Privacy

Last updated 20 September 2026

pupshot scores photos of your dog. This page says exactly what that involves, in the order that matters: what happens to a photo, what we keep, and who else sees any of it.

Photos of people never leave your phone

Before you see the import list, your phone looks at each photo itself. A photo with a person in it is dropped there and then. It is not uploaded, not scored and not stored. Nothing about that check leaves the device.

When you upload a photo anyway, by taking one or picking one, the server runs the same check again and refuses anything with a person in it. The photo is discarded rather than kept.

Incidental hands, legs and laps are fine. A person as the subject is not. That is a boundary of what the app is, not only a safety setting.

What we collect

• Your account. The email address and name your Apple or Google sign-in gives us. If you use Apple's hide-my-email, we only ever see the relay address.
• Photos you choose to rate. Location and camera metadata are stripped on upload. The time the photo was taken is kept as a plain field so the timeline is in order.
• What the score produced. The eight element scores, the overall, the caption and the rendered card.
• What you record. Your dog's name, sex, life stage and whether it is on medication. Walks, feeds, meds and weights that you enter.
• Your household. Who is in it and who logged what.
• A push token, only if you turn reminders on.
• Usage events, such as a card being created or a share page being opened. These are counts of what happened in the app, stored in our own database and mirrored to PostHog, an analytics service, under a random account id. On our public pages PostHog runs without cookies: nothing is stored in your browser, and a visit is a count, not a person.
• Crash reports, sent to Sentry when the app or our server hits an error. A report carries the error, the screen it happened on and your random account id. Never a photo, never your name or email.
• There is no advertising tracker in pupshot, and nothing here is shared with advertisers or joined with data from other apps.

Wags. When you wag a card on a share page, your browser keeps a random id in its own storage so the wag counts once. It is not a cookie, it identifies nothing about you, it is not shared, and clearing site data removes it. The wag itself is stored against the card with that id.

What we never do

• We never infer anything about your dog from a photo. Not health, not weight, not fitness, not age, not breed, not condition. The score is about the photograph.
• We never rate, describe or store a person.
• We never upload your photo library. Your phone shortlists on device and you choose.
• We never track your location. A walk's distance is estimated from how long it took, and the app records that it was an estimate.
• We never sell your data, and we do not use your photos to train any model.

Who else sees it

• Anthropic receives the photo in order to score it, and returns the scores and the caption. It is not used for training.
• Amazon Web Services stores the photos and the cards.
• Railway runs the server and the database.
• Apple and Google handle sign-in and tell us the address you chose.
• Expo delivers push notifications, if you turn them on.

Other people in your household see your dog's timeline and who logged what. Anyone you send a share link to sees that one card. Share links are unlisted rather than secret: anyone with the link can open it.

How long we keep it

We keep your photos and your dog's story until you delete them. The free plan shows the last 30 days of the timeline and a subscription shows all of it, but nothing older is thrown away in the meantime, so it is all there if you subscribe later.

Deleting your account deletes your photos, cards, entries and account record, and share links stop working. See deleting your account.

Your choices

• Photo library access is optional. Without it you take photos in the app instead.
• Reminders are off until you create one.
• You can ask for a copy of your data, or delete your account, at any time. See deleting your account.

Children

pupshot is for adults. An account holder must be old enough to enter a contract where they live. Children can use a parent's household, but we do not knowingly collect anything directly from a child under 13. If you believe we have, write to us and we will remove it.

Where your data lives

pupshot is built in Australia and the Australian Privacy Act applies to it. The servers and storage are in the United States at present, so your data is handled there.

Changes

If this page changes in a way that matters, the app will tell you before it takes effect.

Contact

Privacy questions go to support@pupshot.app.