Your data

Privacy, explained.

Dog Diary is operated by Leo Kus under the BrightLane name. Contact brightlaneweb@gmail.com about privacy, access, correction or deletion. This notice describes the current app and its optional online features.

Private diary

Dogs, feeding plans, care records, photos and recorded GPS routes are stored on your iPhone. Dog Diary does not upload private dogs or provide a private-diary cloud backup. Your iPhone backup settings may include this data. Selected photos are resized and re-encoded without copying source location metadata. There is no advertising or third-party analytics SDK in the app.

Optional Family subscription linking

Private Plus purchases and restores do not require a Dog Diary account. When you choose Family, you explicitly link your subscription to one adult account. The app sends a signed purchase to our Supabase server, which verifies it and checks current subscription status with Apple. We keep the Apple purchase identifiers, product, environment, subscription status, expiry and verification times linked to your Dog Diary account, plus short request-limit records. The signed purchase is processed in memory and is not retained in the billing database. We do not receive your card details. This processing provides the paid Family service and prevents subscription misuse; it is not advertising or tracking. Billing links are deleted with your Dog Diary account. Deleting that account does not cancel an Apple subscription. Contact support if you need help with an existing link; do not buy a second subscription to resolve it.

Online accounts and Family

These features are for adults aged 18 or older. The private diary can be used without an online account. We do not offer child online accounts or parent-managed child accounts. If you believe a child has created an online account, contact us.

Apple, Google and email sign-in use Supabase authentication. The service receives an account identifier and verified email, including an Apple relay address when used. Apple and Google handle their own sign-in screens; we do not receive their passwords. Guest Family identities are not recoverable if you lose the device before linking a sign-in.

When you choose Family, Supabase stores membership, display names, invitations and the dogs you explicitly share. Shared information includes pet profiles, photos, feeding plans, notes, care and weight records, and route-free walk summaries. Other household members can see shared information and edit shared pet records. Private dogs and structured GPS routes are excluded. The current database region is London, United Kingdom. This service is not end-to-end encrypted; authorised administrators can access server-held data.

Location, Apple services and reminders

GPS recording is optional and may continue during an active walk while the app is in the background. Map displays use Apple MapKit. Optional weather sends coordinates rounded to two decimal places to Apple WeatherKit without Family identifiers, dog names or recorded routes. Forecasts and weather locations stay in memory; the weather preference is saved. Apple explains Weather privacy here.

Local reminders are scheduled on your phone. Where remote walk invitations are available and you opt in, Supabase stores an installation identifier and Apple push token linked to your Family account. Registrations stop being eligible after seven days unless renewed; this is not a promise that stored rows are physically erased after seven days. Turning invitations off requests removal. Lock Screen notifications and widgets can be visible to people holding your phone.

Subscriptions

Apple handles purchases and payment details. Dog Diary checks signed subscription information to provide Plus access and does not receive your card details. Purchases are separate from Dog Diary sign-in. Manage subscriptions with Apple.

Exports and support

A diary export can contain private and downloaded shared records, photos and precise routes. It does not contain Family credentials. Exports and sitter guides are readable copies sent only to destinations you choose; recipients control their copies. Temporary app-created export files become eligible for cleanup after 24 hours on a subsequent launch or export. Copies outside the app are not recalled.

If you contact support, we receive your email and the information you choose to send. We use it to answer your request and handle safety or privacy concerns. Avoid sending unnecessary personal information.

Family safety reports and blocks

When you submit an in-app report, the service stores your account identifier, household identifier, optional reported member, the details you enter and a report reference. Reports are private to authorised BrightLane administrators; other household members cannot read the report queue. No diary or photo is attached automatically. Reports support investigating concerns and enforcing the Family guidelines. Deleting a reporter account removes its reports; references to deleted reported accounts are cleared. Reports have no automatic timed purge at present; contact us for a retention or deletion request.

Blocks store the two account identifiers to prevent those accounts sharing a household. A block remains until reviewed and removed through support, or either account is deleted. Leaving or blocking does not erase completed-care facts from the household. Contact BrightLane to review a block.

Why data is used

We use account and shared-care data to provide the features you request, subscription information to provide paid access, and limited operational/security information to operate and protect the service. Optional features require your choice and relevant device permissions. Where data-protection laws require a legal basis, these purposes involve providing the requested service, legitimate interests in security/support, and consent where required. We do not sell personal data or use it for targeted advertising.

Retention and deletion

Local diary data remains until you remove it. Active Family information remains while the household uses the service. Stopping sharing removes the shared dog content; minimal deletion/version markers may remain to stop an old device from recreating removed records. Invitations, operation receipts and other service metadata are not all governed by an automatic timed purge. Contact us for a retention or deletion request.

Settings → Account → Delete account removes the online identity through the account-deletion service. Owned households are disbanded. In other households, memberships and personal references are removed; shared completed-care facts may remain under “Deleted member”. Eligible records last attributed to the deleting person have notes, photos and vet contact fields scrubbed. This cannot remove every mention in someone else's later edits or recall exported copies. Local private records and Apple subscriptions remain separate. If you used Apple sign-in, remove Dog Diary access in your Apple Account settings after deletion.

The current project has no managed database backup configured. Provider security logs and infrastructure data are subject to the providers' retention practices and may outlast deletion of active app records. We do not promise instant erasure of every provider log or another person's copy. Support correspondence is kept for handling the request and related security or legal needs; contact us to request removal.

Providers and your choices

Supabase provides account/database services, Apple provides platform, maps, weather, purchases and optional notification delivery, Google provides optional sign-in, and Gmail handles the support mailbox and configured email delivery. This information site is hosted on Cloudflare infrastructure; requests may create provider access/security logs. This site adds no analytics or advertising scripts. Providers may process information in other countries under their applicable terms and safeguards.

Depending on your location, you may have rights to access, correct, delete, obtain a copy of, restrict or object to processing of your personal information, withdraw consent, and complain to your data-protection authority. Contact BrightLane to make a request. We may need to verify account ownership without requesting your password. Private diary export is available in the app; it is not a complete export of every server record.

Changes

We will update this page when data practices change. The date below identifies the current notice.