PRIVACY POLICY
Paw Ventures, LLC
131 Continental Drive, Suite 305, Newark, Delaware 19713, United
States
contact@wuufy.com
Effective date: 17 October 2026
Last updated: 17 October 2026
Publication: https://wuufy.com/privacy
This Privacy Policy is the privacy policy of the Wuufy application and of wuufy.com for a person who resides in the United States or in a country other than Mexico (the “User”). A person who resides in Mexico is covered by the Aviso de Privacidad of Petfit, S.A.P.I. de C.V., and not by this Policy.
Paw Ventures, LLC (“Paw Ventures”) is the business and the controller of Personal Information collected under this Policy. Paw Ventures does not sell Personal Information. Paw Ventures does not share Personal Information for cross-context behavioral advertising.
1. Notice at Collection
| Category | Collection | Purpose | Retention |
|---|---|---|---|
| Identifiers: name, email, Sign in with Apple or Google identifiers, password hash | On account creation | Account | Life of the account, then deletion or dissociation within 30 days, except a record the law requires Paw Ventures to keep |
| Customer records: pet profile and notes the User enters | On entry | Provision of the Services | Same as the account |
| Commercial information: subscription status and a transaction reference. Not a payment-card number | From Apple, Google, and RevenueCat | Entitlement | For the period required by tax and accounting law |
| Internet or network activity: diagnostics, and an IP address in security logs | Automatically | Security and operation | A limited period of months. Not used to build a location history |
| Audio and visual information: photographs and short clips the User uploads | On upload | The pet feature the User requested | Life of the account, then deletion of identifiable copies |
| Professional information | Only if the User uploads a professional profile | That profile. The upload is not proof of licensure | Life of the account |
| Sensitive personal information: steps; sleep; heart-rate variability; and, on the smartwatch connection, heart rate, resting heart rate, and active minutes; a readiness integer from 0 to 100 computed on the phone; a wearable-screen photograph the User submits; a mood number the User enters about the User | Only if the User connects the source or submits the item | To display the User’s day beside the pet’s check-in, and to select a shorter or an ordinary pet routine. Not for advertising, insurance, credit, employment, or diagnosis of the User | Until the User deletes the health data or the account. Deletion within 30 days. Backups expire within 90 days |
| Precise geolocation and approximate geolocation | Not collected | None | Not stored |
| Inferences | An operational flag that a pet routine is to be shorter | That pet feature | With the check-in |
The User may refuse the wearable connection and retain the account. Requests to access, correct, delete, or obtain a copy are made in Settings or by email to contact@wuufy.com.
2. Personal information collected
2.1 From the User. Name; email; authentication identifiers; a password hash if the User sets a password; language or country if the User sets them; pet name, species, breed, sex, age or date of birth, weight, diet notes, conditions, history, and vaccine notes the User types; the User’s mood number and the pet’s mood number; diary and activity logs; photographs of the pet, food, stool, skin, or documents; short movement clips; text sent to the Guru feature; support messages; and, if the User creates one, a professional profile.
Paw Ventures does not collect government identifiers, tax identifiers, bank-account numbers, CLABE numbers, or payment-card numbers. Apple and Google collect and store the card and the store-account identity. RevenueCat reports subscription status. Paw Ventures receives a status and a transaction reference.
2.2 From the device. Application version, operating system, device model, language, a push token, and crash and performance data through Sentry, with personal-identifier attachment and screenshots disabled. Feature events required to operate the Services. An IP address in server logs, used to complete the request and to secure the service, and not to assemble a location history. The application does not display third-party advertising and does not use the advertising identifier for advertising.
2.3 Location. On the User’s tap to find an emergency veterinary hospital, the device may read a coarse position, open Apple Maps or Google Maps, and discard the coordinates. The coordinates are not transmitted to the Wuufy API, not stored, not logged, and not used for analytics, crash reports, or geofencing. Precise location and approximate location are not collected by Paw Ventures. Denial of the permission opens a text search in the maps application. A true-or-false marker that a location existed at a moment of capture is not a coordinate.
2.4 Pet wearables. Numbers read from a collar photograph or from a collar connection the User authorizes (including Tractive, Fi, Whistle, and, where connected, FitBark) are pet activity data: steps or a step estimate, distance, activity minutes, and sleep. They are stored on the pet’s log. They are not the User’s human-health record.
2.5 Sources. Paw Ventures receives subscription status from Apple, Google, and RevenueCat, and sign-in assertions from Apple or Google. Paw Ventures does not purchase Personal Information from data brokers.
3. Human health data
Paw Ventures reads human health data only after the User connects it. The connection is optional. The check-in operates with a mood number if the User declines the connection.
On iPhone the source is Apple Health (HealthKit). On Android the source is Health Connect. A watch named in settings (Apple Watch, Garmin, Fitbit, Oura, Whoop, Samsung, Polar, or another brand) is read through that phone health store if the watch writes to it. Paw Ventures does not operate a separate developer connection to Garmin, Oura, Fitbit, or Whoop for the User’s body. A screen that does not write to the phone store is read only if the User photographs it.
3.1 Categories.
| Category | Source | Use |
|---|---|---|
| Steps | Apple Health or Health Connect | Comparison with the pet’s day, and detection of a shared walk |
| Sleep duration | Apple Health or Health Connect | Comparison with the pet’s day |
| Heart-rate variability | Apple Health (SDNN) or Health Connect (RMSSD) | The same comparison, and selection of a quieter pet routine when the value is low for the User |
| Heart rate | Apple Health or Health Connect, when the smartwatch permission set requests it | The same comparison. Not a cardiac assessment |
| Resting heart rate | The same | The same |
| Active minutes | The same | The same |
The phone reduces steps, sleep, and heart-rate variability to a readiness integer from 0 to 100. Paw Ventures stores that integer and does not recompute it from a waveform. A companion stress figure sent with a sync is not stored as a second score. The pet’s Stress ring is a separate pet measure. Paw Ventures does not display the User’s heart rate or heart-rate variability as a statement that the User is stressed.
Storage is one row per User per local day: the values received, the source, and the readiness integer. A later sync on the same day fills only the values present in that sync. The row is keyed to the User. A pet identifier sent with a human sync is ignored.
The check-in requests yesterday and today. Paw Ventures does not request Health Connect history permission and does not request background health-data access.
3.2 Permitted use. Paw Ventures uses human health data solely to show the User’s sleep and steps beside the pet’s check-in; to select a shorter or quieter pet activity when the values indicate a low-recovery day; and to record a shared walk when the User’s distance and the pet’s distance agree, without storing a route.
Paw Ventures shall not sell human health data; share it for advertising; use it for credit, insurance underwriting, lending, housing, or employment; use it to diagnose, treat, or predict a human disease; use it to infer a mental-health condition; use an advertising identifier with it; use it for data mining beyond operation and security of this feature; write a prescription or human coaching from it; or permit a service provider to train that provider’s own models on it.
A mood number the User enters may be stored with the check-in and passed to the AI processor as a number so that the pet plan may be lighter. The processor is instructed not to comment on the User’s health or emotions. The mood number is information the User enters. It is not read from Apple Health.
3.3 Processors of human health data. Human health data is stored on Google Cloud in the United States, encrypted in transit. Google Cloud hosts it for Paw Ventures and may not use it for Google’s own purposes. Sentry is configured not to receive the health payload, not to receive screenshots, and not to receive default personal identifiers. Intercom does not receive the health row unless the User pastes it into a support conversation. The User shall not paste it. Paw Ventures does not send Apple Health or Health Connect samples to an advertising network, a data broker, or a social network.
A new subprocessor that must see a human-health row will be named in this Policy and bound to this Section before it receives the row. Where Apple’s HealthKit terms or a state consumer-health law requires a fresh consent, Paw Ventures will obtain that consent before the disclosure.
3.4 Screenshots. A photograph of a watch or a health-application screen is human health information. Paw Ventures sends the image to Google Gemini solely to read steps, sleep, and heart-rate variability, and stores those numbers on the daily row. The User shall not include another person’s data, a diagnosis, a medication list, or a government identifier. The image is not used for advertising and is not placed in a public model.
3.5 Revocation. The User may decline the system permission. The User may disconnect in Settings. On Android, disconnect revokes Health Connect. On iPhone, disconnect stops Paw Ventures’ reads; the User turns the system permission off in the Health application, because iOS does not permit an application to revoke it. The User may delete the human-health rows by deleting the account, or by email to contact@wuufy.com with the subject “Delete health data,” which deletes the human-health rows and readiness scores without deleting pet logs unless the User requests account deletion. There is no sale to opt out of. A Global Privacy Control signal is an opt-out of any future sale or share. Human health data remains unshared.
3.6 Representation to the stores. Paw Ventures represents to the User, to Apple, and to Google:
Wuufy is a pet-care app. With your permission it reads steps, sleep, heart-rate variability, and, on the smartwatch connection, heart rate, resting heart rate, and active minutes, from Apple Health on iPhone or Health Connect on Android. We use those readings only to show your day beside your pet’s check-in and to choose a shorter or ordinary pet routine. Wuufy only reads. It never writes to Apple Health or Health Connect. We do not sell or share this data, we do not use it for advertising, insurance, credit, or employment, and we do not use it to diagnose you. You can disconnect in the app and in Apple Health or Health Connect, and you can delete it by deleting your account or by emailing contact@wuufy.com.
If a store form and this Policy differ, this Policy controls.
4. Purposes
| Purpose | Legal basis |
|---|---|
| Account, pet log, check-in, coaching plan, Guru reply, safety prompt | Contract |
| Human wellness comparison under Section 3 | Consent. The User may withdraw it |
| Emergency prompts and a crisis-resource screen | Safety. Not a clinical service |
| Support | Contract |
| Subscription status | Contract |
| Security, fraud prevention, debugging | Legitimate interest and legal obligation |
| Science donation of pet data under Section 5 | Consent. The control is off until the User turns it on |
| Tax, lawful process, breach notice | Legal obligation |
Paw Ventures does not use Personal Information for targeted advertising. Paw Ventures does not use human health data for any purpose outside Section 3.
5. Donation of pet data
Research sharing in Settings is off until the User turns it on. While it is off, pet information is used only to provide the Services. While it is on, Paw Ventures may use the pet profile, the pet’s logs, and photographs and video of the animal for animal-health research and to train animal-care models, after the User’s name and email are removed.
Leaving the control off is a denial. Turning it off later ends further donation and does not close the account. A wearable-screen photograph is donated only if the User marks that photograph. An unmarked photograph is deleted after the numbers are read.
Human wearable readings, the User’s mood, and screenshots of the User’s watch or health screen are excluded. Employer reports are not a donation.
Content the User submits for a pet feature may be sent to Google Gemini to perform that feature. The processor acts for Paw Ventures. The output is not a veterinary diagnosis.
6. Disclosures
Paw Ventures discloses Personal Information to these processors, acting on Paw Ventures’ instructions:
- Google Cloud, hosting in the United States.
- Google Gemini, processing of content the User submits for a pet feature, and of a human wearable screenshot if the User sends one.
- Sentry, crash and performance data, with the exclusions in Section 3.3.
- Intercom, support messages, name, and email.
- RevenueCat, Apple, and Google Play, subscription status.
- OneSignal and Firebase, push-notification tokens.
- Apple and Google, authentication.
Paw Ventures discloses Personal Information if law, a subpoena, or a court order requires it, or to protect the rights, safety, and integrity of users and the Services. Paw Ventures does not send human health data to a veterinarian, an insurer, or an employer.
On a sale of the business, Personal Information may transfer to the buyer under this Policy. Human health data remains bound by Section 3 unless the User consents to a new use.
Paw Ventures does not sell Personal Information and does not share it for cross-context behavioral advertising. Paw Ventures does not operate remarketing pixels or advertising cookies in the application or on wuufy.com. A change to that practice will be stated in this Policy, with a Do Not Sell or Share control, and will not include human health data.
7. Employer subscriptions
If the account email is a work address on a domain an employer has subscribed, Paw Ventures stores that domain on the daily check-in. The domain is not disclosed to the employer as a list of persons.
Paw Ventures does not disclose to the employer the User’s name, email, pet, messages, photographs, mood on a given day, or any wearable value.
The only disclosure to that employer is an aggregate, and only when at least 50 different people on the domain checked in during the period. Below 50, no report is produced. The employer cannot set a lower floor. The aggregate, when produced, states the count of people, the count of check-ins, the average human mood as a percent, the average pet mood as a percent, and the fraction of check-ins that included a wearable reading. The fraction is not the reading.
A personal mailbox, including Gmail, iCloud, Outlook, Hotmail, Yahoo, and Proton, is not placed in an employer pool. Deletion of the account removes that User’s check-ins from reports produced after the deletion.
8. Sensitive personal information
Sensitive personal information under this Policy comprises human wearable readings, readiness scores, screenshots of a human health or wearable screen, the mood number the User enters about the User, and any account field that describes the User’s body.
Pet medical notes are confidential. They describe an animal. Paw Ventures does not use them to infer the User’s health.
Paw Ventures uses sensitive human information only under Section 3, does not use it to infer characteristics for advertising, and does not sell it. The User withdraws consent by disconnecting and by requesting deletion.
9. Consumer health data — Washington and Nevada
This Section is the consumer-health-data notice for residents of Washington and Nevada, and Paw Ventures applies it to human health data of every User covered by this Policy.
Collected: the categories in Section 3, the readiness integer, and a self-reported mood number, from the User, from Apple Health, from Health Connect, or from a screenshot the User submits.
Purpose: Section 3.2, and security of that feature.
Sharing: Google Cloud, as processor, for hosting. Google Gemini, only if the User submits a wearable screenshot to be read. Not sold. Not shared with advertisers. Not used to geofence a health-care facility.
Authorization: the connect action, and a separate confirmation for a human wearable screenshot. Paw Ventures does not sell consumer health data and does not request a sale authorization. A future sale authorization, if ever required, would name the buyer and the data and would be separable from use of the application.
Rights: the User may confirm, access, withdraw consent, and delete consumer health data by email to contact@wuufy.com or by deleting the account. Paw Ventures will authenticate the request. A denial may be appealed by reply to the denial. Paw Ventures will not discriminate for exercise of these rights. Deletion does not cancel a store subscription.
10. Retention
| Data | Period |
|---|---|
| Account and pet profile | Life of the account, then deletion or dissociation within 30 days, except a record required for a legal claim, tax, or security incident |
| Human health rows, readiness scores, human wearable screenshots | Life of the account, or until the User requests deletion. Deleted within 30 days of the request or of account deletion. Backups expire within 90 days. Not retained for research after deletion |
| Mood entries and pet logs | Life of the account, then the same 30 days, unless a safety incident is under legal hold |
| Pet photographs used to operate the Services | Life of the account, then deletion of identifiable copies |
| Pet data the User donated under Section 5 | While research sharing remains on. Identifiable copies are deleted when the User turns it off or deletes the account. A de-identified pattern already inside a trained model is not extractable from that model. An unmarked wearable photograph is not kept for research |
| Crash logs | Sentry’s retention, without the health payload |
| Security logs | A limited period of months |
| Subscription records | As required by tax and accounting law |
11. Requests
In Settings the User may export a copy and may delete the account. Export includes the account, pets, logs, conversations, daily check-ins, and human wearable rows. Deletion requires the password, deactivates the account, and deletes the human wearable rows and check-ins, which then drop out of any later employer aggregate.
The User may also email contact@wuufy.com. Paw Ventures may require proof of control of the account. Paw Ventures will respond within 45 days, subject to one extension of 45 days where the User’s state permits the extension and Paw Ventures states the reason. Consumer-health-data requests also follow Section 9. Email is available if the application is no longer installed.
Paw Ventures will not delete information it must keep to complete a transaction the User still wants, to detect a security incident, to comply with law, or to protect against fraud. A denial will state the reason.
12. Security and breach notice
Paw Ventures uses encryption in transit and access controls on production systems, and the minimization in Section 3. No method of storage is perfectly secure.
If a security incident involving Personal Information creates a significant risk of harm, or triggers a notice statute, Paw Ventures will notify affected Users and, where required, the Federal Trade Commission under the Health Breach Notification Rule to the extent that rule applies to Paw Ventures as a vendor of a personal health record, state attorneys general, and state residents, within the periods those laws set. Human wearable data is treated as health information for that assessment. Paw Ventures is not a HIPAA covered entity by reason of consumer use of the Services.
13. Children
The Services are offered to persons 18 years of age or older. Paw Ventures does not knowingly collect Personal Information from a person under 18. On notice that a minor has an account, Paw Ventures will delete it. Notice: contact@wuufy.com.
14. State privacy rights
A resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or of any other state with a comparable comprehensive privacy statute, may request to confirm processing and to access Personal Information; to correct it; to delete it; to obtain a portable copy where the statute requires portability; to opt out of targeted advertising, sale, and profiling for decisions that produce legal or similarly significant effects; and to appeal a denial. Paw Ventures does not engage in targeted advertising, sale, or such profiling. The opt-out request is honored.
Where state law requires consent before processing of sensitive data, the wearable connect action is that consent. Collection of sensitive data is limited to Section 3 and is not sold.
California. In the preceding 12 months Paw Ventures collects the categories in Sections 1, 2, and 3: identifiers; customer records; commercial information limited to subscription status; internet or network activity; audio and visual information the User uploads; professional information only if the User submits a professional profile; inferences limited to the operational flag in Section 1; and sensitive personal information under Section 8. Paw Ventures does not collect precise geolocation. Paw Ventures does not sell or share Personal Information as the California Consumer Privacy Act defines those terms. Paw Ventures honors the Global Privacy Control. Paw Ventures does not use sensitive personal information to infer characteristics for advertising. An authorized agent may submit a request with proof of authority. Paw Ventures will not discriminate for exercise of these rights. Categories disclosed to processors are those in Section 6, for the purposes in Section 4. Human health data is not disclosed for cross-context advertising.
California Shine the Light. Paw Ventures does not share Personal Information with third parties for their own direct marketing.
Appeal. If Paw Ventures denies a request, the User may reply to the denial with the subject “Appeal” within 45 days. If the appeal is denied, Paw Ventures will state how to contact the state attorney general where the statute requires that statement.
Illinois. Paw Ventures does not collect biometric identifiers for identification.
New York. Paw Ventures maintains safeguards appropriate to the information, including human health data, consistent with the SHIELD Act.
Nevada. The User may opt out of sale of covered information. Paw Ventures does not sell covered information. Consumer health data is governed by Section 9.
A request is sent to contact@wuufy.com with the subject “Privacy request,” the User’s state of residence, and the email on the account. Paw Ventures will verify the request against the account. There is no fee unless the request is manifestly unfounded or the statute permits a fee for a second copy.
15. Website
wuufy.com publishes this Policy. Essential cookies may maintain a session or a language. Paw Ventures does not operate remarketing pixels, Google Ads remarketing, or advertising cookies on the site or in the application. Human health data is not collected on the website.
16. Processing in the United States
Paw Ventures processes Personal Information in the United States. A User who accesses the Services from outside the United States is informed that the processing occurs in the United States. A resident of Mexico is not governed by this Section.
17. Amendments
Paw Ventures will post amendments on this page and will change the date above. A materially broader use of human health data requires a new consent before that use begins. Continued use of an unchanged feature is not consent to a new health-data purpose.
18. Notices
Paw Ventures, LLC
Attn: Privacy
131 Continental Drive, Suite 305
Newark, Delaware 19713
United States
contact@wuufy.com
Apple and Google are not the privacy contact for Personal Information Paw Ventures holds.