Introduction

Stubo Interactive ("we", "our", "us") is a sole trader based in the United Kingdom, owned and operated by Stuart Westgate. This Privacy Policy is a centralised document covering every public website, application, and service we operate under the Stubo Interactive trading name, including but not limited to:

• stubointeractive.com (our main company website)
• dogpanion.app (our Dogpanion website and progressive web app, installable on Android and iOS)
• Lead generation sites we may operate on separate domains, including but not limited to sites offering eligibility checks for UK government home improvement, energy efficiency, legal, medical, or similar schemes

Wherever you see a link to this Privacy Policy on any Stubo Interactive property, it refers to this document. If you use more than one of our services, the relevant sections below apply to each.

Information We Collect

The specific information we collect depends on which Stubo Interactive service you are using. Across all services, we collect only what is necessary:

• Contact information: If you contact us, we receive your name, email address, and message.
• Usage data: Basic server logs may include IP addresses and browser information for security purposes.
• Account data (Dogpanion and member-only services): If you sign in with Google or another identity provider, we receive your name and email address for authentication.
• App data (Dogpanion): Dog profiles, health records, weight entries, photos, and similar information you enter into the app. This is stored locally on your device by default and only synced to our servers if you sign in and enable cloud sync.
• Subscription and payment data: If you purchase a premium subscription, we receive transaction identifiers, subscription status, and billing information processed by our payment providers (see "Subscriptions and Payment Processing" below). We never receive or store your full card details.
• Lead generation form data: If you submit a form on one of our lead generation sites (for example, an eligibility check for a UK home improvement grant), we collect the information you enter into that form, typically including name, email address, telephone number, postcode, property type, and eligibility answers. See "Lead Generation Forms" below.

How We Use Information

We use collected information to:

• Respond to your enquiries
• Provide the app or service you requested (including syncing your data across devices, processing subscription payments, and passing lead generation form submissions to approved third parties where applicable)
• Improve our services
• Protect against fraud and abuse
• Comply with our legal obligations

Data Sharing

We do not sell, trade, or share your personal information with third parties for their own marketing purposes, except in the specific circumstances set out in this policy:

• Payment processors: When you purchase a subscription, your billing information is shared with the relevant payment provider as described in "Subscriptions and Payment Processing".
• Lead brokers and approved installers: If you submit a form on one of our lead generation sites and give explicit consent, we forward your submission to the approved third-party provider named on that page. Full details are in "Lead Generation Forms".
• Service providers: We use trusted infrastructure providers (for example, Cloudflare and Google) as described in "Third-Party Services". These providers process data on our behalf under appropriate contractual safeguards.
• Legal requirements: When required by law, court order, or to protect our rights, users, or safety.

Local Storage (Your Device)

Our apps store data locally on your device using browser localStorage. This data never leaves your device unless you sign in and enable cloud sync. Locally stored data includes:

• Dog profiles: Names, breeds, dates of birth, weights, photos
• Health records: Vaccinations, vet visits, medications, attachments
• App settings: Dark mode, weight unit, daily tips preference
• Cookie consent choice

You can delete all local data at any time via the "Delete All Data" option in app settings.

Cloud Storage (Our Servers)

If you sign in with Google, your app data is synced to our cloud database (Cloudflare D1) so you can access it across devices. Cloud-stored data includes:

• Google account info: Name, email address (used for authentication only)
• Synced app data: Dog profiles, health records, settings (the same data stored locally)
• Contact submissions: Name, email, message, and any error logs you choose to send
• Login attempts: IP address and timestamp (for rate limiting and security)
• Activity log (Dogpanion): Timestamped records of significant in-app actions, such as adding a dog profile, logging a health record, logging a walk, or using the food checker. This log is used solely to evaluate refund and cancellation requests and to show you a transparent summary of your usage when you request a refund or cancel a subscription. It is never used for advertising or shared with third parties.

You can delete all cloud data at any time via "Delete All Data" in app settings, which removes both local and server-side data.

Data Retention

We retain data as follows:

• Contact submissions: Automatically deleted after 12 months
• Cloud-synced app data (account data): Retained while your account is active. Accounts are automatically deleted after 24 months of inactivity. You can delete your data at any time via "Delete All Data" in app settings.
• Activity log (Dogpanion): Retained while your account is active and deleted when your account is deleted. Individual log entries older than 12 months are automatically removed on a rolling basis.
• Login attempt records: Automatically deleted after 90 days
• Subscription and billing records: Retained for 7 years after the subscription ends, as required by UK tax and accounting law. After this period records are deleted or anonymised.
• Lead generation form submissions: Once your submission has been successfully forwarded to the approved third-party provider you consented to, we delete our copy of the submission from our systems. A minimal audit record (timestamp, source page, broker reference) may be retained for up to 12 months for fraud prevention and to prove consent.
• Analytics data: Retained by Google for 14 months (if you consent to analytics cookies)
• Cookie consent preference: Retained until you change it

Cookies and Analytics

We use cookies on our website. Essential cookies are required for the site to function. Analytics cookies (Google Analytics 4) are only used if you consent via our cookie banner.

When you consent to analytics cookies, we collect anonymous usage data such as pages visited, device type, and approximate location. IP addresses are anonymised. We do not use this data to identify individuals.

You can change your cookie preferences at any time on our Cookie Policy page.

Subscriptions and Payment Processing

Some of our apps (most notably Dogpanion) offer optional paid subscriptions that unlock premium features. We do not process card details or bank information ourselves. Instead, payment is handled by trusted payment providers who act as the Merchant of Record or payment processor for the transaction:

• Lemon Squeezy: We use Lemon Squeezy for subscriptions and one-time purchases. Lemon Squeezy is the Merchant of Record for these transactions, which means they handle payment processing, sales tax, VAT, invoicing, and refunds. Your billing details are entered directly into Lemon Squeezy's secure checkout and are never transmitted through our servers. See Lemon Squeezy's privacy policy.

From our payment providers, we receive a transaction identifier, the subscription plan purchased, the subscription status (active, cancelled, refunded), and the country of purchase. We use this only to grant access to premium features and to handle customer support.

Refunds: If your subscription is refunded, our payment providers return the associated processing fees to us along with the refund, so that the refunded amount reflects what you actually paid.

Lead Generation Forms

Some Stubo Interactive websites are dedicated lead generation sites offering eligibility checks and enquiry forms for UK home improvement schemes, energy efficiency grants, legal services, medical services, and similar third-party offerings. These sites are operated under separate domain names but are owned and operated by Stubo Interactive and are covered by this Privacy Policy.

When you submit a form on one of these sites, we will always make clear:

• The name (or category) of the third-party provider who will receive your details
• What they will do with your details (typically contact you by phone or email about the scheme or service)
• That you are giving explicit consent by submitting the form

Your submission is forwarded to the approved third-party provider (referred to as a "lead broker" or "approved installer") as soon as you submit the form. Examples of the type of providers we work with include:

• Approved home improvement lead networks (such as Lead Pronto, NRG Group, GMS Leads, Pivotal One, and Synergi Marketing)
• MCS-accredited solar, heat pump, and insulation installers
• Regulated legal service providers (for example, will writing and Lasting Power of Attorney providers)
• Regulated medical and dental service providers

The third-party provider becomes an independent data controller for your details once we forward them. Their own privacy policy will apply to how they use your information. We require every provider we work with to be registered with the ICO and to handle data lawfully under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

How we handle your data:

• We only forward your details after you have given explicit, unbundled consent by submitting the form.
• We do not pre-tick consent boxes and we do not bundle consent with other terms.
• We delete our copy of your submission once it has been successfully forwarded, keeping only a minimal audit record (timestamp, source page, broker reference) for fraud prevention and to prove consent.
• We never sell, reuse, or re-broker your data for any other purpose.
• You can withdraw your consent at any time by contacting us, and you can contact the third-party provider directly to exercise your rights against them.

If you are contacted unexpectedly after submitting a form, please contact us so we can investigate and, if necessary, remove the provider from our network.

Advertising

Our websites and apps display advertisements to support our free services:

• Google AdSense: Our websites display ads served by Google AdSense. Google may use cookies and tracking technologies to serve ads based on your browsing history. You can opt out of personalised ads via Google's Ad Settings.
• Google AdMob: We intend to display ads via Google AdMob in future native mobile apps (free tier only). AdMob may collect device information to serve relevant ads. Premium users will not see ads.

See Google's privacy policy for details on how Google handles advertising data.

Affiliate Links

Our websites and apps contain affiliate links. When you click these links and make a purchase, we may earn a commission at no extra cost to you. Our affiliate partners include:

• Amazon Associates: We are a participant in the Amazon Associates Programme, an affiliate advertising programme designed to provide a means for us to earn fees by linking to Amazon.co.uk and affiliated sites.
• Awin: We partner with advertisers through the Awin affiliate network (e.g. pet insurance providers). Awin may use cookies to track referrals. See Awin's privacy policy for details.

Affiliate relationships do not influence our content or recommendations. We only link to products and services we believe are relevant and useful.

Third-Party Services

Our websites and apps may use the following third-party services:

• Cloudflare: For hosting, content delivery, and security. Subject to Cloudflare's privacy policy.
• Google Fonts: For typography. Subject to Google's privacy policy.
• Google Analytics: For anonymous usage analytics (with your consent). Subject to Google's privacy policy. IP anonymisation is enabled.
• Google Sign-In: For authentication in our apps. Subject to Google's privacy policy.
• Google AdSense: For serving display ads on our websites. Subject to Google's privacy policy.
• Google AdMob: For serving ads in our mobile app (free tier only). Subject to Google's privacy policy.
• Google reCAPTCHA: For protecting forms and login pages from automated abuse. Subject to Google's privacy policy.
• RevenueCat: For managing in-app subscriptions in our mobile apps. Subject to RevenueCat's privacy policy.
• Lemon Squeezy: For processing subscription payments on our websites (Merchant of Record). Subject to Lemon Squeezy's privacy policy.
• Google Play Store and Apple App Store: For processing native mobile subscription purchases. Subject to Google's and Apple's privacy policies.
• Amazon Associates: For affiliate product links. Subject to Amazon's privacy policy.
• Awin: For affiliate advertising links. Subject to Awin's privacy policy.
• Lead broker networks and approved installers: Where you submit a form on one of our lead generation sites, your details are forwarded to the approved third-party provider identified at the point of submission. See "Lead Generation Forms" above for details.

International Data Transfers

Some of our third-party service providers (including Google and Cloudflare) are based in the United States. Where your data is transferred outside the UK or European Economic Area, these providers use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data in compliance with UK GDPR.

Data Controller

Stubo Interactive is the data controller for personal data collected through our website and apps. We are a sole trader based in the United Kingdom. As a small business processing minimal personal data, we are not required to appoint a Data Protection Officer. For data protection enquiries, please contact us.

ICO Registration

Stubo Interactive is registered with the UK Information Commissioner's Office (ICO) as a data controller under the Data Protection Act 2018.

ICO Registration Number: ZC121889

You can verify this registration via the ICO public register.

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data based on the following legal grounds:

• Consent: When you accept optional cookies (analytics, advertising), contact us, sign in to sync your data, or submit a lead generation form authorising us to pass your details to a named third-party provider
• Contract: When we provide our app services to you (for example, cloud sync for signed-in users, or a paid subscription for premium features)
• Legal obligation: For retaining billing and tax records as required by UK tax and accounting law
• Legitimate interests: For security, fraud prevention, service improvement, and maintaining our services

Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restrict processing: Request that we limit how we use your data
• Data portability: Request your data in a structured, machine-readable format. If you are a signed-in Dogpanion user, you can download all your data immediately via Settings in the app (Export My Data), which provides a complete JSON export of your dogs, health records, and settings.
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent (e.g. via cookie settings)

To exercise any of these rights, please contact us. We will respond within one month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect information from children. If you believe we have collected data from a child under 13, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will make reasonable efforts to notify you.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.