Wagly ("we", "us", "the app") is operated by Vinayak Bibekar (sole proprietor, based in India). This page explains what we collect, why, who we share it with, and your rights.
By using Wagly you agree to this policy. If you don't agree, please don't use the app.
Data we collect
When you sign up and use Wagly, we store the following on Supabase Inc. servers in the Asia-Pacific (Mumbai) region:
Account — email, hashed password (never plaintext), display name (if you provide one), Supabase user id. If you sign in with Google, Google additionally shares your name and profile picture URL with us.
Dog profiles — name, breed, birthday, gotcha day, weight, sex, microchip id, photo (if you upload one), notes.
Walks — GPS route polyline, start/end timestamps, distance, duration, step count, weather notes, poop/pee count, optional photos. Location is recorded only during an active walk — from when you press "Start walk" until you stop it. So the full route is captured, recording continues when the app is in the background or your screen is off, and a persistent notification is shown the whole time a walk is being tracked. Location is never collected outside an active walk.
Activity — while a walk is active, we count your steps using your device's motion/activity sensor to show how far you and your dog went. Step counts are stored with that walk.
Care & health logs (only what you choose to log) — reminders, vaccinations, medications, vet appointments, weight entries, feeding schedules, bathroom log, training progress, photos of vaccination cards, prescriptions and vet reports.
Device & app data — app version, OS version, device model, Expo push token, anonymous session id.
Usage events — which screens you open, when you start/finish a walk, when you complete onboarding, which features you tap "Notify me" on. No personal content is stored in event data.
Crash reports — error message, stack trace, recent app actions. Sent only when the app crashes.
We do not collect:
Contacts, calendar, microphone, accessibility data, SMS, call logs.
Location data outside of an active walk recording.
Data from other apps on your device.
Biometric data, financial data, or precise health diagnostics.
Permissions and why we ask
Permission
Used for
Optional?
Location (foreground & background)
GPS tracking during a walk, including when the app is backgrounded or the screen is off, so the full route is captured. A persistent notification is shown while tracking.
Yes — walks won't track without it
Physical activity
Counting your steps during a walk
Yes
Camera
Scanning vaccination cards, prescriptions, vet reports, taking dog photos
Yes
Photos / media library
Picking dog photos and report photos from your gallery
Yes
Notifications
Vaccine, flea-tick and reminder pings
Yes
Location is only ever collected during a walk you actively start, never outside one. Background access exists solely so a walk keeps recording when your screen is off.
How we use the data
To provide the app's features (walk tracking, reminders, health timeline).
To send push notifications you opt into.
To diagnose crashes and fix bugs.
To understand which features people use, in aggregate.
We do not sell your data, and we do not show advertising in the app.
Sharing
Your data is processed by these third parties strictly to operate Wagly:
Expo / 650 Industries Inc. (USA) — over-the-air updates and push notification delivery. Privacy policy
Google LLC (USA) — only if you choose "Continue with Google" for sign-in. We receive your email, name and profile picture. Privacy policy
We do not share, sell, rent, or trade data with anyone else. We will disclose data if compelled by a valid legal order from an Indian court or competent authority.
Data security
All traffic between the app and Supabase is encrypted in transit (TLS 1.2+).
Passwords are stored hashed with bcrypt (Supabase Auth default).
Photos and reports are stored in Supabase Storage with row-level security scoped to your user id.
We do not store API keys or service-role secrets in the mobile app.
No system is perfectly secure. If we ever suffer a data incident affecting your personal data, we will notify you within 72 hours of becoming aware, in accordance with the Digital Personal Data Protection Act, 2023 (India).
Your rights
Under the DPDP Act 2023 (India), GDPR (EU/UK), and similar laws, you can:
Access — see all the data we hold on you. Email us; we'll send a JSON export within 30 days.
Correction — edit any wrong information directly in the app, or email us.
Erasure — delete your account from Profile → Settings → Delete account. All your dogs, walks, reminders, photos, and account record are erased within 30 days.
Withdraw consent — disable push notifications in Profile → Settings or your OS settings.
Data portability — receive your data in machine-readable JSON.
Lodge a complaint — contact India's Data Protection Board (once appointed) or, if you live in the EU/UK, your local supervisory authority.
Data retention
Data is retained as long as your account is active. After account deletion:
All personal records are purged within 30 days.
Crash reports tied to your account are anonymized.
Backup retention: up to 7 additional days.
Children
Wagly is not directed at children under 13 and we do not knowingly collect data from anyone under 13. If you are a parent or guardian and believe a child has used Wagly, contact us and we will delete the account immediately.
Changes to this policy
If we change anything material, we'll show an in-app notice on next launch and email registered users. The "Last updated" date at the top will reflect the revision.
Contact
For privacy questions, data subject requests, or complaints: