Privacy policy

Effective date: October 16, 2026

This privacy policy explains how Wuffl (“Wuffl”, “we”, “us”) handles your information when you use the Wuffl mobile app, the website at wuffl.app and the caregiver pages we host. The Wuffl app helps you store your pet’s care information and share it with the people who look after your pet.

If you have a question, or want to use any of your privacy rights, email privacy@wuffl.app.

Summary

• We collect what you put into Wuffl (your account and your pets’ care information) and a limited amount of technical data to run the app.
• We don’t sell your data, show ads or use your data for advertising.
• We share data only with the service providers that run Wuffl (mainly Google Firebase and RevenueCat), with the people you choose to share with, and where the law requires it.
• You can delete your account in the app or by email. Your data is erased 14 days later. See Delete your account.

Information you give us

Your account. When you sign up we receive your email address and, if you choose to provide them, your name and profile photo. You can sign in with:

• Email and password. Your password is handled by Firebase Authentication. We never see or store it in plain text.
• Google. Google shares your name, email address and profile photo with us.
• Apple. Apple shares your email address (or a private relay address if you choose to hide it) and, if you allow it, your name.

Your pets. You choose what to add. This can include:

• Profile details: name, species, breed, date of birth, sex, photo, microchip number, traits, care notes and behaviour notes.
• Routines: feeding, medication (including dosage and refill dates), walks, house rules and their times.
• Health records and documents, such as vet records and vaccination records, with any files, photos or scans you attach.
• Symptom logs, including photos or videos you take or choose.
• Contacts such as your vet, emergency contacts and pet insurance, which can include names, phone numbers, addresses, policy numbers and notes.
• Emergency care instructions, such as a spending limit for vet treatment.

Contacts are about other people. Vet, emergency and insurance contacts are information about other people. Please only add them if you are allowed to.

Households and invitations. Pets belong to a household that you can share with other people. We store who the members are and their roles. When you invite someone, we create an invitation link. You can add the invitee’s email address to the invitation. We don’t send emails to invitees: you share the link yourself.

Support messages. If you email us, we receive your email address and whatever you write.

Information collected automatically

Usage analytics. The app uses Google Analytics for Firebase to understand how the app is used. It records:

• The screens you view.
• A few events: creating a pet profile, inviting a co-owner, creating your first share, opening a notification and changing notification settings.
• Device and app information: device model, operating system, app version, language, and approximate region (country or city, derived from your IP address).
• An app instance identifier. If your device allows it, Firebase may also read your Android advertising ID. We don’t use it for advertising.

We don’t attach your name, email address or account ID to analytics.

Crash reports. The app uses Firebase Crashlytics to send a report when the app crashes or hits an error. A report contains technical details: the error and stack trace, device model, operating system, app version and a Crashlytics installation identifier. We don’t attach your name, email address or account ID.

Notifications. If you allow notifications, we store a push token for each of your devices. We use it to send reminders and household updates through Firebase Cloud Messaging.

App configuration. The app uses Firebase Remote Config to fetch settings such as plan limits. This uses a Firebase installation identifier.

Server logs. Our servers (Google Cloud) keep logs of requests and errors to keep Wuffl running and secure. Logs can contain your account ID and, as is standard for web servers, your IP address and browser or device details.

Data stored on your device. The app keeps a copy of your household data on your device so it works offline. It also stores a few settings, such as your selected household and whether reminders are on. Reminders are scheduled on your device.

The website. The wuffl.app website uses Google Analytics to understand how visitors use the site (for example which pages are viewed), which may set cookies and share usage data with Google. We manage your choices about this through a consent banner (provided by Termly); where consent is required, analytics only runs after you allow it, and you can change your choice at any time using the “Consent Preferences” link in the site footer. Our hosting provider (Firebase Hosting) also processes your IP address and browser details to deliver the pages.

Device permissions

The app asks for:

• Notifications, to show reminders and household updates. You can turn notifications off at any time in the app or in your device settings.
• Alarms and reminders (exact alarms), so feeding, walk and medication reminders arrive on time, and to set them again after your device restarts.
• Camera and photos, only when you choose to take or pick a photo, video, document or scan. On Android, the app uses the system photo picker and camera, and the document scanner provided by Google Play services.

The app doesn’t access your location, contacts or calendar.

How we use your information

We use your information to:

• Provide Wuffl: create your account, store and sync your pets’ information, let household members work together and create the share links and Fridge Sheets you ask for.
• Send reminders and notifications you’ve turned on.
• Process subscriptions and apply the limits of your household’s plan.
• Keep Wuffl secure and reliable, prevent abuse and fix crashes.
• Understand, in aggregate, how the app is used so we can improve it.
• Answer your messages and handle privacy requests.
• Comply with the law.

Sharing with caregivers

Wuffl is built for sharing, and you decide what is shared.

Share links. When you create a share link for a pet, anyone with the link can open a read-only web page without an account. The page shows:

• The pet’s name, species, breed, sex, age, photo, microchip number, traits, care notes and behaviour notes.
• The pet’s routines.
• All of the pet’s contacts, with their phone numbers, addresses, insurance policy numbers and notes.
• Any temporary notes you added, until they expire.

Share links are long and random, and the pages ask search engines not to index them. On paid plans you can protect a link with a PIN. A link works until you revoke it or until the expiry date you set. Links without an expiry date keep working until you revoke them, so only share them with people you trust.

Pet photos. A pet’s profile photo is stored at a fixed, unguessable web address so it can appear in the app, on share pages and on Fridge Sheets. Anyone who has that address can view the photo. Documents, health records and symptom photos and videos are never public: the app shows them through private links that expire after 10 minutes.

Fridge Sheets. A Fridge Sheet is a PDF we create on our servers from your pet’s routine, contacts, microchip number and emergency care instructions. You get a private download link that expires after 1 hour. After that, you decide who receives the PDF.

Household members. Everyone in a household can see and edit that household’s pets and records. Members can also see each other’s names and email addresses.

Service providers

We share information with these providers, only so they can run Wuffl for us:

Google, Apple and RevenueCat have their own privacy policies: Google, Apple and RevenueCat.

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of Wuffl. If Wuffl is sold, we’ll tell you before your data becomes subject to a different privacy policy.

We don’t sell your personal data and we don’t share it for advertising.

How we protect your information

• All data travels over encrypted connections (HTTPS/TLS).
• Our providers encrypt data at rest.
• Security rules on our database and file storage only let members of a household read its data. Sensitive changes, such as creating share links and processing purchases, happen only on our servers.
• Share-link PINs are stored as salted hashes, never as plain text.
• Documents and symptom media are only available through short-lived private links.
• Deleting your account requires you to sign in again first.

No system is perfectly secure. If you think your account has been compromised, email privacy@wuffl.app.

How long we keep your information

We keep your account and pet information for as long as you have an account, or until you delete it. Shares and invitations last until you revoke them or they expire.

Deleting your account and data

You can delete your account at any time:

• In the app: Settings → Account → Delete account.
• By email: write to privacy@wuffl.app from the email address on your account. We’ll handle your request within one month.

Your account is deactivated straight away and your data is permanently erased 14 days later. You can cancel during those 14 days. We delete:

• Your profile and sign-in.
• Households where you’re the only member, with all their pets, records, files, reminders and share links.
• Your membership of other households, and invitations you sent or received.
• Your record with RevenueCat.

Pets and records you added to a household that other people are still in stay with that household for the other members, with your name removed. Apple and Google keep their own records of your purchases. Deleting your account doesn’t cancel a subscription: cancel it in Google Play or the App Store.

To remove a single pet, record or share link without deleting your account, delete it in the app.

Full details: Delete your account.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a copy of it.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict some processing.
• Withdraw consent at any time, for example by turning off notifications.
• Complain to your local data protection authority.

You can view, change and delete most of your data in the app. For anything else, email privacy@wuffl.app. We may need to confirm your identity first. We’ll reply within one month.

Legal bases (EEA and UK). We process your data to provide the service you signed up for (contract). We use analytics, crash reports and server logs for our legitimate interests in keeping Wuffl secure and improving it. We send notifications with your consent. We also process data when the law requires it.

International transfers

Our providers are based in the United States and process data in the United States and other countries. Our backend runs in Google Cloud’s us-central1 (Iowa, USA) region. When we transfer data from the EEA, UK or Switzerland, we rely on our providers’ safeguards, such as the EU Standard Contractual Clauses.

Children

Wuffl is not intended for children under 13 (or the minimum age of digital consent in your country, which can be up to 16). We don’t knowingly collect data from children. If you believe a child has given us personal data, email privacy@wuffl.app and we’ll delete it.

Changes to this policy

When we change this policy, we’ll update it on this page and change the effective date at the top. If a change is significant, we’ll let you know before it takes effect.

Contact

Wuffl
Email: privacy@wuffl.app
Website: wuffl.app