Privacy Policy for the DoggoMeal Website
This privacy policy explains how personal data is processed when you use the DoggoMeal website and browser-based DoggoMeal features.
It applies in particular to doggomeal.de, public information pages, login and registration pages, browser-based account features, the Android account deletion page and the legal pages. The separate privacy policies for iOS and Android additionally apply to the native apps.
Convenience translation. This English version is provided for your convenience only. The German version at doggomeal.de/datenschutz is the legally binding one; in case of any discrepancy, the German version prevails.
1. Controller
The controller within the meaning of the GDPR is DoggoMeal – Kim Marques, Ziegelstraße 10, 34121 Kassel, Germany.
Contact: support@doggomeal.de. The full provider details can be found in our legal notice at doggomeal.de/en/legal-notice.
2. Hosting, delivery and server log data
The DoggoMeal website is delivered via Vercel. We use Supabase for authentication, database, storage and parts of the API processing. When you access the website, technically necessary server and security data are processed, in particular the IP address, date and time, requested content, referrer, browser type, operating system and status information.
This processing is necessary to provide the website securely, reliably and with good performance, to analyse errors and to prevent abuse.
- Legal basis: Art. 6(1)(f) GDPR.
- Legitimate interest: the secure, resilient and economical provision of DoggoMeal.
3. Cookies, session cookies and similar storage
We currently do not use any marketing or retargeting cookies on the website. Only technically necessary cookies or comparable browser storage are used.
These include in particular session cookies for login and account features, the storage of your cookie decision and local browser storage for selected convenience features in browser-based DoggoMeal areas.
If you accept optional convenience cookies, we may store app download and partner attribution, e.g. the source, campaign, partner code or offer code of a store click. These cookies are not used for retargeting and are not set for third-party advertising networks.
- Technically necessary login/session cookies: in particular Supabase auth cookies such as
sb-*for secure session management. - Cookie consent storage: your choice is stored in the cookie
dm_cookie_preferences_v1and additionally in local browser storage. - Optional app/partner attribution: after consent,
dm_growth_sourceanddm_growth_attributionmay be set to make campaign and partner clicks traceable for up to 30 days. - Local browser storage: browser-based features may cache e.g. chat drafts, unread states or display preferences locally on your device.
- Legal bases: Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) for technically necessary storage and access, and Art. 6(1)(f) GDPR for the subsequent processing.
4. Partner enquiries, Bowl Check and reach measurement
If you use the Bowl Check (“Napf-Check”), partner pages, app download links or the partner enquiry form, we process the information you enter as well as technical usage data, e.g. page, campaign, partner code, referrer, browser information and a truncated hash of the IP address.
We use this data to answer enquiries, evaluate partner funnels, prevent abuse and develop DoggoMeal further as a business. The Bowl Check does not replace a veterinary diagnosis or nutritional advice.
- Legal bases: Art. 6(1)(b) GDPR for partner enquiries and Art. 6(1)(f) GDPR for reach measurement, security and funnel evaluation.
5. Registration, login and browser-based account features
When you register, log in or use browser-based account features, we process in particular your e-mail address, authentication data, session information and the profile, dog profile and community data belonging to your account.
This concerns in particular login, registration confirmation, profile data, deletion requests, support cases and further browser-based features, insofar as they are offered on the website.
Providing an e-mail address and login credentials is necessary to create and use a DoggoMeal account; without them, no account can be provided. Dog profile details (including the dog’s weight, age, activity level, allergies and intolerances) are voluntary but are required for the recipe and portion calculation. These details relate to the animal and are not health data of a natural person within the meaning of Art. 9 GDPR.
- Legal basis: Art. 6(1)(b) GDPR.
6. Uploads, communication and support
If you upload content via browser-based DoggoMeal features or contact us, we process the data you provide, e.g. profile details, images, messages and e-mail content.
Transactional e-mails and support communication may be processed via our mail infrastructure, Resend and internal support and mailbox systems, insofar as this is necessary for communication, verification, support handling or follow-up.
- Legal bases: Art. 6(1)(b) GDPR for contract-related communication and Art. 6(1)(f) GDPR for general support, security and record-keeping.
7. Recipients and processors
Data processing agreements pursuant to Art. 28 GDPR are in place with the service providers listed below. On request at support@doggomeal.de, we will provide a copy of the safeguards used for third-country transfers.
- Vercel Inc. – hosting and delivery; compute region Frankfurt (EU). Company headquarters in the USA; insofar as processing takes place in the USA, it is based on EU standard contractual clauses.
- Supabase Inc. – authentication, database, storage and realtime. Processing in the region configured for the project; insofar as processing takes place outside the EU or EEA, it is based on EU standard contractual clauses.
- Resend – sending of transactional e-mails; processing in the USA on the basis of the EU-US Data Privacy Framework and supplementary standard contractual clauses.
- Google Workspace (Google LLC) – support and mailbox infrastructure for e-mail correspondence; processing in the USA on the basis of the EU-US Data Privacy Framework, under which Google is certified.
- Note: push notifications (Firebase Cloud Messaging, Apple Push Notification Service) and the handling of subscriptions (Apple App Store, Google Play) take place exclusively in the native apps – details are set out in the privacy policies for iOS (doggomeal.de/en/privacy-ios) and Android (doggomeal.de/en/privacy-android).
8. Retention periods
- We store server, security and API logs only for as long as necessary for stability, security and abuse prevention.
- Session cookies generally remain stored until you log out, the session expires or you delete them in your browser.
- Cookie consent and local convenience storage remain until withdrawn, deleted in your browser or technically renewed. Optional app/partner attribution cookies expire after 30 days at the latest.
- Account-related data is additionally subject to the retention periods of the respective DoggoMeal account. After account deletion, a minimised deletion record may be kept for up to 12 months; billing-relevant data may generally be kept for up to 10 years, transaction or e-mail related records for up to 6 years and legal or consent records for up to 3 years.
9. Your rights
To exercise your rights or if you have questions about data protection, you can contact us at support@doggomeal.de.
The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, HBDI), Postfach 3163, 65021 Wiesbaden, Germany. You may also contact the supervisory authority of your habitual place of residence.
- the right of access (Art. 15 GDPR),
- the right to rectification (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR),
- the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
- the right to withdraw consent with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected,
- the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
10. No automated decision-making
There is no automated decision-making producing legal effects or similarly significant effects within the meaning of Art. 22 GDPR. The recipe and portion calculation is a deterministic calculation based on your dog profile details (e.g. weight, age, activity level) and does not replace veterinary advice.
11. Changes
We update this privacy policy when features, the services used or legal requirements change. The current version is available at any time at doggomeal.de/datenschutz (German, binding) and doggomeal.de/en/privacy (English translation).
