Dogyoga
This Privacy Policy explains how Dogyoga ("Dogyoga", "we", "us") handles your personal data when you use www.dogyoga.app and the Dogyoga app (the "Service"). We keep it simple: we collect only what we need to run the Service, we don't show ads, we don't use tracking cookies, and we never sell your data.
1. Who is responsible for your data
The data controller is Dogyoga. Company details are in the Legal Notice. For any privacy question or request, write to hello@dogyoga.app.
2. What we collect
Information you give us
- Account: your email address and your password (stored only in encrypted, hashed form: we can't read it).
- Profiles: your first name and yoga experience, and your dog's name, breed, size, age, weight and energy level.
- Preferences: session goal, length, pace, voice and sound settings.
- Messages you send us by email.
Information created when you use the Service
- Session history: the dates, goals, lengths and poses of the sessions you complete, used for your streak and progress.
- Plan and subscription: how many free sessions you've used, whether you're subscribed, your plan and renewal date.
- Security data: your IP address and a count of recent failed login attempts, kept for a short time to protect accounts against attacks.
Payment information
Payments are handled by Stripe. Stripe collects your card details and billing address directly; we never see or store your full card number. We receive from Stripe a customer reference, your subscription status, plan and renewal dates.
We don't collect precise location, contacts, photos, or data about your health.
3. Why we use your data
- To provide the Service (performance of our contract with you): create your account, build sessions adapted to your dog, save your progress, and sync them across your devices.
- To handle subscriptions and payments (contract, and our legal accounting obligations).
- To send you essential emails (contract): account confirmation, password reset, subscription confirmation and important changes to the Service or our terms. We don't send marketing emails without your consent.
- To keep the Service secure and working (our legitimate interests): prevent abuse, fix bugs, and understand overall usage through aggregated counts, such as the number of accounts.
4. Cookies and local storage
We use one cookie, `dogyoga_session`, which keeps you logged in. It's strictly necessary, so it doesn't need consent. The app also saves your settings and progress in your browser's local storage so it works quickly and offline.
We don't use advertising or analytics cookies. Our web pages load fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
5. Who processes your data for us
We share data only with the service providers we need to run Dogyoga, under contracts that require them to protect it:
- Vercel (hosting of the website and app), United States
- Upstash (database where accounts are stored)
- Resend (sending account and subscription emails)
- Stripe (payments and subscriptions)
- Google Fonts (web fonts)
We may also disclose data if the law requires it, or to protect the rights, safety and property of our users or of Dogyoga.
We don't sell or rent your personal data, and we don't share it for targeted advertising.
6. International transfers
Some of these providers are based in, or store data in, the United States. When your data is transferred outside the European Economic Area, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
7. How long we keep your data
- Account, profiles and history: as long as your account exists. When you delete your account, they're deleted from our database straight away.
- Security data: failed login counts expire after about 15 minutes; confirmation and password reset links expire after 48 hours and 1 hour.
- Payment and invoice records: kept by Stripe and by us for as long as the law requires for accounting and tax purposes, even after your account is deleted.
- Emails you send us: as long as needed to answer you, then deleted.
8. Your rights
Wherever you live, you can:
- access the personal data we hold about you and get a copy;
- correct it (most of it can be edited in Profile);
- delete your account and data, at any time, from Profile → Delete my account, or by writing to us;
- object to or restrict some uses of your data, and ask for data portability;
- withdraw consent where we rely on it.
To use these rights, write to hello@dogyoga.app. We'll answer within one month. If you're in the EU, you can also complain to your data protection authority; in France, that's the CNIL (www.cnil.fr).
California residents: you have the right to know what personal information we collect and how we use it, to access and delete it, and to not be discriminated against for using these rights. We don't sell or share personal information as defined by California law. The categories of information we collect are listed in section 2, and the purposes in section 3.
9. Children
Dogyoga isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
10. Security
We protect your data with encrypted connections (HTTPS), hashed passwords, secure session cookies, limits on login attempts and restricted access to our systems. No system is perfectly secure, but we work to keep your data safe and will tell you if a breach affects you, as the law requires.
11. Changes to this policy
We may update this policy. If a change is significant, we'll tell you by email or in the app before it takes effect. The date of the latest version is shown at the top of this page.
12. Contact
For any question about your privacy, write to hello@dogyoga.app.