Privacy Policy

This document describes how Dana collects, uses, shares, and protects personal data.

Effective Date: 2026-10-04

1) Who this policy applies to

This policy applies to users of the Dana mobile application on iOS and Android, and to visitors of danapetcare.com, where this policy is published.

2) Data we collect

Account and profile data

• Sign-in identifiers: your email address and, if you sign in with Apple or Google, the account identifier that provider returns
• Profile fields: display name, username, and an optional profile photo
• Account metadata (user ID, created timestamp, subscription status)

Pet and care data

• Pet profile data (name, species, optional photo/birthdate/notes)
• Care logs (food, water, bathroom, walk, notes, symptoms, behavior)
• Tasks and completion records
• Walk session records (times and duration)
• Walk routes, while a walk is running: latitude, longitude, altitude and accuracy for each recorded point. Recording continues while the app is in the background or the screen is locked, so a walk you started keeps its route until you end it. It stops when the walk ends; Dana does not collect location at any other time.
• Medication and vaccine tracking
• Optional microchip information

Health records (Pro)

• Uploaded photo/PDF veterinary files and related metadata

AI data

Dana AI sends the following to the AI provider named in section 5:

• What you enter in a question or a health check, and your follow-up questions
• Photos you add to a health check (Pro), photos taken with the Food Scanner, and photos of a medication label
• Pet details used to tailor the answer: species, age and latest weight; for questions, also sex, size, coat, active medications with their dose and schedule, vaccines with their next due date, and the last week of care logs

Dana does not send your name, your email address or your pet’s name, though anything you type yourself is sent as you wrote it. Your questions, checks and scans are kept with their answers as your AI history. A photo added to a health check is deleted once the check has been answered, and a medication label photo once it has been read. If a health check does not go through, its photo is kept so that you can try again. Food Scanner photos are kept with your AI history. Deleting your account erases every photo Dana still holds.

Analytics and diagnostics

• Product usage events and diagnostics
• Device/app operational metadata
• PII-scrubbed telemetry (no email/phone/name in analytics payloads)

Cookies and similar technologies on danapetcare.com

The website is separate from the app, and it collects less. There is no account, nothing you type is sent anywhere, and the only storage it uses is the following:

The last two are browser storage, not cookies, and never leave your device.

Google Analytics records the pages you open, whether you scroll to the end of a page, the links you follow to other sites, and taps on the App Store, Google Play and Get Dana buttons. It also records your device type, browser and approximate location (city at most), which it derives from each visit. Invite codes in a page address are removed before anything is stored.

In the EEA, the UK, Switzerland and Quebec, nothing is sent to Google Analytics until you allow it. Elsewhere it runs by default. Wherever you are, the Cookie settings link at the bottom of every page lets you allow or decline at any time. Declining deletes the analytics cookies, and nothing is measured on subsequent pages. Every page works the same with or without analytics.

We run no advertising on the website and no cross-site tracking, and we do not use the advertising features of the analytics product.

Payment data

• Subscription lifecycle metadata (plan, status, renewal state)
• Payment credentials are handled by platform stores and billing providers, not stored by Dana

3) How we use data

We use personal data to:

• Provide core app functionality and caregiver collaboration
• Send reminders and account/system notifications
• Maintain reliability, security, and abuse prevention
• Support subscription management and entitlement checks
• Meet legal obligations and handle rights requests

4) Legal basis (GDPR)

5) Data sharing and processors

We share data only with providers required to operate the service.

DPA statement

• Processor disclosures MUST match signed agreements.
• If a provider DPA is pending, disclosure language MUST reflect that status.

Caregiver sharing

• Owners can invite caregivers and assign permissions.
• Access can be revoked by owners in app settings.

Your profile page

Once you choose a username, you have a profile page. New profiles are public: anyone signed in to Dana can open yours, and anyone on the web can see it at danapetcare.com/@yourusername, where search engines may index it. A public profile shows your username, display name, profile photo, the month you joined, your current and longest care streaks, and the streak medals you have earned. It never shows your pets, their records, your email address or what you log.

You can change this at any time with the profile visibility setting in the app. With Friends, only people you have accepted as friends see the full profile; anyone else signed in to Dana sees your username, display name and photo, and the web page shows only your username. With Private, nothing but your username is shown, and you no longer appear in search in the app.

Legal disclosures and corporate transfers

• We may disclose data when required by law.
• Data may transfer during merger/acquisition with user notice where legally required.

6) User rights

GDPR rights

Users may request access, export, rectification, deletion, objection, and processing restriction.

Deleting your account

You can delete your account at any time from Profile → Delete account in the app. It is erased immediately, with no grace period. If you no longer have the app installed, the public Delete Your Dana Account page explains how to ask us to delete it for you, and what is erased.

CCPA rights

California users may request disclosure and deletion and receive non-discriminatory treatment when exercising rights.

Do Not Sell / Share disclosure

Dana does not sell personal information. Current stack uses service providers for operations, not ad-tech resale.

If future tooling introduces regulated “sale/share” obligations, Dana will add required opt-out controls and update this policy.

7) Retention

8) Security and international transfers

Security controls

• Files you upload are encrypted at rest by our storage provider
• The database accepts connections only from Dana’s own services, never from the internet
• Encryption in transit via HTTPS/TLS
• Sensitive local data stored in secure OS mechanisms
• Role-based access controls and row-level authorization

International transfers

Data may be processed in regions used by core providers. Where required, transfer safeguards are applied.

9) Children’s privacy

Dana is not intended for unsupervised child use.

10) Policy changes

Material policy updates are communicated in-app and/or by email where required.

11) Contact and rights requests

• Privacy and security contact: support@danapetcare.com
• Account deletion, including without the app installed: Delete Your Dana Account
• Publishing entity and legal address: About Dana

Rights requests SHOULD include enough information to verify account ownership and process the request safely.