DenKeeper Privacy Policy

Effective date: 2026-09-30

DenKeeper is operated by Ross Gallagher, an individual based in Scotland. This policy explains how DenKeeper handles personal information when you use the DenKeeper mobile application and related services.

DenKeeper does not sell personal information or use it for advertising. We use optional product analytics through PostHog to understand how people set up households and use DenKeeper's care features. Product analytics is off until you choose to allow it. You can decline or turn it off in Settings → Privacy without losing access to pet-care features.

Information we collect

Information you provide

• Account information. Clerk handles sign-up and authentication. DenKeeper receives identifiers and profile details such as your email address and name.
• Household and pet information. This includes household membership, member roles, pet details, care routines, schedules, reminders, vet details, health notes, and other information you add.
• Care records. This includes activities, medication records, training records, weights, purchases, costs, and free-text notes you choose to record.
• Photos. This includes pet and activity photos you choose to upload.
• Tracked walks. If you choose to record a GPS walk and grant location permission, DenKeeper collects precise location during that walk, including while the app is in the background or the screen is locked. The device records location samples and their times, and available altitude and speed; route coordinates are used to calculate distance. When you save, DenKeeper uploads the route coordinates, distance, duration, start time, selected pets, and any waypoints, notes, tags or photo locations you add. Raw location-sample times, altitude and speed are not included in the saved route. A route can reveal sensitive places such as your home.
• Support and privacy requests. This includes messages and information you send when asking for help or exercising a privacy right.

Information collected when the service operates

• Authentication and security information. Clerk and DenKeeper process account identifiers, session information, and security events needed to authenticate and protect accounts.
• Notification information. If you enable notifications, DenKeeper processes a device push token and the reminder content needed to ask Expo and Apple to deliver a notification.
• Technical and diagnostic information. Sentry receives crash, error, performance, device, operating-system, app-version, and related diagnostic information. Service providers may also create operational and security logs when they host or deliver the service.
• Website request information. Cloudflare may process network and request information when it delivers the DenKeeper legal website.
• Optional product analytics. When you allow it, DenKeeper sends PostHog an anonymous installation identifier before sign-in and an opaque account identifier after sign-in, together with an opaque household identifier for household-related events. These identifiers are pseudonymous, not anonymous once associated with your account or household. Events describe selected screens, sign-up and household setup, invitations, care-record outcomes, routine and reminder setup, notification permission and opening outcomes, walk start and end outcomes, and Premium screens, subscription attempts and access outcomes. Properties include broad feature and care categories, member role, pet and member counts or count buckets, Premium access state, random session and operation identifiers, event time, and app version, build, platform and release context. We do not send the contents of care records, invite codes or recipients, notification text, or raw navigation URLs to PostHog.

DenKeeper does not use advertising identifiers or advertising trackers. If you allow product analytics, PostHog receives selected app-interaction events and technical context described below. Analytics events do not include GPS coordinates or walk routes, names or contact details, photos, notes or other free-text content, medication names or doses, health measurements, exact schedule times, or expense amounts. Product analytics is separate from the information needed to provide DenKeeper's care features and from Sentry crash and performance diagnostics.

How we use information

DenKeeper uses personal information to:

• provide accounts, shared households, pet-care records, schedules, and reminders;
• show household members the shared information and attribution needed to coordinate pet care;
• store and deliver photos you choose to upload;
• record and display walks you choose to track, including routes, distance and duration;
• secure, operate, troubleshoot, and improve service reliability;
• with your permission, understand household setup, shared caregiving, repeated care logging, feature adoption and Premium interest, so we can improve DenKeeper.
• respond to support, privacy, legal, and security requests; and
• comply with legal obligations and protect users, DenKeeper, and others.

Where UK data-protection law applies, the legal basis depends on the activity. Processing may be necessary to provide the service you request, comply with law, pursue legitimate interests in securing and operating the service, or act on your consent where consent is requested. You can withdraw consent for optional device permissions through your device settings.

For optional product analytics, we ask for your consent before collection begins. You can withdraw that consent through Settings → Privacy. Declining or withdrawing consent does not prevent you from using DenKeeper's care features.

How we share information

Other household members

Information added to a shared household is available to other members of that household according to the access controls provided by the current beta. Do not add information you are not entitled to share with those members.

Saved walk routes, waypoints and photo locations are shared according to those household and pet access controls. Authorised service administrators can inspect saved routes and map summaries of walk starting locations when operating and supporting the service. DenKeeper does not use walk locations for advertising.

Service providers

DenKeeper uses the following providers for the current iOS beta:

These providers process information on DenKeeper's behalf or under their own terms where they independently provide a platform service. They may process personal information in the United Kingdom, the European Economic Area, the United States, or other countries in which they operate.

When UK data-protection law restricts an international transfer, DenKeeper relies on a transfer mechanism permitted by that law. Depending on the provider and destination, this may be UK adequacy regulations or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses. The applicable provider terms and data-protection terms determine the mechanism used for a particular transfer. You can email privacy@denkeeper.app to ask for more information about the safeguards relevant to your information.

DenKeeper may also disclose information when required by law, to address fraud or security threats, to protect legal rights or safety, or in connection with a reorganisation or transfer of the service. DenKeeper does not sell personal information.

Optional product analytics choices

Your analytics choice is stored on this installation of DenKeeper and applies before sign-in and after sign-out. It is not an account-wide choice shared across devices; make your choice on each installation. If you reinstall the app or its local preference is removed, the app may ask again and analytics remains off until you allow it. Turning analytics off stops new analytics collection and delivery and clears unsent analytics stored by this installation. It does not remove events already received by PostHog, and a request already received by the service cannot be recalled. To request deletion of previously collected analytics, email privacy@denkeeper.app. Deleting your DenKeeper account does not currently trigger automatic deletion of PostHog data.

Retention and deletion

DenKeeper keeps personal information only for as long as it is reasonably needed for the purposes described in this policy:

• Accounts and memberships. Account, profile, settings, and household-membership information is kept while your account is open. It is deleted when your account is deleted, subject to the shared-record treatment and legal exceptions below.
• Household and care records. Pet details, routines, schedules, reminders, care history, notes, costs, and similar shared records are kept while the relevant household uses the service. An authorised household member can delete records using the controls available in the service. Shared records may remain after one member deletes their account so the remaining members retain a coherent household history.
• Walks and local recovery. Saved routes, waypoints and photo locations follow the shared-record retention described above. Deleting your account does not automatically delete routes shared with a household; routes may still reveal places associated with you even after your profile attribution is removed. The device keeps an account-specific walk checkpoint for interrupted-walk recovery. Restored walks are paused until you resume them. Saving or discarding the walk, or signing out, clears that checkpoint. You can stop location recording in the app or revoke location permission in device settings.
• Photos. Uploaded photos are kept with the household records to which they relate. Deleting a record requests removal of associated uploads where the service can establish ownership. Some uploads can remain if removal fails or ownership cannot be established, including shared-walk photos whose creator account has been deleted. Contact privacy@denkeeper.app to request removal in these cases. Copies may also remain temporarily in backups as described below.
• Unfinished walk photos. Walk photos upload when you add them, before you save the walk. An uploaded photo may remain in storage if you discard the unfinished walk or remove the photo before saving. Contact privacy@denkeeper.app to request deletion of an unfinished walk upload.
• Device registrations. Push tokens and related device registrations are kept while notifications are enabled and the registration remains valid. They are removed when the device is unregistered, the account is deleted, or the token is identified as invalid.
• Diagnostics and logs. Crash reports, diagnostics, and operational or security logs are kept only for as long as reasonably needed to investigate problems, maintain reliability, prevent abuse, and protect the service, taking account of the retention controls configured with each provider. They are then deleted or anonymised where the provider supports it.
• Optional product analytics. We keep identified analytics only for as long as reasonably needed to understand use of DenKeeper and improve its features, taking account of the retention controls configured with PostHog. Turning analytics off clears unsent analytics on this installation but does not delete previously received events. You can request deletion of previously collected analytics at privacy@denkeeper.app. Such requests are handled separately from deletion of shared household care records.
• Support, privacy, and legal records. Correspondence and records of requests are kept for as long as needed to respond, demonstrate compliance, resolve disputes, and establish or defend legal claims.
• Backups. Deleted information may remain temporarily in encrypted or access-controlled backups until it expires through the normal backup cycle. Backups are used for disaster recovery and are not restored to make deleted information available again except where recovery from an incident requires it.

DenKeeper may keep particular information for longer where required by law, or where reasonably necessary to establish, exercise, or defend legal claims. When information is no longer needed, DenKeeper deletes or anonymises it where reasonably practicable.

You can request account deletion in the app. If you are the sole owner of a household, you must transfer ownership or delete that household before your account can be deleted.

Account deletion removes your DenKeeper profile, device registrations, settings, and household memberships, and DenKeeper asks Clerk to delete the corresponding authentication account. Records and photos shared with a household may remain so that other members retain a coherent household history, but those retained records no longer identify you through the deleted DenKeeper profile. Provider backups, logs, and records that a provider keeps under its own legal obligations follow the criteria described above and the provider's applicable terms.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a portable copy of personal information. You may also have a right to withdraw consent and complain to a data-protection authority.

There is no self-service data export in the current beta. To exercise a right or request an export, email privacy@denkeeper.app. DenKeeper may need to verify your identity before completing a request.

If UK data-protection law applies, you can also complain to the UK Information Commissioner's Office.

Children

The current beta is only for people aged 18 or over and is not directed to children. DenKeeper does not knowingly offer the current beta to anyone under 18. If you believe a child has provided personal information, email privacy@denkeeper.app.

Security and international processing

DenKeeper uses access controls, encrypted network connections, managed hosting safeguards, and other technical and organisational measures intended to protect information. No method of storage or transmission is completely secure.

Providers may process information outside Scotland or the United Kingdom. The international-transfer safeguards described under "How we share information" apply to restricted transfers from the United Kingdom.

Changes to this policy

DenKeeper may update this policy as the service or legal requirements change. Material changes will be communicated through an appropriate channel, and the effective date will be updated. Adding analytics, advertising technology, new processors, paid features, Android distribution, or materially different data uses requires a privacy and App Store disclosure review before release.

Contact

The data controller is Ross Gallagher, an individual based in Scotland.

Email: privacy@denkeeper.app