Privacy Policy

This Privacy Policy explains how Reelygood S.R.L. handles information through the Buddylio mobile app, buddylio.com, Story Club, free guides, paid digital products, and the personalized Story Book service. The App and the Website work differently, so this Policy explains them separately.

1. Data Controller

Reelygood S.R.L. is the data controller for Buddylio. For any privacy question or request, email support@buddylio.com or write to Buddylio, 849 N Lake Ave PMB 264, Pasadena, CA 91104, United States.

2. The Short Version

• In the App: Your dog's profile, check-ins, photos, notes, medications, weight, and vet entries stay on your device. We don't receive that content.
• On the Website: We receive information you choose to send so we can deliver emails, save Story Club preferences, process purchases, create a personalized Story Book, answer support requests, and protect the Website.
• No data sales: We don't sell personal information or share it for cross-context behavioral advertising.
• No advertising profiles: Buddylio doesn't build advertising profiles from your App or Website activity.

3. Information Stored in the App

The following types of information may be entered by you and stored locally within the App on your device:

• Your dog's name, age, breed, and similar profile details
• Daily wellness check-ins (appetite, mobility, comfort, energy, mood, sleep)
• Weight entries
• Medication entries and reminders
• Photos you choose to add
• Walks, vet visits, notes, and any other content you enter

This information remains on your device. It isn't transmitted to us or to any third party by the App.

4. Device Backups

If you've enabled backups on your device through Apple iCloud or Google services, your App data may be included in those backups. On iOS, Buddylio can create a private iCloud recovery backup. On Android, Buddylio data can be included in Android Auto Backup tied to your Google account. These backups are managed by Apple or Google according to their respective privacy practices and aren't accessible to us. You may review or disable these backups in your device settings.

5. Anonymous Diagnostics and Analytics

The App uses two Google Firebase products for stability and usage understanding:

• Firebase Crashlytics receives anonymous crash reports if the App crashes. Each report includes a randomly generated install identifier, the App version, the build number, the platform, and the system stack trace. No dog names, notes, photos, medication names, weights, scores, vet contact details, or other content you entered into the App are sent.
• Firebase Analytics receives a small set of allow-listed anonymous events (for example: app opened, dashboard viewed, check-in saved, quick log saved, or Veterinary Summary generated) together with bucketed parameters such as platform, App version, install identifier, and a coarse "days since install" bucket. The contract is published in our source repository as spec/telemetry-contract.yaml. A sanitizer drops any parameter that isn't on the allow list, drops any string longer than 50 characters, and drops any blocked PII parameter (dog names, breed, notes, medication names, dosage, weights, exact scores, raw axis values, location, IP, advertising identifiers, photos, vet contact details, transaction IDs, receipts, or purchase tokens).

Both products are on by default and can be turned off at any time inside the App under Settings → Privacy. Turning them off stops new anonymous events from being sent for the rest of the device's use of the App.

The App does not use Firebase Authentication, Firestore, Storage, Cloud Messaging, or Remote Config. The App does not collect personal identifiers, contact details, location data, browsing history, advertising identifiers, or behavioral profiling. The App does not contain advertising. The App does not share data with data brokers.

5a. Bot Protection (Firebase App Check)

The App uses Firebase App Check to confirm requests originate from a legitimate copy of the App, not from a bot. On iOS this uses Apple's App Attest; on Android it uses Google Play Integrity. App Check generates device-level tokens that don't contain personal information and aren't linked to your in-App data.

6. Email Signups, Free Guides, and Story Club

When you request a free guide, join Story Club, or sign up for Buddylio emails, we send your email address, signup source, and the email group you selected to MailerLite. MailerLite stores that information and sends the emails you requested. Story Club sends two short dog stories each week. You can unsubscribe at any time using the link in an email.

We use Resend to send one-time or transactional messages, such as your first story, a guide delivery email, a purchase confirmation, or a secure Story Book questionnaire link. For ordinary delivery messages, Resend receives your email address, the message content, and delivery metadata needed to send and troubleshoot the email.

MailerLite and Resend act as service providers for these purposes. You can read their policies at MailerLite Privacy Policy and Resend Privacy Policy.

7. Story Preferences

If you choose to answer the optional questions after joining Story Club, we save the selections to your MailerLite subscriber record. Depending on what you choose, those fields may include your dog's life stage or age range, whether you want help with puppy routines, behavior, walks, settling in, medication or vet organization, senior comfort, rescue adjustment, or whether you're remembering a dog you lost. These are fixed-choice fields, not free-form notes.

We use these preferences to show a relevant guide and to keep future Buddylio emails aligned with what you asked for. You can skip the questions. Skipping them does not affect your Story Club subscription.

8. Personalized Story Book Orders

After a confirmed Story Book purchase, the secure questionnaire asks for the information needed to create the book. This may include your email address, your name, your dog's name, nickname, age, breed or mix, personality, routines, memories, dedication, preferred tone and title, photo captions, and up to ten photos. The questionnaire also sends the Stripe session identifier used to confirm that the order was paid.

The answers and photos are sent through Resend to the private Buddylio order inbox. We use them only to create, review, revise, deliver, and support your Story Book order. They are not added to MailerLite, used for advertising, or sent to Firebase Analytics.

Please upload only content you have the right to use. If a photo or story includes another person, you are responsible for having permission to include it in your book.

9. Website Analytics, Hosting, and Security

The Website may use Firebase Analytics to understand anonymous page views, form outcomes, and which marketing campaign a visit came from. We don't send email addresses, dog details, notes, exact locations, payment data, or free-form text to Firebase Analytics. We may send campaign labels such as UTM parameters and a non-identifying flag showing whether an ad-click parameter was present, but we don't send raw click identifiers. If your browser sends Global Privacy Control or Do Not Track, the Website doesn't initialize Firebase Analytics.

Vercel hosts the Website and its server-side functions. Managed Redis or key-value storage supports one-time form tokens and rate limits. These services may process technical request data such as IP address, browser user agent, requested URL, timestamp, one-time token, and security events. We use that information to deliver the Website, prevent spam and fraud, diagnose failures, and protect the service.

10. App Subscriptions and Website Payments

The Buddylio app is free to use. It has no in-app purchases or subscriptions, so we do not process any app payment information.

Stripe processes purchases made on the Website. Stripe receives the payment, contact, device, and transaction information needed to complete the payment, prevent fraud, and confirm the order. Buddylio receives the buyer email, product, amount, payment status, and Stripe session identifier needed to deliver and support the purchase. We don't receive or store your full card number. Stripe handles payment information under its Privacy Policy.

11. Why We Process Information

Where data protection law requires a legal basis, we rely on:

• Your consent for Story Club, free-guide follow-ups, marketing emails, and optional Story Preferences. You may withdraw consent at any time by unsubscribing or contacting us.
• Performance of a contract to process a purchase, deliver a digital product, create and revise a Story Book, and provide order support.
• Our legitimate interests in operating and securing the Website, preventing abuse and fraud, understanding non-identifying Website use, and answering support requests, where those interests are not overridden by your rights.
• Legal obligations for accounting, tax, payment, consumer-protection, and dispute records where applicable.

12. How Long We Keep Information

• App content: It stays on your device until you delete it or remove the App. Apple or Google backups follow the settings and retention rules of your account with them.
• Email subscriptions and preferences: We keep them while you are subscribed. After you unsubscribe, we may retain a limited suppression record so we can honor your choice. You may ask us to delete the remaining subscriber profile.
• Story Book content: We keep answers, photos, proofs, and order correspondence while the book is being produced and supported. Our standard retention period is up to 90 days after final delivery, unless we need a limited record longer to handle a dispute or comply with law. Provider backups may remain for a limited period under the provider's retention schedule.
• Purchases: We keep transaction and order records for the period required for accounting, tax, fraud prevention, chargebacks, and legal claims.
• Support messages: We keep them as long as reasonably needed to answer the request and maintain an appropriate support record.
• Security data: One-time form tokens and rate-limit records are short-lived. Hosting and security logs follow our providers' operational retention schedules.

13. International Processing

Reelygood S.R.L. is based in Romania, and our service providers may process information in the European Economic Area, the United States, and other countries where they operate. When required, transfers use recognized safeguards such as contractual data-protection terms. You can contact us for more information about the safeguards that apply to your information.

14. Your Choices and Rights

Because we don't hold your App content on our servers, you control it from your device. You may delete App data using the in-app Delete Data function. Deleting the App removes local data from that device. Apple or Google backups are controlled through your account with them.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; and lodge a complaint with a data-protection authority. California residents may also have rights to know, delete, and correct personal information and to receive equal service when exercising those rights. We don't sell or share personal information as those terms are defined for cross-context behavioral advertising.

To unsubscribe from email, use the link in the message. For any other request, email support@buddylio.com. We may need to verify that the request belongs to you before acting on it.

15. Children's Privacy

Buddylio is intended for adults aged 18 and over. We don't knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can review and remove it where appropriate.

16. Security

We use administrative and technical safeguards designed to protect information handled through the Website. No online service or email system can guarantee absolute security. For App content stored on your device, we recommend using an up-to-date operating system, a passcode or biometric lock, and encrypted backups.

17. Changes to This Policy

We may update this Privacy Policy as Buddylio changes. The date at the top shows the latest revision. If a change materially affects how we use information, we'll provide an appropriate notice through the App, Website, or email.

18. Contact

For any question, concern, or privacy request, email support@buddylio.com.