Privacy Policy

1. The short version

• What you type about your dog is sent to our server and on to Anthropic, which is what writes the plan. It is stored against your account so the plan is still there tomorrow.
• Your dog's name, breed and rough age are stored too, because the plan is written about a particular dog.
• You do not need to give us an email address, a name, or a card. The app works from the first launch with an anonymous account, and signing in is an offer rather than a wall.
• There is no analytics, no advertising, no tracking of any kind, and no third party SDK doing any of it.

2. What you type, and where it goes

When you describe what your dog is doing, that text is sent to a server we operate and forwarded to Anthropic, which generates the plan. Anthropic processes it to produce the response, subject to its own privacy policy at anthropic.com/legal/privacy.

We keep it. The problem in your own words is the only record of why a plan exists, it is shown back to you on the plan itself, and a later plan is written to build on the earlier ones rather than repeat them. It is stored exactly as you typed it and is never tidied on the way through.

Some of what you type never reaches a model at all. A check runs on your phone first, with no network, and if what you describe reads as aggression or as a medical sign the app stops there and shows you how to find a person instead. Nothing is sent in that case.

3. Your dog

The name you give, the breed if you give one, and an approximate age. Age is approximate on purpose: the app asks in years and stores a date, because people know roughly how old their dog is and not the date.

Which sessions you did and how you said each one went are stored as well. That record is what the plan adapts from, and it is what comes back if you change phone.

4. Your account

Heel creates an anonymous account on your phone the first time you open it. It is an identifier and nothing else: no email, no name, no password. It exists so that what you save belongs to you and not to anybody else using the app.

If you sign in with Apple later, that same account gains an email address and keeps everything already in it. Signing in never starts you over, and you can use Heel indefinitely without doing it.

5. What we do not collect

No analytics, no advertising identifiers, no location, no contacts, no photos, no microphone, no tracking across other apps or websites. There is no analytics or advertising code in the app to do any of it, and nothing here is ever sold or shared for advertising.

6. Who else handles it

• Supabase, which hosts the database and the account system. Heel's data lives in its own project in Canada and is not mixed with any other app of ours.
• Anthropic, which generates the plans from what you type.
• Apple, which handles payment for Heel Plus and tells the app whether a subscription is active. We never see your card.

7. Crash reports

If Heel crashes, iOS gives the app a short summary of what went wrong. That summary stays on your phone. It is attached to a support email only if you choose to send one, and you can read it before you do. It contains an error type and a build number and nothing about you.

8. Stopping the plan generator from being abused

Generating a plan costs us money, so the server counts how many requests come from one account and from one network connection in an hour. The network part is stored as a one way hash with a secret mixed in, never as an address. It cannot be turned back into where you were, and it is not used for anything except that count.

9. Keeping and deleting

Your plans and sessions are kept while your account exists, because losing them is the thing this is meant to prevent.

You can delete your account from inside the app. Open the Account tab, choose Delete account, and confirm. Your dogs, your plans and every session you have logged are removed from the server and from your phone straight away, and it cannot be undone.

Deleting your account does not cancel a Heel Plus subscription. Apple holds that and we cannot end it for you, so cancel it in Settings first or it carries on after the account is gone.

Backups of the database are kept for seven days and are then discarded, so a copy of what was deleted can survive in a backup for up to that long. Nothing reads those backups in normal use and we would never restore one to bring a deleted account back.

Deleting the app on its own removes the copy on your phone but not the copy on the server. If you cannot get into the app, email orchardskydigital@gmail.com and ask, and we will do it and confirm when it is done.

10. Children

Heel is not directed at children under 13 and we do not knowingly collect anything from them.

11. Changes to this policy

If this policy changes, this page changes with it, and the effective date above changes too.

12. Contact

orchardskydigital@gmail.com