Privacy Policy
This Privacy Policy explains how we collect, use, share, and protect information when you use the NatBuddy iOS app and the natbuddy.com website (together, the "Service"). By using the Service, you agree to this Policy.
1. Who we are and scope
The Service is operated by Granviex, LLC, a Florida limited liability company doing business as NatBuddy ("NatBuddy," "we," "us," or "our"). Our mailing address is 4700 NW Boca Raton Blvd #202, Boca Raton, FL 33431, and you can reach us at support@natbuddy.com. This Policy covers personal information about you, the account holder, and information about your dogs that you choose to enter. It does not cover third-party services we link to, which have their own policies.
2. Information you provide
You provide information directly when you create an account and use the app, including:
- Account email and your name (if you add it to your profile), used to create your account, sign you in, recover access, and personalize the app.
- Pet profiles, including each dog's breed, weight, age, activity level, and any health flags you enter, used to calculate per-dog portions, targets, and product guidance.
- Food, treat, and weight logs you add to the retrospective counter.
- Health-scan photos you take for the photo health scan.
- Barcode and product photos you take with the scanner.
- Charlie chat messages you send to the AI companion.
3. Information collected automatically
To keep the app stable and to understand how it is used, we collect limited technical information through privacy-conscious tools:
- Crash and performance data through Sentry, to diagnose and fix stability problems. We configure it to exclude personal and health information.
- Product analytics through PostHog, keyed to an anonymous identifier, to understand feature usage and improve the app. We do not send personal or health information to analytics.
- Ad-campaign and install attribution through AppsFlyer. With your permission — iOS asks via the App Tracking Transparency (ATT) prompt — we collect the device advertising identifier (IDFA) together with install, subscription, and purchase (revenue) events so we can measure which of our ad campaigns work. If you decline, we do not access the IDFA, and attribution falls back to Apple's aggregate, privacy-preserving SKAdNetwork reports, which do not identify you or your device. You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.
Crash and analytics collection can be turned off in the app's settings.
4. How AI features process your data
NatBuddy's AI features — the Charlie companion and the AI-powered photo and product scans — are opt-in. When you enable them, the relevant input (chat text, scan photo, or product photo, plus minimal pet context) is routed through our secure server to our AI provider, Anthropic, which generates the response. The provider key stays on our server and is never shipped in the app. Voice dictation is transcribed on your device; only the resulting text is sent if you send it. AI inputs are not used to train AI models and are retained per Anthropic's commercial API terms. For full detail, see our AI Privacy Notice.
5. How we use your information
We use the information above to: provide and operate the Service; calculate per-dog portions, targets, streaks, and product guidance; generate AI responses and scan results when you enable AI features; maintain your account and respond to support requests; keep the Service secure and prevent abuse; understand usage and improve the app; and meet our legal obligations. We do not use your health-related or pet-health information for advertising.
6. What we collect and who it is shared with
The table below summarizes the information we handle, why, and the service providers involved.
| Data | Collected by | Purpose | Shared with |
|---|---|---|---|
| Account email + name (optional) | Supabase Auth / profile | Account, sign-in, recovery, personalization | Supabase; not sold |
| Pet profiles (incl. health flags) | App → Supabase (RLS) | Per-pet portions, scanner verdicts, targets | Supabase; pet context → Anthropic only with AI consent |
| Food/treat/weight logs | App → Supabase | Counter, weight, streaks | Supabase |
| Health-scan photos | App → Supabase Storage | Photo health scan + history | Supabase; → Anthropic with AI consent |
| Barcode/product photos | App → Supabase Storage | Scanner verdicts, OCR cache | Supabase; → Anthropic with AI consent |
| Charlie chat messages | App → Edge Function | AI companion responses | Anthropic with AI consent; not used to train models |
| Speech dictation | On-device (iOS Speech) | Voice→text for Charlie | No one (on-device); only sent text leaves |
| Crash/performance | Sentry | Stability | Sentry; no PII/health; opt-out |
| Product analytics | PostHog | Funnels/improvement | PostHog; anonymous id; opt-out |
| Ads/install attribution (incl. install, subscription, and purchase events) | AppsFlyer | Ad-campaign measurement | AppsFlyer + the ad networks we advertise on; IDFA only with your ATT permission |
| Subscription state | RevenueCat + Apple | Entitlement/trial/renewal | RevenueCat + Apple; card data handled solely by Apple |
These providers act as our service providers (sub-processors) and process information on our behalf to deliver the Service. Apple handles all payment and card information for subscriptions; we never receive your card number.
7. Advertising measurement; we do not sell your data
We do not sell your personal information, and we never use your health-related or pet-health information for advertising. To know whether our own ads work, we use AppsFlyer for ad-campaign measurement: with your App Tracking Transparency permission, the device advertising identifier (IDFA) and attribution events are shared with AppsFlyer and the advertising networks where we run campaigns (for example, to confirm an install came from a given ad). Under California law this measurement flow may be considered "sharing"; you can opt out at any time by declining the tracking prompt or in iOS Settings > Privacy & Security > Tracking. We do not show third-party ads inside NatBuddy, and we do not use your content or your pets' health information for ad targeting. See our Do Not Sell or Share My Personal Information page for the California-specific details.
8. Data retention
We keep your account information and the data you enter for as long as your account is active and as needed to provide the Service. When you delete your account in the app, we delete or de-identify the personal information associated with it, except where we must retain limited records to comply with law, resolve disputes, prevent abuse, or enforce our agreements. Anonymous analytics and aggregated, de-identified data may be retained. AI inputs are handled as described in our AI Privacy Notice.
9. Security
We protect your information with industry-standard safeguards. Data is transmitted over encrypted connections (TLS). Your stored data is protected by per-user, row-level security rules so that one account cannot read another's data. AI endpoints require a valid signed-in session and are rate-limited and logged. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.
10. Your choices and rights
You can: enable or revoke AI consent at any time in the app's settings; turn crash and analytics collection on or off; review and edit your account and pet profiles; and delete your account, which removes your associated personal information as described above. Depending on where you live, you may have additional rights described in the sections below. To make a request, contact support@natbuddy.com.
11. California privacy rights (CCPA/CPRA)
If you are a California resident, you have rights to know, access, delete, and correct your personal information, to opt out of any sale or sharing, to limit the use of sensitive personal information, to data portability, and not to be discriminated against for exercising these rights. As stated above, we do not sell personal information; with your App Tracking Transparency permission we share limited device identifiers and attribution events for ad-campaign measurement, which may be considered "sharing" under the CCPA — you can opt out at any time via the tracking prompt or iOS Settings. For the full list of categories we handle and how to exercise your rights, see our Do Not Sell or Share My Personal Information page.
12. Children
The Service is intended for adults and is not directed to children. You must be at least 17 years old to use NatBuddy. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact support@natbuddy.com and we will delete it.
13. International users and EU/UK note
NatBuddy is operated from the United States, and your information is processed in the United States and other countries where our service providers operate. NatBuddy currently launches in the United States. We have reserved a section for European Union and United Kingdom data-protection rights (including GDPR and UK GDPR) that we will activate when we open those markets; until then, this Policy is written for a US audience.
14. Changes to this Policy and contact
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice in the app or on this site. Questions or requests can be sent to support@natbuddy.com, or by mail to Granviex, LLC, 4700 NW Boca Raton Blvd #202, Boca Raton, FL 33431.