This Privacy Policy explains how TUPA - The Ultimate Pet App ("TUPA", "we", "us") collects, uses, stores and shares information when you use the TUPA mobile apps, web app and related services.
1. Information we collect
Account and profile information
- Email address, display name, profile information and profile image you provide.
- Authentication information needed to sign you in. Local-account passwords are stored as password hashes, not readable plain-text passwords.
- If you choose Google or Apple sign-in, identity information returned by that provider, such as a provider identifier and any email/name the provider makes available.
Pet and care information
- Pet names, species, breed, age/date information, photos and profile details.
- Measurements, growth history, care records, veterinary visits, medications, diagnoses, reminders, food information and other records you choose to enter.
- Files, images or text you intentionally submit to supported analysis or AI-assisted features.
Community and communication information
- Posts, comments, likes, messages, meetup information, rehoming information and other content you choose to create or share.
Location information
- Location or area information you choose to provide or permit for location-based features. TUPA does not require continuous background location tracking for normal use.
Subscription and transaction information
- Your TUPA plan, product identifier, store/provider, subscription status, renewal/cancellation/expiry state and entitlement information.
- Payment processing is handled by Apple App Store, Google Play or Stripe depending on platform. TUPA does not receive or store your full payment-card number.
Technical, security and diagnostics information
- App/browser version, operating system/device information, IP/network information, authentication/session data, security events, reliability events and diagnostic logs needed to operate and protect the service.
2. How we use information
- Provide, maintain and personalise TUPA features and pet records.
- Authenticate users and protect accounts.
- Process subscription entitlements, purchases, restores, renewals, cancellations and plan changes.
- Provide community, messaging and location-based functionality you choose to use.
- Respond to support, privacy and account-deletion requests.
- Detect abuse, investigate errors, maintain service reliability and improve the product.
- Meet legal, tax, accounting, security and regulatory obligations where applicable.
TUPA does not sell personal information to data brokers or use personal information for third-party advertising.
3. Service providers and data sharing
We disclose data only where needed to operate requested features, process transactions, protect the service or meet legal obligations. Providers may include:
- MongoDB Atlas - application database and storage services.
- Railway - backend application hosting and processing.
- Vercel - web application hosting and delivery.
- RevenueCat - mobile subscription entitlement, receipt and lifecycle processing.
- Google Play and Apple App Store - native purchase and subscription processing.
- Stripe - web subscription/payment processing.
- Google and Apple - sign-in services when you choose those authentication methods.
- Configured infrastructure or AI-processing providers only when needed to perform a feature you explicitly request, such as analysis of content you submit.
We may also disclose information if required by law, valid legal process, or when necessary to protect users, TUPA or others from fraud, abuse or security threats.
4. Data security
We use technical and organisational safeguards appropriate to the service, including HTTPS transport encryption, password hashing for local authentication, access controls, authentication tokens, rate limiting, security monitoring and provider-supported encryption at rest.
No internet service can guarantee absolute security. We review and improve safeguards as the service evolves.
5. Data retention and deletion
We retain account and pet-care data while your account is active and as needed to provide TUPA. Diagnostic and security records are retained only as reasonably necessary for reliability, abuse prevention and legal obligations.
When you request account deletion, TUPA deletes the account and associated user data from active systems, subject to limited retention where required for legal, financial, fraud-prevention or security purposes. Residual backup copies expire according to the backup provider's normal retention cycle and are not used as active account data.
You can request deletion from within TUPA using the account deletion control, or use our public deletion instructions at tupa.pet/delete-account.html. You may also email support@tupa.pet.
6. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, and to request a portable copy of information you provided.
To exercise a privacy right, email support@tupa.pet. We may need to verify that the request relates to the correct account.
7. International processing
TUPA uses cloud and store providers that may process information in more than one country. Where required, we rely on appropriate contractual, organisational and legal safeguards for international transfers.
8. Children's privacy
TUPA is not intended for children under 13. If we learn that personal information was collected from a child in circumstances where it should not have been collected, we will take appropriate steps to delete it.
9. Changes to this policy
We may update this Privacy Policy as TUPA changes or legal requirements evolve. The current version will remain publicly available at this URL and the date above will show the latest revision.
10. Contact
App: TUPA - The Ultimate Pet App
Developer/operator: TUPA / Jack Marshall-Deane
Privacy and support email: support@tupa.pet