Privacy policy

Who's responsible?

Fleck One (see our legal notice) is the controller for the data of trainers, visitors and anyone who writes to us.

For the data a trainer saves about their clients and their dogs, the trainer is the controller and Fleck One acts as their processor, on their behalf (section 4 of our terms and conditions). If you're a trainer's client, please contact them first; we'll help them answer you.

Contact: contact@plannidog.com.

What data?

• Trainers: first and last name, email address, phone number, profile photo, sign-in data, subscription and billing details (your card number is handled by Stripe, never by us).
• Trainers' clients (owners): name, contact details and address, entered by the trainer or by the invited owner.
• Dogs: name, breed, age, photo, session notes, cues, sessions and session payments.
• Visitors: audience measurement, only with your consent (see cookies).
• Team plan requests and messages: whatever you write to us.

Why, and on what legal basis?

• To provide the service and manage your account: performance of the contract.
• To take subscription payments and keep the accounts: contract and legal obligation.
• To send the service's emails (sign-in links, cancelled sessions): performance of the contract.
• To keep the service secure and prevent abuse: legitimate interest.
• To measure audience and improve Plannidog: your consent, which you can withdraw at any time.
• To answer your requests: legitimate interest or steps taken before a contract.

We never sell data and don't do targeted advertising.

Who with?

Only the trainer concerned and our technical providers, within the limits of their role, have access to the data:

• Supabase (database, files and sign-in): servers in the European Union (Paris);
• Vercel (hosting the app);
• Resend (sending emails);
• Stripe (subscription payments and invoices);
• PostHog (audience measurement, hosted in the European Union), only with your consent;
• Google (signing in with a Google account, if you choose to; address suggestions);
• Lovable (hosting the old version of the app, until it closes).

Some of these providers are based outside the European Union, in the United States in particular: transfers are covered by the European Commission's standard contractual clauses or by the Data Privacy Framework between the European Union and the United States.

How long?

• Account and saved data: for as long as the account is open. When you delete your account, they're erased straight away; backup copies, kept for 8 weeks at most, then disappear on their own.
• Inactive accounts: an account with no sign-in for 3 years may be deleted, after an email to warn you.
• Subscription invoices and accounting records: 10 years (legal obligation), with Stripe and in our accounts.
• Acceptance of the terms and conditions: for as long as the account is open.
• Technical logs, the record of emails sent and read notifications: 1 year at most, erased automatically every night; the content of emails kept for checking is erased after 30 days.
• Owner invitations never accepted: 30 days after they expire.
• Team plan requests and messages: 3 years.
• Your cookie choice: 13 months.

Your rights

You can access your data, correct it, have it erased, restrict its use, object to processing based on legitimate interest, get it back in a readable format (portability) and set instructions for what happens to it after your death. You can withdraw your consent at any time (see cookies).

As a trainer, you can do it yourself under Settings: change your name and contact details, download your payments (CSV) and all your data (JSON), and delete your account. Deleting it erases your account, sessions, payments, notes and the records of dogs without a registered owner; dogs with a registered owner stay with them, along with their observations, and your address is removed from the record of emails. As an owner, you delete your account from your profile; your dogs stay with their trainer.

For anything else, email contact@plannidog.com: we'll reply within a month. You can also complain to the CNIL, the French data protection authority (cnil.fr), or to the authority in your own country.

Security

Encrypted connections (HTTPS), access to data restricted by rules in the database (each trainer only sees their own data), passwords never stored in plain text. If a data breach puts you at risk, we'll tell the CNIL and the people affected within the legal time limits.

Dictating notes

To dictate a session note, Plannidog uses your browser's speech recognition: your voice never goes through our servers. Depending on the browser, it's handled by the browser's maker: Chrome sends it to Google, and Safari processes it on the device or sends it to Apple. Plannidog only receives the text you save.

Dictation is optional: you can also type the note, or use the mic on your phone's keyboard.

Artificial intelligence (coming later)

We plan to offer optional AI help with writing session notes (for example, tidying up a note dictated after a session). Nothing like this is switched on today.

Before it launches, this policy will be updated to name the provider, the legal basis and the safeguards: off by default, notes sent without the owner's name or contact details, your data never used to train models, and a data processing agreement with the provider.

Changes

This policy may change; the date of the current version is at the top of the page. We'll tell you about any significant change by email or when you sign in.