Beagle Owner Privacy Policy
Effective from: 29.08.2026
Controller: Heppsu Consulting EOOD, UIC 208418861, registered office: 14 Lyublyana St., fl. 1, apt. 6, Ovcha Kupel district, 1618 Sofia, Bulgaria
Data enquiries: privacy@heppsu.com
1. The most important part
Without an account, your dog's record does not leave your phone — the profile, photos and health record stay on the device. Without an account, only two things go out, both visible: the map fetches tiles from OpenStreetMap (they see your device's address, not who you are), and "Report a problem" sends what you yourself wrote.
An account is needed for: synchronisation across devices, veterinarian sharing, introductions, walks, reviews of places and the subscription. With an account, the dog's photo is synchronised together with the record — it is uploaded to the server so it is waiting on your new device, and deleted from there when you remove it.
2. What data is processed
### Without an account
Locally on the device: dogs, photos, health events, reminders, settings. Sent nowhere. The exceptions above: map tiles (OpenStreetMap receives requests for map areas and the device's address) and the reports you send via "Report a problem" (the text you entered).
### With an account
| Data | Why | Legal basis | |---|---|---| | email address and password (hashed) | signing in | performance of a contract | | the dog's data: name, sex, date of birth, microchip, pedigree, health events, nutrition, shows, photo | synchronisation and sharing — the service itself | performance of a contract | | the owner's name and previous owners, if entered | part of the record | performance of a contract | | introductions, friendships, walks and meet-ups with attendance (RSVP) | the community features you use | performance of a contract | | reviews and ratings of places; map points you mark | published to all users | legitimate interest — informed choice | | location — see section 3 | only the features you explicitly enable | performance of a contract | | subscription status and the store purchase token | the Plus plan — activation and verification | performance of a contract | | privacy and notification settings | so that your choices apply | performance of a contract | | technical sign-in records | protection against abuse | legitimate interest |
We do not collect a person's date of birth. The health record belongs to the dog — it is not a special category of personal data; the only personal data of yours in it is the link "this dog belongs to this owner".
Third-party data: if you enter a previous owner or a breeder by name, you are responsible for having grounds to do so. Write about the dog, not about the people.
Co-ownership: if you invite another user via the dog's QR code, they see and edit its full record on equal footing with you — a voluntary choice meant for people who genuinely care for the dog together. Access is symmetric and cannot be revoked by either side from within the app; the only way it ends is by deleting an account or the dog itself.
3. Location — three separate things, all your choice
- Profile point ("Beagles nearby"): off by default. If you enable it, you mark a point on the map; the server rounds the coordinates before showing them to anyone — to ~1 km for "city" and ~100 km for "country" precision. The exact point never leaves the server.
- Live walk sharing: by your explicit action, only to owners of introduced dogs, for a duration you choose — then it stops by itself. It uses the device's GPS only while you have asked for it.
- Places on the map: a point you mark on a community place — public, because the place is public.
4. Who receives the data
| Recipient | What they receive | Where | |---|---|---| | Contabo GmbH | server hosting and the synchronised data | machines in the European Union region; corporate seat — Germany | | Apple / Google | the subscription purchase — independent controllers for the payment | under their own terms | | OpenStreetMap | map tile requests (areas + device address) | EU/global, under their policy | | Google Ireland (Workspace mail) | your email address and the text of the messages — verification code, password reset | EU; under the Google Workspace data processing terms |
Subscription status and "Report a problem" reports are processed in internal systems of the same company (Heppsu Subscriptions and Control Center) — not third parties.
Data is not sold, not shared for advertising, and not used to train models. There are no ads. Notifications are local — there is no external notification provider.
5. How long data is kept
| What | How long | |---|---| | account and synchronised data | while you have an account, plus 30 days after closure | | reviews, places, meet-ups | until you delete them or the account is closed | | revoked sharing links | stop immediately; the record is kept 12 months | | live walk sharing | only for the chosen duration | | technical sign-in records | 90 days | | accounting records for the subscription | 10 years — Bulgarian Accountancy Act | | local data on the device | yours — until you delete the app |
6. Your rights
Access, a machine-readable copy, rectification, erasure, restriction, objection, withdrawal of consent — at privacy@heppsu.com. Reply within one month. Complaints — to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the supervisory authority of your place of residence. Closing the account deletes the synchronised data after the 30-day safety period.
7. Security
- the connection to the server is encrypted (TLS);
- the password is stored hashed and cannot be recovered;
- the access token is kept in the device's secure storage (Keychain/Keystore);
- a revoked sharing link responds as if it never existed;
- the exact coordinates of your profile point are returned to nobody — rounding happens on the server.
8. Children
An account may be held by a person aged 14 or over. We do not knowingly collect data from children; if we learn of such an account, we will close it.
9. Cookies and tracking
None. No cookies, no advertising identifiers, no third-party tracking, no analytics.
10. Changes and languages
You will be notified of material changes at least 14 days in advance, in the app. This policy exists in Bulgarian, English and Portuguese — the same version, in three languages.