This Privacy Policy explains how Mindly Apps Ltd, a company incorporated in Cyprus (registration number HE 491585, VAT number CY60354262D), with its registered office at Digeni Akrita, 54, AKRITAS BUILDING, Office 303, 1061, Nicosia, Cyprus ("Mindly Apps Ltd", "we", "us" or "our") collects, uses and shares personal data when you visit woofmethod.com, take our questionnaire, create an account, buy a plan or otherwise use the Woof Method service (the "Service"). Mindly Apps Ltd is the data controller of that personal data. You can reach us at [email protected].
We wrote this Policy to be readable. If anything is unclear, email us — we will explain.
1. Personal data we collect
Information you give us:
- your email address, and a password once you set one (we store only a hashed form of the password);
- your questionnaire answers — about your dog (name, breed, age, size, weight, behavior) and about you (your goals, routine, how much time you have) — and anything else you choose to tell us in the Service;
- your name and other details if you choose to provide them in your account;
- messages you send to our support team.
Payment information: payments are processed by Stripe. Stripe collects your card or other payment details directly; we never receive or store full card numbers. We receive confirmation of payment, the amount, currency, payment status, the card brand and last four digits, and your subscription status so we can give you access and support you.
Information collected automatically when you use the Service:
- device and connection data — IP address, approximate location derived from it, browser and operating system, screen size, language;
- usage data — the pages and questionnaire steps you view, the buttons you click, the plan you choose, how far you get, time spent, referring website and the campaign parameters (such as UTM tags and advertising click identifiers) in the link you arrived from;
- session recordings of how you interact with our pages, used to fix usability problems (text you type into fields is masked);
- identifiers stored in cookies, local storage and similar technologies (see section 5).
Information from others: if you arrive from an advertisement, the advertising platform (for example Meta or Google) may tell us which campaign or ad brought you here so that we can measure our advertising. We may also receive limited data from our service providers about the emails we send you (for example whether an email was delivered or opened).
2. How we use personal data
- to provide the Service: build and personalize your training plan from your answers, run your account, remember your progress, and email you your plan and service messages;
- to take payments, manage subscriptions, prevent duplicate charges and keep the accounting records the law requires;
- to answer your questions and provide customer support;
- to send you training tips, reminders and offers by email where you have agreed or where the law allows us to email existing customers — you can unsubscribe at any time using the link in every such email or by writing to us;
- to understand how the Service is used, run A/B tests, fix bugs and improve our content and design;
- to measure and improve our advertising, including telling advertising platforms which of their ads led to a sign-up or a purchase and building audiences for our ads;
- to keep the Service secure, prevent fraud and abuse, and enforce our Terms of Use;
- to comply with legal obligations and to establish, exercise or defend legal claims.
We do not use your data for automated decisions that produce legal or similarly significant effects on you.
3. Legal bases (for people in the EEA, the UK and similar jurisdictions)
- Performance of a contract — to provide the Service you signed up for, take payment and support you.
- Consent — for marketing emails where consent is required, and for non-essential cookies and advertising pixels where the law requires consent. You can withdraw consent at any time.
- Legitimate interests — to analyze and improve the Service, to keep it secure, to market to existing customers and to measure our advertising, in ways that do not override your rights and freedoms.
- Legal obligation — to keep tax and accounting records and to respond to lawful requests from authorities.
4. Who we share personal data with
We share personal data with service providers that process it on our behalf and only under our instructions:
- Stripe — payment processing and subscription billing;
- Railway — hosting and the database in which your account and questionnaire data are stored;
- PostHog — product analytics, A/B testing and session recordings;
- Resend — sending our transactional and marketing emails;
- Anthropic — the AI model provider that generates replies in the Experts chat. It receives the questions you type there and the dog details from your profile (name, breed, age, sex, size, goal, training time), never your email, account identifier or payment details;
- advertising and measurement platforms such as Meta and Google, where their tools are enabled on our site — to measure our advertising and show relevant ads (see section 5).
We may also disclose personal data to professional advisers (lawyers, accountants, auditors); to authorities, courts or other parties when the law requires it or to protect our rights, our users or the public; and to a buyer or successor if our business or assets are sold or reorganized, in which case this Policy will continue to apply.
We do not sell personal data for money. Sharing data with advertising platforms for measurement or targeted advertising may count as "sharing" or "targeted advertising" under some US state privacy laws; you can opt out as described in section 8.
5. Cookies and similar technologies
We use cookies, local storage and similar technologies for the following purposes:
- Essential — keeping you signed in, remembering your questionnaire progress and answers so you can pick up where you left off, remembering which version of a page you were shown in an A/B test, security and rate limiting. The Service cannot work without these.
- Analytics — understanding how visitors use the Service (PostHog).
- Advertising — measuring conversions from our ads and building audiences (for example the Meta Pixel and Google tags), where enabled.
You can control cookies through your browser settings, including deleting existing cookies and blocking new ones; if you block essential cookies parts of the Service will not work. Where the law requires it, we ask for your consent before setting non-essential cookies, and you can change your choice at any time. Our systems do not currently respond to "Do Not Track" browser signals; we do honor opt-out requests sent to [email protected] and, where technically supported, Global Privacy Control signals.
6. International transfers
We are established in Cyprus, in the European Union. Some of our service providers (including our hosting, analytics and email providers) are located in the United States or other countries outside the EEA. When personal data leaves the EEA or the UK, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses together with additional safeguards, so that your data keeps an equivalent level of protection.
7. How long we keep personal data
- Account and questionnaire data — for as long as your account exists, and then for up to 3 years after your last activity so that you can come back to your plan, unless you ask us to delete it sooner.
- Answers given before an account was created — for up to 24 months, in aggregated form for analytics after that.
- Billing and transaction records — for as long as tax and accounting law requires (generally 6 to 7 years).
- Support correspondence — for up to 3 years after the matter is closed.
- Analytics and session recordings — in identifiable form for up to 12 months, then aggregated or deleted.
We may keep data longer where needed to resolve disputes, enforce our agreements or comply with the law. When data is no longer needed, we delete or anonymize it.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time where processing is based on consent, without affecting processing that already took place;
- opt out of the "sale" or "sharing" of your personal data or its use for targeted advertising, and not be discriminated against for exercising your rights (residents of California and certain other US states);
- complain to a supervisory authority.
To exercise any of these rights, email [email protected] from the address linked to your account. We may need to verify your identity before acting on a request, and we will respond within the time the law requires (normally one month in the EEA/UK and 45 days in the US). If you are in the EEA, you can lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy) or with the supervisory authority where you live or work. Authorized agents may submit requests on behalf of US residents where the law allows; we will ask for proof of authorization.
9. Marketing emails
If you receive marketing or tips emails from us and no longer want them, click "unsubscribe" in any of those emails or write to [email protected]. We will still send you emails that are necessary to run the Service, such as receipts, renewal notices, password resets and important changes to our terms.
10. Security
We protect personal data with technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), hashed passwords, access controls, and hosting with reputable providers. No system is completely secure, so we cannot guarantee absolute security; if we become aware of a breach that affects you, we will notify you and the relevant authorities as the law requires.
11. Children
The Service is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us at [email protected] and we will delete it.
12. Third-party sites
The Service may link to websites and services we do not operate. Their privacy practices are their own; please read their policies.
13. Changes to this Policy
We may update this Policy from time to time. The current version is always at woofmethod.com/legal/privacy with the date it was last updated. If we make material changes, we will let you know by email or through the Service before they take effect.
14. Contact us
Data controller: Mindly Apps Ltd, Digeni Akrita, 54, AKRITAS BUILDING, Office 303, 1061, Nicosia, Cyprus. Registration number HE 491585, VAT CY60354262D.
Email: [email protected].