Last updated: April 2026  ·  Version 1.0  ·  iOS and Android

Privacy Policy

This policy explains how Paws.Progress handles your data.

1. Who we are

Paws.Progress is operated by George Hart, acting as a sole trader and the Data Controller for all personal data processed by this app.

• Data Controller: George Hart
• Contact: privacy@pawsprogress.app
• ICO Registration: ICO00013657767

For any privacy-related questions, requests, or complaints, please contact us at the email address above.

2. What data we collect and why

2.1 Data you provide directly

When you use Paws.Progress, you provide the following information:

• Dog name and optional dog photo
• Training session data: date, duration, location tags, behaviour tags, effort rating
• Pillar scores per session: Regulation, Resilience, Reliability, and Responsiveness

We collect only the data necessary to provide the core functionality of the app. This data is stored locally on your device and is not transmitted to us.

2.2 Device identifier (UUID)

On first launch, the app generates a random identifier (UUID) and stores it locally on your device using secure storage. This identifier:

• Is generated entirely on-device — it is never sent to our servers in Version 1.
• Is not linked to your name, email address, or any external account.
• Is used internally to organise your data on-device and will be used as your pseudonymous identifier if you later opt in to cloud backup.
• Is pseudonymous, not anonymous — in combination with other data it could theoretically identify you, which is why it is treated as personal data.

There is no sign-in, account creation, or authentication of any kind in Version 1. The app works entirely locally.

2.3 Cloud backup (future versions — not active in Version 1)

A future version of Paws.Progress will offer optional cloud backup. When this launches:

• We will present a separate, specific consent request before any data leaves your device.
• You will have a genuine choice — the app will remain fully functional without cloud backup.
• This policy will be updated in full to reflect what is stored, where, on what lawful basis, and your rights in relation to that data.

Cloud consent is deliberately excluded from this version of the policy because we cannot accurately describe data we are not yet collecting.

2.4 Crash reporting (optional, Version 1)

If you opt in during onboarding, we collect:

• Anonymous crash reports via Firebase Crashlytics: device model, operating system version, and a technical error log. Your session data is never included.

This opt-in is defaulted to off. You can decline with no impact on app functionality. Your choice can be changed in app settings at any time.

3. Our lawful basis for processing

Under UK GDPR and EU GDPR, we must have a lawful basis for processing personal data. Here is ours for each type:

• Legitimate interests — Device UUID: Generating and storing a UUID is necessary to organise your data on-device and to prepare for optional future cloud sync. We have assessed that this does not override your interests or rights.
• Consent — Crash reporting: You opt in explicitly during onboarding. Defaulted off. Withdrawal of consent is available at any time in settings.
• Consent — Cloud backup (future): Will require a separate, explicit opt-in when this feature launches. This policy will be updated at that point.

4. Data sharing and third parties

4.1 Firebase / Google (crash reporting)

Where you have opted in to crash reporting, these services are provided by Google LLC (and Google Ireland Limited for EEA users) under our Firebase agreement. Google may transfer data to servers outside the UK and EEA. These transfers are covered by Google's Standard Contractual Clauses, approved by the UK ICO and European Commission.

Firebase Authentication is not used in Version 1. When it is introduced in a later version, this section will be updated.

4.2 No sale of personal data

We do not sell, rent, or trade your personal data.

4.3 Legal disclosure

We may disclose personal data if required to do so by law, court order, or a regulatory authority. We will notify you of any such disclosure where we are legally permitted to do so.

5. Data retention

• Local session data: retained on your device until you use the in-app Wipe app data function (in the Danger Zone of your settings) or uninstall the app.
• Device UUID: retained in secure local storage until you use the in-app Wipe app data function or uninstall the app.
• Crash reports: retained by Google per their standard retention periods (typically 90 days for Crashlytics).
• Email correspondence: emails you have sent to us at any @pawsprogress.app address are retained for 12 months unless earlier deletion is requested. See our support page for the addresses we use.

6. International data transfers

If you have opted in to crash reporting, Firebase services operated by Google may process this data on servers located outside the UK and EEA. These transfers are subject to appropriate safeguards — specifically, Standard Contractual Clauses approved by the UK ICO and the European Commission.

In Version 1, your session data and UUID are never transferred internationally — they remain on your device.

7. Your rights

Under UK GDPR (and EU GDPR where applicable), you have the following rights. Our data rights page explains how these apply to Paws.Progress in plain English.

• Right of access: You can request a copy of the personal data we hold about you that we can link to you — in Version 1, that's email correspondence you have sent us. See Section 7.1 for how crash report data is handled separately.
• Right to rectification: You can ask us to correct inaccurate data.
• Right to erasure: You can request deletion of all personal data we hold. In Version 1, your session data lives entirely on your device — you can wipe it instantly using the in-app Wipe app data function (in the Danger Zone of your settings).
• Right to restrict processing: You can ask us to pause processing of your data in certain circumstances.
• Right to data portability: In Version 1, all your session data is stored locally on your device — you have direct access to it at all times. Because we are not a controller of that data, Article 20 portability has nothing to act on in our direction. Derived data such as scores, trends, and ratings calculated by the app is not in scope of Article 20.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (crash reporting), you can withdraw at any time in app settings with immediate effect.

To exercise any of these rights, contact us at privacy@pawsprogress.app. We will respond within 30 days. There is no charge for making a request.

7.1 A note on crash report data

Crash reports are linked only to an anonymous installation identifier generated and managed by Google. That identifier is not your app's internal UUID and is not linked to your name, email, or anything else we or you know about you. We have no way to identify you within Firebase Crashlytics data.

Under UK GDPR Article 11, where a controller cannot identify a data subject, we are not required to re-identify you solely to fulfil a data rights request. We cannot send you a copy of crash data relating to your use of the app, because we cannot identify which reports are yours.

If you would like crash report data relating to your use of the app deleted, email privacy@pawsprogress.app with the approximate dates you used the app. We will submit a date-range deletion request to Google covering that period. This deletes all crash data from that window, including yours.

8. Children

Paws.Progress is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided data through this app, please contact us and we will take steps to delete it.

Users in EU member states where the age of digital consent is set higher than 13 (up to 16) should ensure they meet the applicable age threshold before using the app.

The app does not include an age gate in Version 1. Given the subject matter — professional dog training session tracking — we consider the risk of underage use to be low.

9. Security

We take reasonable technical measures to protect your data:

• Your UUID is stored in secure local device storage.
• In Version 1, your session data and UUID never leave your device — the attack surface is limited to your device itself.
• No passwords, authentication tokens, or credentials of any kind are stored in Version 1.

No system is perfectly secure. If you become aware of a security concern related to Paws.Progress, please contact us immediately at privacy@pawsprogress.app.

10. Changes to this policy

We will update this policy from time to time. How we notify you depends on the nature of the change:

• Routine updates (new third-party services, clarifications, contact changes): we will notify you via an in-app banner on your next session.
• Material changes (changes to what data is collected, how it is used, or where it is stored): we will present a mandatory review screen before you can continue using the app.

The 'Last updated' date at the top of this policy reflects when it was most recently revised.

11. How to complain

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the relevant supervisory authority:

• UK users: Information Commissioner's Office (ICO) — ico.org.uk — 0303 123 1113
• EU users: Your local Data Protection Authority — edpb.europa.eu

We would always prefer the opportunity to address your concern directly first. Please contact us at privacy@pawsprogress.app before escalating to a regulator.

---

This policy applies to Paws.Progress Version 1. It will be updated in full prior to the launch of cloud backup, user accounts, or any data sharing features.