This Privacy Policy explains how Off Leash ("Off Leash", "we", "us", or "our") collects, uses, shares, and protects information when you use the Off Leash mobile application and related services (the "App"). It also describes your privacy rights and how you can exercise them.

By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Who We Are and How to Reach Us

Off Leash provides this App. We are the controller of the personal information processed through the App. You can contact us about this policy or your data at any time at support@off-leash.dog.

2. Information We Collect

We collect the categories of information described below. We only collect what we need to operate the App and to provide the features you use.

Account & profile information

Email address, display name, and (if you create one with a password) a password, which we never see in plain text.
If you sign in with Apple or Google, the identifier and email address those providers share with us. We do not import your profile photo from Google.
Optional profile details you choose to add, such as an avatar photo and a short bio.

Pet information

Information about the dogs you add — name, breed, age, size, temperament tags, play style, photos, and any notes you choose to include.
Information about other people you grant access to a dog (a co-owner or sitter), and the duration of that access.

Location information

When you use map, discovery, and check-in features, we use your device's current location to show nearby parks and to record a check-in's park.
If you opt in to Auto Check-in, the App also uses background ("Always") location to monitor a small list of geofence regions around parks you have previously visited, so we can offer a one-tap check-in when you arrive. We do not continuously track your location and we do not log your historical location coordinates.

Activity & social information

Check-ins (which park, when, with which of your dogs, optional note, planned vs active state), pack connections you accept or request, QR codes you scan to connect, park photos and park information updates you contribute, dogs you hide your activity from, and users you block.
Messages you send to other users through the App. Messages are stored on our servers so we can deliver them and so both participants can see their conversation history.

Device & technical information

Device model, operating system version, app version, and an approximate region inferred from your IP address when you connect to our servers.
A push notification token issued by Apple Push Notification service, used to deliver notifications. We delete this token when you sign out of the App or delete your account.

Diagnostics

Crash reports and error events captured by Sentry. These contain stack traces, the action you were taking, your account identifier, and basic device data. They do not contain your messages, photos, or precise location.

Reports, feedback, and support communications

Reports you submit about other users, dogs, or park information, and the content you are reporting.
Feedback and bug reports you submit through Settings → Send Feedback. App version, build number, platform, and device model are automatically attached so we can reproduce issues.
Emails or other messages you send us when you contact support.

3. How We Use Your Information

We use the information we collect to:

Provide and operate the App — show nearby parks, deliver check-ins, pack connections, messaging, and notifications.
Authenticate you, keep your account secure, and recover your account if you forget your password.
Personalize your experience based on the dogs in your profile, your pack, and your notification preferences.
Detect, investigate, and prevent abuse, fraud, security incidents, and violations of our Terms.
Diagnose crashes and bugs, measure the reliability of the App, and improve features.
Respond to your requests, support inquiries, and reports you submit through the App.
Comply with our legal obligations and enforce our Terms.

4. Legal Bases for Processing (EU/UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

Performance of a contract — to provide the App and the features you request.
Consent — for location access, push notifications, camera and photo library access, and any optional features you turn on. You can withdraw consent at any time through device or in-app settings.
Legitimate interests — to keep the App secure, prevent abuse, debug crashes, and improve features, in a way that does not override your rights.
Legal obligations — when we are required by applicable law.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described below.

With other users of the App

Your dog's profile (name, breed, photos, the details you choose to share), your display name and avatar, your check-ins, and any park photos or information you contribute are visible to other signed-in users.
Aggregated, anonymous counts of dogs currently checked in at a park may be visible to signed-out visitors. No pet or owner details are shown until sign-in.
Messages you send are visible to the other participant in the thread, and to any other co-owner of the dog you are messaging from. Messages are not visible to anyone else.
If you hide your activity from a specific user or block them, your check-ins and messages are filtered accordingly. Blocking is mutual: a blocked user cannot message you or see your activity.

With service providers we use to operate the App

Supabase — hosting, database, authentication, file storage, and realtime messaging infrastructure. Supabase processes account, profile, pet, check-in, message, and notification data on our behalf.
Apple — Sign in with Apple authenticates you and shares an identifier (and, on first sign-in, the name and email you choose to share). Apple Push Notification service delivers iOS push notifications.
Google — Sign in with Google authenticates you and shares your basic profile (Google user ID and email).
Mapbox — serves map tiles and park hero imagery. Mapbox receives standard request data (IP address, approximate location, user-agent) when the App requests tiles.
Sentry — receives crash and error reports as described above so we can fix bugs.
Expo / EAS — builds, deploys, and (when used) over-the-air updates of the App.

For legal, safety, and protection reasons

We may share information when we believe in good faith that it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; to detect or prevent fraud, abuse, or security issues; or to protect the rights, property, or safety of Off Leash, our users, or the public.

In a business transaction

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in control or use of your data.

6. Location Information in Detail

Off Leash asks for two distinct levels of location access on iOS:

"While Using" — used to show nearby parks on the map and to record the park you are checking in to. This is the minimum we need to operate the core of the App.
"Always" — only used if you opt in to Auto Check-in. We monitor a small set of geofence regions around parks you have previously visited; iOS notifies the App when you enter one so we can offer a one-tap check-in. The App does not log a stream of your locations.

You can change either permission at any time in iOS Settings → Off Leash → Location. Turning off "Always" disables Auto Check-in.

7. Push Notifications

We send push notifications for activity that matters to you — messages, pack requests, check-ins by people in your pack, and occasional service messages. You can choose which categories to receive in Settings, set Quiet Hours, or turn notifications off entirely in iOS Settings → Off Leash → Notifications. Your push token is deleted when you sign out or delete your account.

8. Photos and Camera

The App asks for camera and photo library permission only when you tap an action that needs them — taking a photo of your dog, uploading a park photo, or scanning a connect QR code. We do not scan your library; we only see the specific image you select or capture.

9. Cookies and Similar Technologies

The App itself does not use web cookies. We store a small amount of data on your device to keep you signed in (in the iOS Keychain, hardware-protected by the Secure Enclave on supported devices) and to cache content so the App opens quickly. You can clear this by signing out or by deleting and reinstalling the App.

10. Data Retention

We keep your personal information for as long as your account is active, and for a limited period afterward only as needed to comply with legal obligations, resolve disputes, prevent abuse, or enforce our Terms.

Account deletion is immediate and irreversible. When you delete your account in Settings → Delete Account, your profile, pets, check-ins, pack connections, park contributions, push tokens, and feedback are removed from our active systems.
Messages you sent remain visible to the other participant in their copy of the conversation, but are no longer associated with an active account.
Reports you submitted and reports submitted about you may be retained for safety and abuse prevention.
Backups and Sentry diagnostic data may persist on a short rolling window (typically up to 90 days) before being overwritten.

11. Security

We use industry-standard practices to protect your information, including TLS for data in transit, encryption at rest for the database and storage layer, hashed passwords, row-level security on all tenant data, server-side authorization checks on every request, and Keychain-backed session storage on iOS (hardware-protected by the Secure Enclave on supported devices). No system is perfectly secure, but we work hard to keep yours safe and to respond quickly if something goes wrong.

12. International Data Transfers

We are based in the United States and our service providers (including Supabase) primarily process data in the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home country. Where required, we rely on Standard Contractual Clauses or other appropriate safeguards for international transfers.

13. Your Choices and Controls

Profile and pet data — edit or remove anything you've added from your Profile and pet screens at any time.
Hide your activity — from specific people in Settings → Privacy, on the Pack tab, or directly from another dog's profile.
Block a user from the same places. Blocking stops them from messaging you and hides your activity from them.
Notifications — choose which types to receive and set Quiet Hours in Settings → Notifications.
Auto Check-in — turn on or off in Settings → App; muting per park is supported.
Export your data — get a JSON copy via Settings → Account → Export My Data.
Delete your account — permanently and immediately via Settings → Delete Account.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request a copy of that information, to request its deletion, to correct inaccurate information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

We do not "sell" or "share" your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. You can exercise the right to delete in-app via Settings → Delete Account, the right to data portability via Settings → Export My Data, and any other right by contacting support@off-leash.dog. You may use an authorized agent to submit a request on your behalf; we will ask the agent to provide proof of authorization and ask you to verify your identity.

15. EU/UK Privacy Rights (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, erase, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw any consent you have given. Where processing is based on legitimate interests, you may object at any time.

You can exercise data portability in-app via Settings → Export My Data. To exercise other rights, contact support@off-leash.dog. You also have the right to lodge a complaint with your local supervisory authority.

16. Children's Privacy

Off Leash is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at support@off-leash.dog and we will delete the information promptly. In some jurisdictions a higher age of digital consent applies, and we will not collect personal information from anyone below that age without verifiable parental consent.

17. Third-Party Links and Services

The App may contain links to or integrate with third-party services. We are not responsible for the privacy practices of those services. Please review their policies before using them.

18. Changes to This Policy

We may update this policy as the App evolves or as required by law. When we make a material change, we will update the "Effective" date at the top of this page and, where appropriate, notify you in the App or by email. Your continued use of the App after the effective date constitutes acceptance of the updated policy.

19. Contact Us

If you have questions, concerns, or requests about this policy or your information, contact us at support@off-leash.dog.