Privacy Policy

Last updated: August 19, 2026

Dogsittr ("we," "our," or "us") makes a business management app for independent dog sitters and pet care professionals. This policy explains what information we collect, how we use it, who it is shared with, and the choices you have.

1. Who this policy covers

Two different people can end up sending us information, and they are treated differently:

• Sitters — professionals who create a Dogsittr account and use the iOS app to run their business. Most of this policy is about you.
• Pet owners — people who visit a sitter's public booking page on dogsittr.com and send that sitter a booking request. You do not have a Dogsittr account and we do not build a profile of you; see section 3.

We have no advertising business, no analytics or advertising SDKs in the app, and nothing we collect is sold or used to track you across other apps or websites.

2. Information we collect from sitters

Account information

Your email address and a password, stored as a secure hash — we never see your plaintext password. If you sign in with Apple, we receive the identifier Apple provides and the email you choose to share, which may be Apple's private relay address.

Profile information

Optionally: your full name, professional title, bio, phone number, city/location, years of experience, Instagram handle, Facebook page, website URL, and a profile photo.

Client and booking data

Information you enter about your own clients — names, phone numbers, email addresses, home addresses, dog names, breeds, dog birthdays, medication notes and care notes — plus bookings, invoices and payment amounts. This data belongs to you and is stored in your account. Because it describes other people, our Terms of Use ask you to have a lawful basis for holding it.

Photos

Three kinds, all optional: your profile photo, a photo you attach to a client, and receipt photos in the Expense Tracker. Receipt photos are stored in a private bucket and are readable only through short-lived signed links. When you scan a receipt, the total, date and store name are read on your device using Apple's Vision framework — the image is never sent to us or anyone else for text recognition.

Walk and location data

When you tap Start a Walk, the app records your location for the duration of that walk in order to draw the route, measure the distance, and pin where each pee and poop happened. The route, those pins, the start and end times, the dog's name and any note you add are saved to your account. Location collection stops when you tap Finish. Nothing is recorded when a walk is not running, and the app requests only "while using the app" permission, so iOS shows the blue status-bar indicator the whole time a walk is being recorded.

Your route stays in your own account. To note the weather a walk happened in, the app asks Apple Weather once, at the start of the walk. Before that request leaves your device your coordinates are rounded to two decimal places — roughly a kilometre — so the doorstep you are standing on is never the thing being asked about. The rest of the route is never sent anywhere but your own account.

The Emergency screen can find the nearest veterinarian. That takes a single location reading, uses it to search, and stores nothing.

Expenses and business figures

Expense amounts, dates, categories and notes you record, plus the invoice and revenue totals the app derives from your own entries.

AI feature inputs

Dogsittr has two AI features, and both send text to Anthropic's API through our own server:

• Daily owner updates — the dog's name, the owner's first name, the activities and mood you select, and any freeform notes you type. No addresses, payment details or other client records are included.
• Emergency triage chat — the messages you type about the animal and the situation, and the replies, for the duration of that conversation. Type only what is needed to get help.

We also keep a per-account daily counter of how many AI requests you have made, so we can enforce fair-use limits. It records the date and a count, not the content.

Notifications and device tokens

Most Dogsittr notifications are scheduled on your device from your own bookings and never reach us. One does not: when a pet owner submits a booking request on your page, we have to send that alert from our server. If you allow notifications, we store the push token Apple issues for your installation, along with whether it came from a development or production build, so the alert reaches the right device. Tokens are deleted with your account, and Apple tells us when a token is dead so we can drop it.

Subscription status

Whether your account holds Dogsittr Premium, how it was granted and when it expires. Apple processes the purchase; we never see your payment method or Apple ID credentials.

What we do not collect

No third-party analytics or advertising SDKs. No advertising identifiers, no behavioural profiling, no browsing history, no contacts-list access, no health data, and no tracking across other apps or websites.

3. Information we collect from pet owners

If a sitter turns on their public booking page, an owner who sends a request submits their name, email address, an optional phone number, their dog's name and breed, the service and dates they want, and any notes they add. That request is stored against the sitter's account so the sitter can answer it, and it is deleted when the sitter deletes their account.

If the sitter has payments switched on, the owner pays by card on a Stripe-hosted checkout page. Card numbers are entered on Stripe's page and never touch our servers — we receive only the identifiers and status Stripe returns (whether the payment is authorized, captured or failed, the amount, and the last state of the transaction). Stripe processes that payment as a data controller in its own right under Stripe's privacy policy.

We do not use an owner's details to market anything, do not add them to any mailing list, and do not build an owner profile across sitters.

4. What stays on your device

Some things never leave your phone at all. The figures you type into the Tax Estimator — including any W-2 wages from a day job — are stored only in the app's local settings and are never uploaded. Receipt text recognition happens on-device, as described above. Imported Rover/Wag calendar details are cached locally so the app works offline. Data the widgets show is written to a private container shared between the app and its widget, on your device.

5. How we use your information

• To provide, maintain and sync your account and business data across your devices.
• To generate AI-written owner updates and emergency triage replies at your request.
• To send the notifications you have turned on, including new booking requests.
• To run a sitter's public booking page and pass requests and payment status to them.
• To let you export or share schedules, invoices, expense summaries and updates.
• To authenticate you securely, enforce fair-use limits on the AI features, and keep accounts safe.
• To respond when you contact support.

We do not use your data for advertising, profiling, or any purpose other than operating the service.

6. How we share your information

We do not sell your data and we do not share it for anyone else's advertising. We share it only with the service providers below, only to operate the service:

• Supabase — our database, authentication, file storage and server functions. Your account, profile, client, booking, walk and expense data is stored on Supabase's infrastructure, hosted on Amazon Web Services in the United States. Supabase Privacy Policy
• Anthropic — the AI provider behind the daily updates and the emergency triage chat. Prompts are sent from our server, not from your device. Anthropic processes them as our service provider under its commercial API terms, which do not permit using API inputs to train its models. Anthropic Privacy Policy
• Stripe — card payments on a sitter's booking page, and the connected account a sitter opens to receive them. Stripe collects the identity and bank details it needs to pay a sitter out and to meet its own legal obligations; we never see full card numbers or bank credentials. Stripe Privacy Policy
• Apple — Sign in with Apple, subscriptions, the Apple Push Notification service that delivers booking-request alerts, Apple Maps for maps and place search, and Apple Weather for the conditions shown on a walk (which receives only a coordinate rounded to about a kilometre, and no account information). Apple Privacy Policy
• Cloudflare — hosting for dogsittr.com, the booking pages, and routing for our support email address. Cloudflare Privacy Policy

We may also disclose information if the law requires it, or to protect the rights, safety or property of our users or ourselves. If Dogsittr is ever acquired, we will tell you before your information becomes subject to a different policy.

7. Data storage and security

Your data is stored in the United States and protected by row-level security, which means the database itself enforces that each account can read only its own rows. Connections are encrypted in transit with TLS. Receipt images live in a private bucket reached only through short-lived signed links; profile and client photos are stored in a bucket that serves images publicly by address, so treat a client photo as shareable rather than secret. Server-side keys live in our server environment and are never shipped inside the app. We take reasonable measures to protect your information, but no system is completely secure.

8. How long we keep it

We keep your data for as long as your account exists, and delete it when you delete your account. Deleting the app does not delete your account. Two exceptions we cannot control: Stripe and Apple keep their own records of payments and purchases for as long as their own legal obligations require, and support emails you send us remain in our mailbox until we clear them.

9. Your choices and rights

Edit or delete your data

You can edit or delete your profile, clients, bookings, invoices, expenses and walks at any time in the app.

Turn off collection

Location is only ever collected during a walk you start; deny or revoke the location permission in iOS Settings and the Walk Tracker will not record. Deny the notification permission and no push token is stored. Both features simply stop working; nothing else in the app depends on them.

Delete your account

You can permanently delete your account and all associated data from More → Profile → Delete Account. This immediately removes your profile, clients, bookings, invoices, expenses, walks and routes, booking requests, push tokens, and every stored image including profile, client and receipt photos. If your account was created with Sign in with Apple, we also revoke Apple's sign-in grant at that moment. No request or approval is needed, and the deletion cannot be undone.

Data portability

Booking and invoice data can be exported as CSV from the Analytics screen, and the Expense Tracker can export a Schedule C summary with an itemised expense file.

Rights under your local law

Depending on where you live — for example in the EEA/UK under the GDPR, or in California under the CCPA/CPRA — you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. The app's own tools cover most of this; for anything they do not, email us at the address below and we will respond. We do not sell or share personal information for cross-context behavioural advertising, and we will never discriminate against you for exercising a privacy right. Our servers are in the United States, so using Dogsittr from elsewhere means your information is transferred there.

10. Children's privacy

Dogsittr is intended for adults running a pet care business, and the Terms of Use require you to be 18. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If a change materially affects how we handle information we already hold, we will make that clear rather than relying on the date alone. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

Contact us