Privacy Policy for the DoggoMeal App (iOS)

1. Controller

2. Which data we process in the iOS app

• Account data: e-mail address, login data, session information and security-related authentication data.
• Profile and dog profile data: e.g. the dog’s name, breed, age or date of birth, weight, activity level, allergies, bio, visibility settings and feeding and recipe references.
• Community and communication data: posts, comments, likes, follows, direct messages, notifications and other interactions within DoggoMeal.
• Upload and media data: images you select for your profile picture, cover, dog profile, profile posts or Dog of the Month entries.
• Subscription and status data: plan status, terms, renewal status, product assignment and technically necessary details about in-app purchases.
• Technical data: app version, operating system, language, time zone, error and security logs and device-related push information.

3. Local storage and device features on iOS

• Keychain: your DoggoMeal session is stored locally in the iOS keychain so that you can stay securely signed in after a successful login.
• Photos / media selection: DoggoMeal only accesses images that you actively select and want to upload via the iOS photo picker.
• Push notifications: if you allow notifications, DoggoMeal processes a technical APNs device token to deliver system-wide notifications to you.
• Local recipe reminders: reminders you enable are scheduled on your device as local iOS notifications so that they can be triggered at the chosen time.

4. Purposes and legal bases

• Performance of a contract, Art. 6(1)(b) GDPR: provision of your account, your recipes, dog profiles, community, messaging and Premium features.
• Legal obligations, Art. 6(1)(c) GDPR: retention of legally required records, in particular for billing, tax and legal defence.
• Legitimate interests, Art. 6(1)(f) GDPR: stability, fraud and abuse prevention, error analysis, IT security, support and product operation.
• Consent, Art. 6(1)(a) GDPR: where required for optional push notifications and system notification permissions.

5. Services used and recipients

6. Third-country transfers and no ad tracking

7. Storage and deletion

• We generally store account and profile data for the duration of active use.
• After account deletion, active account, profile, community, upload and push data are deleted or anonymised, unless legal obligations or legitimate record-keeping interests prevent this.
• A minimised deletion record may be kept separately for up to 12 months.
• Billing-relevant data may generally be kept for up to 10 years, transaction and e-mail related records for up to 6 years and legal or consent records for up to 3 years.
• Push tokens are removed when notifications are disabled or accounts are deleted.
• An active Apple subscription is not automatically ended by deleting your account. It is managed or cancelled at apps.apple.com/account/subscriptions.

8. Your rights

• the right of access (Art. 15 GDPR),
• the right to rectification (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• the right to withdraw consent with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected,
• the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Notifications and app settings

10. Changes