Dogfolio
Privacy
Last updated 9 August 2026
Who is responsible for your data
Dogfolio is the data controller for the information described on this page. We are based in the United Kingdom.
Contact us at hello@dogfolio.co.uk about anything here, including any request to see, correct or delete your information.
The short version
Dogfolio requires an account. While you use the app, it keeps a local copy of your dog’s details on your device so the app can continue to work offline. When you are signed in, it also stores a cloud copy so your information can be backed up, recovered and kept in sync across your devices.
We do not use analytics. We do not use advertising. We do not sell or share your information with anyone for their own purposes, and there is nobody tracking you across the internet on our behalf.
What we hold, and where
On your device. The app keeps a local copy in your browser’s storage. That local copy is what lets Dogfolio keep working when your connection drops.
In your Dogfolio account. Because an account is required, the app also stores your Dogfolio data in our database and private file storage. This is the cloud copy used for backup, recovery, reminders and sync between devices.
Information you give us
| What | Examples |
|---|---|
| Account | Your email address, and a password we never see in readable form |
| About you | Your name, phone number and email as the owner or keeper |
| About your dog | Name, breed, date of birth, weight, microchip number, photo |
| Health dates | What is due and when, plus any notes you add |
| Medical notes | Medications, allergies and ongoing conditions |
| Vet and groomer | Practice name, phone numbers, email, website, notes |
| Appointments | Grooming dates and times |
| Travel | Destinations, dates and checklist items |
| Emergency contacts | The names and phone numbers of people you nominate |
| Documents | Any file you choose to upload, such as a vaccination record |
| Feedback | Your message, the category you chose, your email address, and your browser's identification string |
| Service activity | When an account is confirmed, Plus starts or changes, and an account closes |
Information collected automatically
Very little. Our hosting provider records ordinary web-server logs, which include IP addresses, as every website does. The feedback form records your browser’s user-agent string so that a reported problem can be matched to the device it happened on.
To operate the service, we record a small number of account events: when an email-confirmed account is created, when Plus starts or changes, and when an account closes. We do not record pages viewed, taps, searches or how you use your dog’s records. These events are not sent to an analytics provider.
When an account closes, we retain an anonymous snapshot containing only the account age, plan and totals for dogs, documents, health dates and trips. It contains no account identifier, email address, dog name, filename or record contents, so it cannot be linked back to you.
About emergency contacts, and other people’s details
When you add an emergency contact, a vet or a groomer, you are giving us information about somebody else. Please only add details you are entitled to share, and it is worth telling the person you have done it. Their information is used for one thing only: showing it back to you, and printing it on your dog’s emergency card. We never contact them.
Documents you upload
We do not open or inspect your documents. Be aware that some documents, particularly an Animal Health Certificate or a pet passport, contain your name and address. Once uploaded, they are held in the same way as everything else and are covered by everything on this page.
Why we are allowed to hold it
To provide the service you asked for. This is a contract between us. It covers your account, your dog’s records, sync and storage.
Our legitimate interests. Keeping the service secure and working, and understanding account starts, subscriptions and anonymous closure totals, and reading feedback so we can improve it. We have considered your interests and do not think any of this is surprising or intrusive.
Reminder emails are part of the service rather than marketing. They are on by default and you can turn them off at any time in Profile, then Notifications, without losing anything else.
Who else touches your information
Four companies process information on our behalf. Each is bound by a contract to act only on our instructions.
| Who | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | London, United Kingdom |
| Vercel | Runs and serves the app | Global network; no account data is stored there |
| Resend | Sends reminder and account emails, using Amazon SES | Ireland |
| Stripe | Takes and manages subscription payments | United Kingdom and Ireland, with transfers to the United States under approved safeguards |
That is the entire list. There is no analytics provider, no advertising network and no data broker.
If you pay for Plus
Payments are handled by Stripe. We never see or store your card number. It goes from you to Stripe and no further.
What we do hold is the minimum needed to know what you are entitled to: an identifier for you in Stripe’s system, an identifier for your subscription, whether it is active, and when the current paid period ends. That is all.
Stripe also holds your name, billing address and payment history in order to take the payment and to meet its own legal obligations. Stripe is a data controller in its own right for that, and its privacy notice explains what it does with it.
The legal basis is that we need this to provide the subscription you have asked us for, and to meet our own obligations to keep proper financial records.
How long we keep it
For as long as you have an account. Delete your account and we remove your sign-in, every identifiable service-activity event, every dog record, every uploaded document and every photo. Deletion is immediate and cannot be undone, so note down anything you want to keep first. The anonymous closure totals described above remain because they cannot be linked back to you.
One exception, and we would rather be straight about it. If you have paid us, the record of that payment does not disappear when your account does. Tax law requires us and Stripe to keep financial records for a period after the transaction, so an invoice and the fact that a payment was made will remain in Stripe’s systems after your Dogfolio account is gone. It is not linked to your dogs’ records, which are deleted along with everything else. We cannot delete it on request, because we are not allowed to.
Feedback messages are kept separately so that a reported problem can still be understood after an account has gone. Copies may persist in encrypted backups held by our providers for a short period before those backups age out.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of what we hold
- correct anything that is wrong
- delete it
- give it to you in a portable form, or send it to someone else
- restrict or object to how we use it
Email hello@dogfolio.co.uk and we will respond within one month. There is no charge. You can correct anything by editing it in the app and delete everything from Profile, then Account. A self-service download of your Dogfolio data is also available from your account.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you told us first, but you do not have to.
Cookies
Dogfolio does not use tracking or advertising cookies, so there is no banner to dismiss. Signing in stores a session token in your browser so you stay signed in. That is strictly necessary for the service to work and cannot be turned off separately, though signing out removes it.
Keeping it safe
Your information is separated at the database level, so one account cannot reach another’s records even if something goes wrong in the app. Uploaded files sit in private storage that is not reachable by a public link. Everything travels over an encrypted connection. Passwords are stored only as a one-way hash, which means nobody at Dogfolio can read yours.
No system is perfectly secure. If something happens that puts your information at risk, we will tell you and the Information Commissioner’s Office as the law requires.
Age
Dogfolio is for people aged 16 and over. If you believe someone younger has created an account, email us and we will remove it.
Changes
If we change how we handle your information we will update this page and change the date at the top. Where a change matters, we will tell you in the app or by email rather than relying on you to notice.