Privacy Policy

13. PawPulse App: Social, Moderation, Prism AI, and Analytics

This section adds detail for the PawPulse mobile app. Use of the app is also governed by our App End User License Agreement.

Social Content And Audiences

Social features are for users 18 and older. When you post, you choose who can see it. Family Only is the default and shows the post only to family members you have added. Followers shows it to people who follow you. Public shows it to anyone using PawPulse Social. Video posting is not available in Social. You can delete your posts at any time. Deleting a post hides it immediately. Its stored copy and media are removed when you delete your account or ask us. People who can see a post may screenshot or share it outside the app. Post photos and profile pictures are stored privately. The app loads them through short-lived links, and only people allowed to see the post or profile can open them.

Reports And Blocks

You can report a post, comment, or profile. We store the report, the reason and any details you add, what the report is about, and the review outcome. We do not tell the other user who reported them. When three different people, from accounts at least 24 hours old, report the same post or comment, it is hidden automatically until our team reviews it. Our team reviews reports and acts on them within 24 hours, as our EULA states, and prioritizes safety reports. It can restore content, remove it, or ban the account that posted it. A banned account cannot post, comment, like, or follow. When you block someone, we store the block. It works both ways: you and that person stop seeing each other's posts, comments, profiles, and leaderboard entries, and neither of you can follow, like, or comment on the other's content. You can unblock people in the app.

Automated Moderation

To keep the community safe, the text and photos of posts and post edits, comments, profile names, bios, and pictures, and leaderboard pseudonyms are sent to OpenAI's moderation service before they appear. It checks them for content such as harassment, hate, sexual content, violence, and self-harm. Content that the check flags is not published. If the check is unavailable, nothing is published until it works again. When content is blocked, we keep a record of which categories were flagged, not the content itself. OpenAI may keep this data for up to 30 days for safety monitoring and does not use it to train its models.

Prism AI

Prism AI is for users 18 and older. If your question looks like an emergency, Prism shows a fixed message telling you to contact your vet or an emergency animal clinic now, and your question is not sent to OpenAI. Some other questions Prism cannot help with also get a fixed reply without being sent to OpenAI. Otherwise, your question is first checked by OpenAI's moderation service. We then send your question and a summary of your pet's wellness data (your pet's species, breed, life stage, sex, weight, and indoor or outdoor status where you have set them, 7-day and 24-hour averages and trends of the collar's readings, and the latest daily wellness metrics, such as rest quality, sleeping breathing rate, mobility, grooming, and heat risk) to OpenAI to generate an answer, and the answer is checked by the moderation service before you see it. We call OpenAI's API with data storage turned off (store: false). OpenAI may keep this data for up to 30 days for safety monitoring and does not use it to train its models. We do not send your pet's name, your email address, or payment details to Prism AI.

We store Prism's answers so you can see your history, but we do not store the text of your questions. Each account has a daily question limit, so we keep a daily count of your questions and their cost. You can report any Prism answer, and we record that you reported it so we can review it. Prism AI answers are general wellness information, not veterinary advice.

Consent Receipts And Withdrawing Consent

Before you first use Social features, Prism AI, or leaderboards, the app asks you to confirm your age where required and to agree. For Social and Prism AI, the consent screen names OpenAI and explains what data is sent to it and why. Nothing is sent to OpenAI for that feature until you agree. We keep a consent receipt that records which feature, which version of the terms, your app version, and when you agreed or withdrew. You can withdraw consent at any time by turning the feature off in the app's Settings or by contacting us (see Section 12). Withdrawing consent stops new processing for that feature, and you will not be able to post, appear on leaderboards, or use Prism AI until you agree again. Your existing posts stay until you delete them or your account, and Prism answers stay until you delete your account or ask us to delete them. Withdrawing does not undo processing that already happened.

Usage Analytics

The app records usage events, such as screens viewed, time on screen, session length, how long key tasks take, and your Light or Dark look setting, so we can improve the app. These events are linked to your account but do not include pet names, vital readings, or your email address. You can turn usage analytics off at any time in Settings > Privacy by switching off Look Test Data, the setting that shares which screens you use and for how long. It is on by default. Usage events are kept while your account is active and deleted with your account; we plan to trim events older than 180 days. We do not sell app usage data or use it for targeted advertising.

Leaderboards And Location

Leaderboards are opt-in. If you join, other users see a pseudonym (by default, your pet's name plus a short suffix), your pet's breed, and your points, achievement, and challenge counts. We use city-level location only, and your city is shown only if you choose to show it. We do not show your precise location or address. People who have blocked each other do not see each other on leaderboards. You can leave leaderboards at any time in the app's Settings.

Account Deletion

You can delete your account in the app's Settings or by contacting us. The deletion is scheduled for 7 days after you ask, so you can cancel it during that time, and we complete it within 45 days. Deleting your account deletes your posts, media, comments, profile, blocks, consent receipts, Prism AI conversations, leaderboard profile, Notify Me choices, and app usage events, along with your other account data, and the three-year retention periods in Section 5 do not apply to that data. A few records stay, no longer linked to your account: transaction records required for accounting and tax law; reports, moderation outcomes, and records of blocked submissions needed to prevent repeat abuse or meet legal obligations; feature requests; a record that the deletion happened; audit logs of veterinarian access to shared data; and raw sensor readings, as described in Section 5. Copies in backups are overwritten as backups cycle out.

App Processors

The app relies on these service providers, each processing data only to provide its service to us: Supabase (database, authentication, and file storage), OpenAI (automated moderation and Prism AI), Firebase and Apple TestFlight (app distribution, crash reporting, and troubleshooting), Sentry (crash and error reports, unless you turn off Crash Reports), Firebase Cloud Messaging and the Apple Push Notification service (notifications), Apple and Google (sign-in, if you choose it), Google Maps (maps), and Resend (transactional email). The other providers listed in Section 3.1 support our website, orders, and email. We choose providers whose terms require them to protect personal data, use it only to provide services to us, and not use it for their own purposes, including training AI models.

No Sale Or Advertising Use Of App Data

We do not sell personal information collected through the app, and we do not share it with third parties for cross-context behavioral advertising. We do not use social content, Prism AI conversations, or pet wellness data for advertising.

California Residents

If the California Consumer Privacy Act applies to you, the categories of personal information we collect through the app are identifiers and account details, social content and media you post, pet wellness and device data, Prism AI conversations, feature requests and Notify Me choices, app usage information, city-level location if you join leaderboards, and consent records. We use them for the purposes in Section 2 and this section, disclose them as described in Section 3, and keep them for the periods in Section 5. You have the right to know, access, correct, and delete your personal information, and we will not treat you differently for using these rights. You may use an authorized agent. We verify requests by matching them to your account before acting. See our CCPA page for how to submit a request.

14. Viking Dog Park

This section explains information used by the Viking Dog Park. Its park-specific descriptions and retention details apply to park data instead of the general product and account descriptions above. Features available to you depend on which park features are enabled.

Signup And Saved Gameplay

Adding a dog collects your email address, optional owner name, dog name, and chosen breed. Every dog has an owner record in our shared signup system, whether or not you choose launch news. This record stores the pet name, species, and breed, signup number and time, signup source, consent source and time, email verification status, and email preferences. Where supplied, it records referral identifiers, campaign attribution, and launch-interest preferences. We use this information to create and restore your dog, send service emails and opted-in launch news, understand referrals, and prevent abuse.

Supabase stores dog and signup records, including dog identifiers, assigned zones, virtual spawn positions, creation times, and referral counts. Saved gameplay can include virtual steps, Hacksilver earned and spent, relic finds and rarity, dig times and daily counters, tokens, equipped and owned cosmetics, and reward timestamps. Trials send virtual movement samples, jump states, checkpoint and run identifiers, and course versions for validation. We store checkpoint times, movement summaries and sampled path shapes, completion times, best results, rewards, and suspected-cheating flags or reasons. Co-op rewards store dog and trial identifiers, a unique reward receipt, the result, and award time to prevent duplicate rewards. These are game actions and positions, not your real-world movements or location.

Earlier park features have storage for achievements, milestone dogs, accessories, zone visits, photo counts, share attempts and methods, reactions, featured dogs, and moderation reports. Those older feature endpoints are currently unavailable in this park. A stored report can contain the dog identifier, reason, a hash of the reporter's IP address, review status, and timestamps. Contact us by email to report an inappropriate name or other concern. Automated name checks reject some offensive names but do not catch every problem.

What Other Visitors Can See

Your dog's name, breed, identifier, zone and virtual position, tier, equipped cosmetics, virtual step total, Hacksilver earned, token total, number of different relics, and best find rarity may be public through park displays and public data responses. Your dog may appear even while you are away. The current public park responses do not include your email address or optional owner name. Do not put private information in a dog name. Other visitors can capture or share what they see.

Cookies And Browser Storage

Confirming an emailed claim link sets the pp_dog_token cookie, containing a dog identifier, email hash, signed expiry, and signature. It lasts up to one year and authorizes access to your dog. It is HttpOnly, SameSite=Lax, and Secure in production. Live guests receive a signed pp_live_guest cookie lasting up to one day to reconnect as the same guest. An emailed claim link is an access credential; keep it private.

Browser local storage remembers:

• pp_park_my_dog: your dog identifier, name, and breed.
• pp_park_spot:*: a dog's last virtual position and save time. Positions older than seven days are ignored when resuming.
• pp_park_saga_v1: discoveries, event times, loot, steps, and points saved on this browser.
• pp_park_friends: identifiers, names, breeds, and last party times for up to 30 dogs you partied with.
• pp_park_quality, pp_park_tip_warp, pawpulse.dev-note.dismissed, and pp_park_saehrimnir: graphics choice, tutorial and notice state, and a daily gameplay marker.
• pawpulse_feature_flags: cached feature settings, where used.
• pawpulse_first_visit, pawpulse_dog_park_session_id, and pawpulse_dog_park_visitor_id: first-visit time and identifiers for visit and return analytics. Both identifiers use local storage and can persist across visits.

Development previews may also read pp_park_equipped for cosmetic previews. Earlier park versions used pawpulse_email, pawpulse_pending_pet_signup, and pawpulse_zones_visited for email, pending pet signup, and visited zones, plus pawpulse_fps_degraded in session storage for performance fallback. Those values may remain on a browser that used them. You can clear cookies and site storage in your browser. Doing so may remove local progress and access, but does not delete server records or unsubscribe you from email.

Live Multiplayer

When live play is enabled, Cloudflare's park-live Worker and Durable Objects process your dog or guest identifier, name, breed, membership status, tier, cosmetics, room, virtual position, direction, poses, rides, and fixed emotes. They relay relevant details to other visitors so dogs can play together. Room news can announce a dog's name, rare finds, tier changes, and co-op results. Parties and invitations share dog identifiers, names, breeds, and rooms; dogs that partied together can look up each other's live room. The relay has no free-text chat and does not receive your email or optional owner name. It processes an IP hash and movement or rate violations for abuse prevention.

Current connection state is held with the live socket. After disconnect, movement and enforcement state is retained for about 60 seconds and removed by periodic cleanup. Room presence leases expire after 90 seconds without renewal. Parties expire after five minutes without a check-in; party and friendship lists in the relay are held in memory and can disappear on restart. Co-op cooldowns last ten minutes; expired cooldown records are cleaned up when later rewards are issued. Co-op reward receipts in Supabase are separate and follow the park retention periods below.

Photos, Clips, And Sharing

Photo Mode and Clip It create images and videos of the virtual park locally in your browser. The park does not upload those media files to PawPulse. Files can include public dog names, appearances, and the park soundtrack. If you download a file, it stays on your device; if you share it, your chosen app or service receives it under its own privacy practices. We can record capture, download, and sharing actions as analytics events without receiving the captured image or video.

Waglist And Email

Joining the PawPulse Waglist for launch news is optional. The signup checkbox, "Send me PawPulse launch news (optional)", is unchecked by default. For a new signup, leaving it unchecked records no marketing consent and does not create or sync a Sequenzy subscriber or send marketing or launch emails. Checking it records your consent and signup source. Existing subscribers keep their prior preferences; adding a dog does not undo an unsubscribe. If you opt in, Sequenzy processes subscriber and event details such as email, signup source and number, pet species and breed, verification and launch-interest status, referral identifiers, and signup risk or engagement scores. Dog claim emails use the dog's name and an access link for returning to the park, regardless of marketing choice. Resend handles verification, park-only claim emails, and other transactional messages, using your email and, where provided, owner or dog name. For subscribers, the Sequenzy welcome may include the claim link. Email verification and dog return or claim links needed to operate the park may be sent even when you do not choose marketing. Verifying your email does not opt you in. We record verification and subscription preferences. Email event records can include email address, provider, event type, message identifier, and provider-supplied metadata about delivery, opens, clicks, bounces, and unsubscribes. Engagement events may also be sent to Sequenzy for opted-in subscribers to coordinate communications.

Use the unsubscribe link in a marketing email to stop those messages, or email dogpark@pawpulse.ai for help stopping PawPulse launch news. Unsubscribing does not itself delete your dog or gameplay records. We keep subscription preference records to manage email choices.

Analytics, Security, And Service Providers

The production website loads Google Analytics 4, Microsoft Clarity, and Vercel Analytics. These services process visit, device, and interaction information; Clarity supports session replay and interaction analysis. Park events include visits and returns, gameplay interactions, signup outcomes, selected breeds, discoveries, and photo or clip actions. Our Supabase funnel records can include session and visitor identifiers, dog and referral identifiers, hashed email, campaign and source information, event context, and timestamps. We also store operational events such as request outcomes, response times, and error reasons. Sampled website performance measurements, route, viewport dimensions, connection type, and timestamps are sent to our server logs.

Vercel hosts the website and processes requests. IP addresses and browser information are used for rate limits and signup risk checks, with Supabase and, when configured, Upstash Redis. Cloudflare Turnstile receives a verification token and IP address for bot checks and processes browser challenge information. Hidden form fields help reject automated submissions. The park uses Vercel's IP-derived country information to restrict regional access; it does not request your browser's precise location. Park models, textures, and audio can be served from this website or a configured Cloudflare R2 CDN; pawpulsecdn.com also serves site images. Asset hosts receive the network requests needed to deliver those files. These providers, together with Sequenzy and Resend, process information for the functions described here under their own applicable privacy terms.

Retention And Deletion Requests

We complete deletion requests within 45 days of receiving them. We delete park data within 90 days after an account has been inactive for 12 months or after the park is discontinued. Trial path-shape records older than 30 days are removed when trial-start cleanup runs; this is not a promise of deletion at an exact time. Co-op reward receipts are retained within these periods so the same reward cannot be claimed twice. Local browser records generally remain until cleared, replaced, or removed by your browser.

To delete your dog and associated personal data, email dogpark@pawpulse.ai from the signup address and identify the dog. Requests are handled manually; we may need to verify ownership. There is no in-park delete button. Tell us if you also want to stop marketing emails. Clear site storage on each device to remove local copies. Copies that you or other visitors shared through outside services are controlled by those services and recipients.