Privacy Policy

Information we collect

We collect the following when you create an account, book, or use the app:

• Identity and contact: full name, email address, phone number.
• Address: street, city, state and ZIP code. Our exact drop-off address is shared with you privately after a booking is confirmed.
• Pet information: name, breed, age, weight, temperament, care and medical notes, veterinarian contact, and photos you upload.
• Stay records: check-in and check-out times, daily reports, photos and notes our team posts, Stories, and walk maps. Walk routes are drawn by our team on a map; we do not track your phone's location.
• Payments and credit: what you paid and how (card payments are processed by Stripe; we never store your full card number), receipts, and your account credit history.
• Messages you exchange with our team in the app.
• Notifications: the history in your notification center, your notification choices and, if you turn on notifications on a device, that device's push subscription (a technical address issued by your browser, plus a short label such as “iPhone · Home Screen app”).
• Booking source (only if you allowed analytics or marketing): how you found us, such as “Google search” or an ad campaign name, the page you first landed on and the type of device. We do not record your browsing on other sites.

How we use it

• To take, confirm, change and cancel bookings and care for your pet.
• To take payments, issue receipts and keep your account credit.
• To keep you informed: emails, in-app notifications and (if you turn them on) push notifications about bookings, payments, messages and stays.
• To answer your messages and support requests.
• To keep accounts and payments secure and to find and fix errors.
• With your permission only: to measure site use and our advertising (see below).
• To comply with applicable Maryland and federal law.

We do not sell your personal information.

Analytics and advertising (your choice)

Nothing optional runs until you choose in the cookie banner or in Cookie preferences (site footer, or Account in the app). You can change your mind at any time; turning something off takes effect immediately and clears the related cookies on that device.

• Analytics — Google Analytics, to see which pages and booking steps people use. Loaded only after you allow analytics.
• Marketing — Google Ads, Meta (Facebook/Instagram) and TikTok, to measure whether our ads lead to bookings. Loaded only after you allow marketing.
• We never send these services your name, email, phone number, address, messages, pet or medical details, or private links. We send page types, booking steps and, for a booking or card payment, the amount and a booking reference.
• Our own team's devices are excluded from these measurements.

Notifications

• Emails about your bookings, payments and account are part of the service. Promotional emails include an unsubscribe link.
• Push notifications are off until you turn them on for a device, and you can turn them off there at any time or choose which kinds you get. They are separate from cookie choices.
• Push messages are delivered through your browser maker's push service (Apple, Google, Mozilla or Microsoft). What appears on your lock screen is deliberately short and never includes names, amounts or care notes; the details open only after you sign in.
• News and offers are off unless you turn them on.

Text messages (SMS)

Text updates are not active yet. When we turn them on, they will be optional and sent only if you opt in.

• We will use your mobile number only to send booking-related messages (confirmations, reminders and updates about your dog's stay) and to reply to texts you send us. Message frequency varies. Message and data rates may apply.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
• We share your number only with our messaging provider (Twilio) to deliver the messages you asked for.
• Reply STOP at any time to opt out, or HELP for help. You can also turn texts off in your account settings.

Service providers

We share only what each provider needs to do its job:

• Stripe — card payments and fraud prevention (stripe.com/privacy)
• Resend — sending our emails (resend.com)
• Vercel — hosting the app and storing profile and pet photos (vercel.com)
• Railway — hosting our database.
• Cloudflare R2 — storing stay photos, reports, Stories and PDFs.
• Mapbox — drawing walk-map images for reports (it receives the route, not who you are). Interactive walk maps load map tiles from OpenStreetMap.
• Google — sign-in with Google if you choose it, the map on our search page, and, with your permission, Google Analytics and Google Ads (policies.google.com/privacy)
• Meta and TikTok — ad measurement, only with your marketing permission (facebook.com/privacy/policy, tiktok.com privacy)
• Chatwoot — the live chat on our public pages, run by BluePawSky on its own server (chatwoot.bluepawsky.com; not used for advertising or analytics).
• Push services of your browser (Apple, Google, Mozilla, Microsoft) — if you turn on notifications.
• Twilio — text messages, only once texts are active and you opt in.

Each provider follows its own privacy policy. We do not allow them to use your data for their own marketing.

Services we no longer use

• Locky, our former AI chat assistant, has been retired. When it was active, messages sent to it were processed by Anthropic. No new messages are sent; past conversations remain in our records and we delete them on request.
• We no longer use Square for invoices. Older payment records may still mention it.

Security and error monitoring

We use encrypted connections (HTTPS), hashed passwords, access controls, and checks so that each person sees only their own bookings, reports, photos, messages and credit. Two exceptions are deliberate: your pet's Stories have a private link you can share, and anyone who has that link can view that Story; profile and pet photos are stored at unlisted web addresses so they can appear in the app and in emails. When something fails we keep a short internal error record with a reference code; personal details are removed from it first. No method of transmission over the internet is 100% secure. If a breach affects your personal information, we will notify you as required by Maryland law.

Your choices and rights

• See and correct most of your information in your account.
• Change cookie, notification and text-message choices at any time.
• Ask for a copy of your information, or for your account and data to be deleted.

Email info@bluepawsky.com. Some records (for example payments) may be kept where the law requires.

How long we keep it

• Account, booking, stay and payment records: for as long as your account is active or as needed to provide services; booking records for at least three years for accounting and legal reasons.
• Notification history: while your account is active.
• Push subscriptions: until you turn notifications off, sign out on that device, or the browser reports the subscription is no longer valid.
• Copies of sent emails kept for delivery retries: 30 days.
• Internal error records: 90 days.

Children's privacy

Our platform is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have, please contact us.