarian | performance of a contract |
| introductions, walks and meet-ups with attendance (RSVP) | the pack features you use | performance of a contract |
| reviews and ratings of places; map points you mark | published to all users | legitimate interest — informed choice |
| location — see section 3 | only the features you explicitly use | performance of a contract |
| subscription status, which store you bought in and the store purchase identifier | the subscription — activation and verification, one subscription across our apps | performance of a contract |
| privacy and notification settings | so that your choices apply | performance of a contract |
| technical sign-in records | protection against abuse | legitimate interest |
| content reports and your list of blocked users | reviewing the report and hiding content | legitimate interest — safety |
| your language | messages and the app in your language | performance of a contract |
We do not collect a person's date of birth. The health record belongs to the dog — it is not a special category of personal data; the only personal data of yours in it is the link "this dog belongs to this owner".
Documents: a photographed document may contain the veterinarian's name or your own; it is stored for you, shown only to whom you share it with, and is never read by us or by any automated system beyond storing it.
Third-party data: if you enter a previous owner, a breeder or a veterinarian by name, you are responsible for having grounds to do so.
Reporting and blocking: content from another user can be reported and its author blocked. A report stores the reason, your text (if any) and which content it points at. Blocking is your own private list; the blocked person is not notified. To make this possible, the app sees the account identifier behind another user's content — a randomly generated number, not a name or an email address.
| Recipient | What they receive | Where |
|---|---|---|
| Contabo GmbH | server hosting and the cloud copy | machines in the European Union region; corporate seat — Germany |
| Apple / Google | the subscription purchase — independent controllers for the payment | under their own terms |
| OpenStreetMap | map tile requests (areas + device address) | EU/global, under their policy |
| Google Ireland (Workspace mail) | your email address and the text of the messages — verification code, password reset | EU; under the Google Workspace data processing terms |
Subscription status and "Report a problem" reports are processed in internal systems of the same company (Heppsu Subscriptions and Control Center) — not third parties. Because one subscription covers every Heppsu dog app, the same company sees that your account is subscribed, regardless of the app you bought in.
Data is not sold, not shared for advertising, and not used to train models. There are no ads. Notifications are local — there is no external notification provider.
| What | How long |
|---|---|
| account and the cloud copy | while you have an account, plus 30 days after closure |
| the cloud copy after Plus ends | 12 months after Plus ends (so you can return on a new device), then deleted; earlier — from the app |
| reviews, places, meet-ups | until you delete them or the account is closed |
| revoked sharing links | stop immediately; the record is kept 12 months |
| technical sign-in records | 90 days |
| subscription and purchase records | while the subscription exists, plus the accounting period below |
| accounting records for the subscription | 10 years — Bulgarian Accountancy Act |
| local data on the device | yours — until you delete the app |
| content reports and blocked users | the report — until it is reviewed and until you close your account; the block — until you unblock or either account is closed |
Access, a machine-readable copy, rectification, erasure, restriction, objection, withdrawal of consent — at privacy@heppsu.com. Reply within one month. Complaints — to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the supervisory authority of your place of residence. Closing the account from within the app deletes the cloud copy after the 30-day safety period; the data on your phone stays yours.
An account may be held by a person aged 18 or over. We do not knowingly collect data from minors; if we learn of such an account, we will close it.
None. No cookies, no advertising identifiers, no third-party tracking, no analytics.
You will be notified of material changes at least 14 days in advance, in the app. This policy exists in every language supported by the app — the same version, in each of them.