Privacy Policy — Kynopack

Who is responsible for your data

Controller: Kynopack.

Questions, requests and complaints about your data: hello@kynopack.com.

What we store

Kynopack stores only what the platform needs to run dog sports clubs and competitions:

• Account: email, name, password (stored only as a hash), profile photo, language and a private calendar link token.
• Dogs: name, breed, birth date, size, gender, colour, height, photo, passport number and passport scan, microchip number.
• Clubs: your memberships and roles, and documents or posts you upload to a club.
• Competitions: your entries, runs, results and, where you act as an official, your name and role.
• Payments: amount, date, method and the payer name for fees and entries recorded in a club.
• Dog health records you enter (treatments, dates and notes), visible only to you.
• Files you upload: photos, passport scans and club documents.
• Emails we send you: verification, password reset, club invitations and notices about your account, plus notification emails you can switch off per type with the unsubscribe link in each one.
• Push subscriptions: for each device where you turn on push notifications, the address and keys of your browser's push service, a device label and the time of the last successful delivery.
• Notification preferences: which types of notification you want, saved per type. By default personal and admin notifications are on and club activity is off.
• Pending notifications: a queue of notifications waiting to be sent, and the records of those already sent.
• Contact form on this website: name, email, phone, club name, member count and message. It is emailed to us and not stored in the app.
• Technical logs: your IP address and the address requested, for each request to our servers. Fly.io keeps them for a short time so we can run and secure the service.

Why we use it

• To provide the service you signed up for, including your account, dogs, club membership and competition entries (performance of a contract).
• To keep club and competition records, such as start lists, results and standings (legitimate interest of clubs and competitors in accurate sporting records).
• To keep payment records as required by accounting law (legal obligation).
• To send the account emails listed above (performance of a contract).
• To remind you before a dog's health treatments are due, and to warn you when a competition's date falls after a rabies vaccination expires (performance of a contract).
• To send push and email notifications about your entries, health reminders, club and competition events (performance of a contract). Push is opt-in per device and rests on your consent, which you can withdraw at any time by turning it off.

Who processes it for us

We do not sell your data. These providers process it on our behalf:

• Fly.io — runs the Kynopack API and its database, in Frankfurt (Germany).
• Cloudflare — hosts this website, stores uploaded files, and routes mail sent to our privacy address.
• Resend — delivers the transactional and notification emails described above.
• Browser push services — Google for Chrome, Mozilla for Firefox and Apple for Safari carry push notifications to your device. The content is encrypted end to end, so they cannot read it.
• Mapbox — draws club location maps only. It receives map coordinates and address searches by club administrators, never account data.
• YouTube and Vimeo — host competition videos. Nothing loads from them until you press play; then they receive the usual data a video player gets, such as your IP address.

How long we keep it

Account and dog data is kept until you delete it. Deletion starts a 30-day grace period: you can restore everything with the link we email you, or by asking us. After that it is erased.

Some records must outlive the account, so they are kept in anonymized form:

• Competition results stay, shown as "Deleted handler" and "Deleted dog".
• Payment records are kept with the payer name for accounting.
• Names of officials on competition records are kept.
• Push subscriptions are removed when you turn push off, log out on that device, your browser reports the subscription as expired, or your account is deleted.
• Pending notifications are kept until they are sent, and records of sent notifications are deleted after 30 days.
• Dog health records are deleted with the dog or your account.
• Backups are kept for up to 6 months, including health records, and then expire. If we ever restore a backup, we erase again everyone who had been deleted since it was taken.

Your rights

You can ask for access to your data, correction of wrong data, erasure, and you can object to how we use it.

You can delete your account yourself in the app under Settings. For everything else, email hello@kynopack.com; we answer within one month.

You can also complain to the Croatian data protection authority (AZOP, azop.hr).

Changes to this policy

This policy is versioned and the current version is shown on this page. When it changes, we ask you to acknowledge the new version the next time you log in.