Privacy Policy

This privacy notice explains how DogJourney looks after your personal data when you use our website or mobile app, and tells you about your privacy rights.

Effective date: 18 August 2026
Last updated: 8 September 2026
Document version: 2026-09-08
Operator / legal entity: Opt-in Solutions Burns
Privacy contact: support@dogjourney.online
Support contact: support@dogjourney.online
Company UID: CHE-326.304.911
Governing law: Switzerland. These documents are governed by Swiss law. You agree to the exclusive jurisdiction of the courts of Switzerland. Mandatory consumer protections that cannot be waived continue to apply.

1. Who we are

Welcome to the DogJourney privacy notice. We respect your privacy and are committed to protecting your personal data. This notice explains how we look after your personal data when you use our website or mobile app, your privacy rights, and how the law protects you.

DogJourney is operated by Opt-in Solutions Burns, a sole proprietorship (“DogJourney”, “we”, “us”, or “our”), which is the controller responsible for your personal data.

Registered address: 19 Bäretstrasse, 3930 Visp, Canton Valais, Switzerland

Company UID: CHE-326.304.911

DogJourney is a platform designed to help people plan trips with their dogs, discover relevant dog-friendly businesses, create itineraries, manage dog profiles, and use the DJ trip-planning assistant.

This privacy notice aims to give you information on how DogJourney collects and processes your personal data through your use of this application, including data you provide when you request a trip plan or itinerary, create an account, or contact us.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you. This privacy notice supplements those notices and is not intended to override them.

You have the right to make a complaint at any time to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland (https://www.edoeb.admin.ch), and, where UK GDPR applies, to the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us first.

If you would like to receive this notice in email format, please email us. Please keep us informed if your personal data changes during your relationship with us.

This application may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party applications and are not responsible for their privacy statements. When you leave our application, we encourage you to read the privacy notice of every site you visit.

2. Information we collect

We collect information that you provide, information generated when you use the Service, and information from providers that help us operate the Service.

If we need to collect personal data by law, or under a contract with you, and you fail to provide that data when requested, we may not be able to perform the contract (for example, to provide the trip plan you requested). In that case we may have to cancel a product or service you have with us, and we will notify you if that happens.

Account information

When you create or manage an account, we may process:

Name and email address
Authentication-provider information where a third-party sign-in option is used (Google or Apple Sign-In via our authentication provider)
Password-related information, where applicable (credentials are managed by our authentication provider; DogJourney does not store your raw password)
Account preferences, language, subscription status, and notification preferences

Profile information

You may provide profile details such as:

Home-base country and full home-base address
Travel preferences and application settings
Language, currency, and display preferences where supported

Dog profile information

To support dog-suitability matching and trip planning, you may add dog profile information such as:

Dog name, breed, age, sex, size, weight, and relevant travel constraints
Dog preferences and behaviour information you supply
Uploaded dog photos
Uploaded passports, vaccination information, microchip information, or other documents if you choose to store them. Passport OCR is a stub and has no connected external OCR provider. Do not assume uploaded passport images are automatically read by a third-party OCR service.

Trip and itinerary information

When you plan trips we may process:

Origin, destinations, stops, dates, flexible-date preferences, transport preferences, and budget
Activities, accommodation, restaurants, bookings, notes, saved places, itinerary versions, and trip modifications
Optional trip requirements you choose to share for planning. Do not include medical diagnoses or other sensitive details unless they are needed to plan the trip
Booking screenshots or files you upload

Location information

DogJourney may process location information that you enter manually, including your home-base address, trip origin, destinations, and other locations included in a trip or search. Map and geocoding providers may process queries needed to suggest addresses or display maps.

“Use my location” on the Explore map: if you select this control, you may be asked for permission to access your device’s location. If you grant permission, DogJourney reads your device’s current latitude and longitude in your browser, requests a standard (not high-accuracy) location reading, and uses it only to centre the Explore map. Those coordinates are not sent to DogJourney’s servers, are not stored in your DogJourney account, are not used to filter Explore search results, and are not retained as a device-location record by DogJourney.

After the map has been centred, map imagery for the visible area may be loaded from OpenStreetMap’s tile service. OpenStreetMap or its relevant service providers may process requests relating to the map region being viewed. The handling of those requests is subject to the applicable third-party provider policies.

If you deny location permission, or if location information is unavailable, you can continue browsing Explore by searching for or selecting a destination manually. Leaving the Explore page discards the temporary on-screen location status.

You can deny or withdraw browser location permission through your browser or device settings. Because Explore-map location is used only temporarily in your browser and is not sent to DogJourney’s servers, disabling permission will not delete any stored device-location record from your DogJourney account.

Planner “current location”: if you choose to start a trip from your current location, the coordinates are stored as that trip’s origin so we can plan routes and travel times. Those coordinates are saved with the trip in your account until you change the origin or delete the trip or your account.

In the iOS app, “Use my location” on Explore may sort already-loaded listings by distance on your device. That on-device sort does not send those coordinates to DogJourney’s servers in the current app version.

How your data is collected

We use different methods to collect data from and about you, including:

Direct interactions: information you give us by filling in forms or corresponding with us by email or in the application (for example when you create an account, purchase a trip plan, add dog or trip details, apply as a partner, or send feedback)
Automated technologies: technical data about your equipment, browser or app, and logs, collected through cookies, server logs, and similar technologies. See our Cookie details page at /cookies
Third parties: identity and contact data from Google or Apple if you choose those sign-in options; payment and transaction data from Stripe; map, place, and geocoding data from the map providers listed in this notice; AI outputs from Anthropic when you use DJ

Payment and subscription information

Payments for website trip packages, subscriptions, and related products are processed by Stripe. DogJourney does not store full payment-card numbers.

We may store billing-related records such as Stripe customer identifiers, checkout or payment references, amounts, currency, subscription or trip purchase status, and invoice-related metadata needed for account management, tax, accounting, fraud-prevention, and support.

The current iOS app does not sell digital trip-planning subscriptions, Single Trip plans, or DJ add-ons. Apple In-App Purchase is not implemented. Do not assume an iOS purchase is processed by Stripe or by Apple unless the checkout screen you used says so.

Communications and support

We may process:

Support messages and email correspondence
Partner-verification communications and partner applications
Feedback, survey responses, and notification preferences
Service emails such as account confirmation messages through our authentication provider

Technical information

Like most online services, we process technical and operational data needed to run and secure the Service, which may include IP address, device, browser, operating-system, application-version, request logs, and error information. These may appear in Vercel and Supabase platform logs.

We currently use essential session cookies (Supabase authentication) and a language-preference cookie named dj_locale, which may be retained for up to 365 days.

We do not currently use a dedicated third-party analytics platform (including Google Analytics, PostHog, Mixpanel, or Vercel Analytics), advertising networks such as Meta, or a dedicated error-monitoring provider such as Sentry, Datadog, or Bugsnag.

AI interactions

When you use DJ, the planning assistant, we process the information you provide in chat and related trip context so DJ can generate itineraries and recommendations. AI is powered by Anthropic (Claude). OpenAI is not used.

Anthropic is used for DJ itineraries, trip previews, Ask DJ, and booking-screenshot extraction when you upload a screenshot or booking file.

Relevant prompts and context may be sent to Anthropic to generate responses. Conversation content and planning context may be stored in your account so you can continue planning.

If you upload a booking screenshot, DogJourney may use AI to extract relevant booking details for your trip. Check extracted information before relying on it.

When you use Ask DJ on a saved trip, those messages are stored with that trip so you can continue the conversation. The trip owner can delete that conversation. Deleting the conversation does not delete the trip or booking records.

After a trip is completed, cancelled, archived, expired, marked payment-failed, or deleted, Ask DJ is no longer available for that trip. Identifiable chat message content is then scheduled for redaction 90 days after that terminal date, unless a legal hold applies. We may keep limited non-content records (for example that a conversation existed). A 12-month audit-row constant exists in code, but no active job currently expires those audit rows.

Planner-draft chats are not covered by the trip-chat retention job. They are processed when you delete your account.

We do not use trip chat content to train public AI models. We do not currently operate a separate opt-in for model training.

DJ provides planning support only. It does not provide medical, veterinary, legal, immigration, border, or official travel advice. Avoid entering information you do not want processed for planning, and do not treat AI outputs as professional advice. Suggested itinerary changes are not applied until you review and accept them.

Please avoid sharing medical or other sensitive details unless they are needed to plan your trip.

3. How we use information

We will only use your personal data when the law allows us to. Most commonly, we use your personal data to:

Create and manage accounts
Create dog profiles and personalise trip planning
Generate itineraries and recommendations
Identify relevant dog-friendly accommodation, activities, restaurants, and services
Save, update, and display trips
Process subscriptions, payments, invoices, and support requests
Verify businesses and dog policies
Provide service notifications and product communications
Improve reliability, quality, security, and user experience
Prevent misuse and comply with legal obligations
Manage partner application and partnership workflows

Purposes and legal bases

We may process your personal data for more than one lawful ground depending on the purpose. Contact us if you need details about the specific legal ground we are relying on where more than one ground is set out below.

To register you as a customer or potential customer we use identity and contact data. Lawful bases: performance of a contract with you; legitimate interests (to supply the information you need to decide whether to purchase a trip plan).

To process and deliver your order, including managing payments, fees and charges, collecting money owed, and proposing travel arrangements, we use identity, contact, financial, and transaction data. Lawful bases: performance of a contract with you; legitimate interests (to recover debts due to us).

To manage our relationship with you, including notifying you about changes to our terms or privacy policy and keeping you up to date with changes to your trip itinerary where you have enabled those updates, we use identity, contact, profile, and communications data. Lawful bases: performance of a contract; legitimate interests (to keep our records updated and to provide the service). Consent, only if we later send marketing with your opt-in.

Marketing

We do not currently operate a marketing email list, newsletter, SMS marketing, or third-party advertising programme. Service messages about your account, security, billing, or a trip you are planning are not marketing.

If we later send marketing, we will only do so if you have opted in. We will not automatically opt you in. You could withdraw that consent at any time by emailing us with “marketing preferences” as your subject, or by using any unsubscribe link we provide.

DogJourney will not pass on or sell your data to any third parties for their own marketing without your permission. If it became necessary to share your details for marketing purposes, we would get your express opt-in consent first.

Where you opt out of marketing, that does not affect personal data we hold as a result of a purchase or enquiry, or service messages we need to send about your account or trip.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

We may process your personal data without your knowledge or consent where this is required or permitted by law.

4. Legal bases

Where GDPR, UK GDPR, the Swiss Federal Act on Data Protection, or similar laws apply, we rely on one or more of the following bases:

Performance of a contract — providing the Service you request, including accounts, trip plans, and paid features
Consent — where we ask for it (for example optional cookies, optional location permission in the browser, or marketing if we offer it and you opt in)
Legitimate interests — operating, securing, and improving the Service, recovering debts, and keeping our records updated, in ways that do not override your rights
Legal obligations — where we must keep or disclose records, including tax and accounting records

6. Business listings and partner information

DogJourney may display business information supplied by businesses, obtained from public sources, or reviewed through DogJourney’s verification process. Business policies, opening hours, prices, availability, and dog-access rules may change.

Statuses such as “Trusted partner”, “Verified”, or “Basic” describe DogJourney’s review state at a point in time. They do not guarantee that a business is suitable for every traveller or dog. Always confirm important details before booking.

7. Data retention

We retain personal data only as long as necessary to fulfil the purposes we collected it for, including legal, accounting, tax, payment, security, support, dispute-handling, and legitimate business needs.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and the applicable legal requirements.

By law we may need to keep basic information about our customers (including contact, identity, financial, and transaction data) for ten years after they cease being customers for Swiss tax and accounting purposes.

Non-coded general account, dog-profile, trip, billing-metadata, partner-application, and upload retention is otherwise based on user deletion or deletion requests, plus legitimate operational, legal, tax, accounting, fraud-prevention, security, backup, and dispute-resolution needs. There is no general account-purge job besides the in-app account-deletion workflow.

Trip records use owner soft-delete (deleted_at) and are not hard-deleted by default except as part of account deletion after collaborator access is removed.

Ready trip previews expire after 30 days, after which the payload is redacted. Generating previews still stuck after 24 hours are marked failed. Failed previews are deleted after 7 days. Upgraded preview content is redacted after 30 days.

Dog photos are stored in the dog-photos bucket. Booking uploads are stored in the trip-bookings bucket and removed when the relevant upload is deleted, and also when an account is deleted.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, for research or statistical purposes, in which case we may use that information indefinitely without further notice to you.

Coded retention summary: Customer identity, contact, financial, and transaction records may be kept for ten years after the customer relationship ends where needed for Swiss tax and accounting purposes. Ask DJ identifiable messages: 90 days after a trip becomes terminal or the conversation is deleted, unless a legal hold applies. Ready previews: 30 days then payload redacted. Stuck generating previews: marked failed after 24 hours. Failed previews: deleted after 7 days. Upgraded preview content: redacted after 30 days. dj_locale cookie: up to 365 days. Accounts, dog profiles, trips, and uploads: until the user deletes them or requests deletion, plus legal/tax/security exceptions. Stripe-hosted payment records remain with Stripe. Chat audit expiry is configured for 12 months but is not yet run by an active job.

8. User rights

Depending on where you live, you may have some or all of the following rights. Requests can be sent to us, subject to identity verification and applicable legal exceptions. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In that case, we will acknowledge your request within one month and keep you updated.

Request access to your personal data (a data subject access request), so you can receive a copy of the personal data we hold about you and check that we are lawfully processing it
Request correction of incomplete or inaccurate data, though we may need to verify the accuracy of the new data you provide
Request erasure of your personal data where there is no good reason for us continuing to process it, where you have successfully objected to processing, where we may have processed it unlawfully, or where we are required to erase it to comply with local law. We may not always be able to comply with an erasure request for specific legal reasons, which we will tell you about if applicable
Object to processing where we are relying on a legitimate interest and something about your particular situation makes you want to object, or where we are processing your personal data for direct marketing
Request restriction of processing, for example while we verify accuracy, where use is unlawful but you do not want us to erase it, where you need us to hold it for legal claims, or while we verify overriding legitimate grounds after an objection
Request the transfer of your personal data to you or a third party, in a structured, commonly used, machine-readable format. This right applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you
Withdraw consent at any time where we are relying on consent. This will not affect the lawfulness of processing carried out before you withdraw consent. If you withdraw consent, we may not be able to provide certain products or services to you, and we will tell you if that is the case
Complain to the relevant supervisory authority

How to make a request

To make a privacy request, contact support@dogjourney.online. We may need to verify your identity before fulfilling a request. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

9. Account and data deletion

You can update many profile and dog-profile details in your account settings.

If you have an account, you can initiate account deletion in the app or website: Settings / Account → Delete your DogJourney account. You can cancel before final confirmation. You do not need to email support to start deletion, and you are not asked to explain why.

Deletion requested is shown when the request is accepted. We then delete or anonymise account data, dog profiles and photos, planner drafts and previews, chats, owned trips after collaborator access is removed, booking uploads, sessions, and authentication identities, as described in this policy.

Deleting your DogJourney account does not automatically cancel a Stripe subscription. Manage Stripe billing in the website billing area. The current iOS app does not sell Apple subscriptions, so there is no Apple subscription to cancel from this app.

Some records may be retained where necessary for legal, tax, accounting, fraud-prevention, security, backup, dispute-resolution, or legal-hold purposes. Stripe-hosted payment records remain with Stripe. Local Stripe customer and payment identifiers may be retained without your name or email.

You also have the right to request erasure of personal data as described in the user-rights section above. We may not always be able to comply with an erasure request for specific legal reasons, which we will tell you about if applicable.

10. Cookies and similar technologies

Cookies are small text files stored on your device. Similar technologies include local storage, session storage, and scripts that can store or read identifiers. The Cookie details page at /cookies is the full, current inventory of what DogJourney uses. It is not legal advice.

Last reviewed: 8 September 2026.

Necessary cookies keep the website secure and working. They include Supabase sign-in cookies, a language cookie named dj_locale (up to 365 days), a first-party dj_consent cookie that stores your cookie-preference choice, short-lived dj_legal_pending tokens during sign-up, planner-draft storage, and session storage used to resume checkout, planning jobs, or onboarding.

Preferences storage can remember optional choices, such as whether you prefer Apple Maps or Google Maps for directions links. This is off until you choose it.

Analytics cookies would help us understand how the website is used. They are not currently used. Marketing cookies would help measure or personalise marketing. They are not currently used.

DogJourney currently uses essential cookies and first-party storage needed to run the service, plus optional maps-app memory if you allow preferences cookies.

We do not currently use: Google Analytics, PostHog, Mixpanel, Vercel Analytics, Vercel Speed Insights, Sentry, Datadog, Bugsnag, advertising pixels, tag managers, session replay, heatmaps, embedded Instagram or social widgets, chat widgets.

We do not load analytics, advertising, or marketing scripts before consent — and we do not load them at all today, because they are not part of the product.

Map tiles, geocoding, payments, and AI planning are loaded or called only when you use those features. Stripe.js is not loaded on public pages. Checkout cookies may appear on Stripe’s domains after you start a payment or open the billing portal.

You can accept optional cookies, reject them, or manage preferences in the cookie banner. After you save a choice, use Cookie settings in the footer or in Account to change or withdraw it. Rejecting optional cookies is as easy as accepting them. Necessary cookies remain active because the website cannot work securely without them.

Closing the preferences window without saving does not count as consent. Scrolling or clicking elsewhere does not count as consent. Cookie choices are separate from the Terms of Service acknowledgement used when you create an account.

If we add a new optional technology, or change cookie purposes in a material way, we will update the consent version and ask again.

You can also block or delete cookies in your browser settings. Blocking essential cookies may sign you out or prevent the website from working correctly.

sb-*-auth-token (and chunked variants) — Supabase (First-party (DogJourney website host)). Keep you signed in, refresh the secure session, and protect account features. Stored as http cookie. Expiry: Managed by Supabase Auth (access token is short-lived; refresh token persists the session until sign-out or expiry).. First-party. Classification: essential. Does not wait for optional cookie consent. Required for sign-in, MFA, passkeys, and account security. Not used for advertising.
dj_locale — DogJourney (Opt-in Solutions Burns) (First-party). Remember the website language you use (English, German, French, or Italian). Stored as http cookie. Expiry: Up to 365 days. First-party. Classification: essential. Does not wait for optional cookie consent. Classified as strictly necessary because it only stores a service language preference so the site can work in the selected language. It is not used for analytics or advertising. Classification remains subject to legal review.
dj_consent — DogJourney (Opt-in Solutions Burns) (First-party). Store your cookie-preference choice and consent version. Stored as http cookie. Expiry: Up to 365 days (retention pending legal review). First-party. Classification: essential. Does not wait for optional cookie consent. Cookie-preference storage is treated as strictly necessary so we can remember and honour your choice.
dj_legal_pending — DogJourney (Opt-in Solutions Burns) (First-party). Hold a short-lived Terms acknowledgement token during account creation or OAuth sign-up. Stored as http cookie. Expiry: Up to 20 minutes for OAuth; up to 7 days for email sign-up confirmation. First-party. Classification: essential. Does not wait for optional cookie consent. Not a tracking cookie. Used only to complete contractual Terms acknowledgement.
dj.planner.briefDraft (and related keys) — DogJourney (First-party). Keep an in-progress trip brief so it is not lost while you plan. Stored as local storage. Expiry: Until you clear site data or the draft is converted/removed. First-party. Classification: essential. Does not wait for optional cookie consent.
dj_pending_trip_checkout, planning-job ids, MFA enrol state, onboarding flags — DogJourney (First-party). Resume checkout, planning jobs, security setup, and onboarding in the same browser session. Stored as session storage. Expiry: Mostly until the tab is closed; some onboarding flags persist locally until setup finishes. First-party. Classification: essential. Does not wait for optional cookie consent.
dogjourney.mapsProvider — DogJourney (First-party). Remember whether you prefer Apple Maps or Google Maps for directions hand-off links. Stored as local storage. Expiry: Until you clear site data or withdraw preferences consent. First-party. Classification: preferences. Optional — stored only after a saved preference. Stored only after preferences consent. Directions links still work without it.
Cormorant Garamond / Plus Jakarta Sans — DogJourney (self-hosted via Next.js next/font) (First-party). Display the website in the DogJourney typefaces. Stored as self hosted asset. Expiry: Cached by the browser as static assets. First-party. Classification: essential. Does not wait for optional cookie consent. Fonts are downloaded at build time and served from the DogJourney origin. They do not load Google Fonts in the browser.
Leaflet / OpenStreetMap tiles (unpkg + tile.openstreetmap.org) — unpkg / OpenStreetMap (unpkg.com, *.tile.openstreetmap.org). Show the Explore and itinerary maps after you open those screens. Stored as third party request. Expiry: Provider-controlled cache; OSM may set its own cookies on tile requests. Third-party. Classification: essential. Does not wait for optional cookie consent. Loaded only when you use a map view (not on public marketing pages). Treated as necessary for the map feature you requested. Legal review should confirm this classification. Map interaction is not treated as consent for analytics or marketing.
Nominatim geocoding — OpenStreetMap Nominatim (nominatim.openstreetmap.org). Turn addresses and place names into map coordinates for planning. Stored as third party request. Expiry: No DogJourney cookie. Nominatim may log requests on its side.. Third-party. Classification: essential. Does not wait for optional cookie consent. Used for user-requested geocoding and maps. Not an advertising pixel.
Mapbox Geocoding API — Mapbox (api.mapbox.com (server-side)). Address autocomplete and geocoding from DogJourney servers. Stored as server only. Expiry: No browser cookie is set by DogJourney for Mapbox.. Third-party. Classification: essential. Does not wait for optional cookie consent. Called from DogJourney API routes, not as a browser SDK on public pages.
Google Maps / Places APIs — Google (maps.googleapis.com (server-side)). Place search, details, and photos for Explore listings; Google Maps directions URLs when you choose that hand-off. Stored as server only. Expiry: No Google Maps JavaScript SDK is loaded on public pages.. Third-party. Classification: essential. Does not wait for optional cookie consent. Photos are proxied through DogJourney. Directions hand-off is a user-initiated link.
Apple Maps directions URLs — Apple (maps.apple.com (user-initiated navigation)). Open directions in Apple Maps when you choose that provider, especially on iOS. Stored as third party request. Expiry: No Apple Maps SDK is embedded on the website.. Third-party. Classification: essential. Does not wait for optional cookie consent.
Stripe Checkout / Customer Portal — Stripe (checkout.stripe.com, billing.stripe.com). Process website payments and let you manage billing. Stored as third party request. Expiry: Stripe may set cookies on its own domains when you enter a payment or portal flow.. Third-party. Classification: essential. Does not wait for optional cookie consent. Stripe.js is not loaded on public pages. Checkout scripts/cookies appear only after you start a payment or open the billing portal. Necessary for a requested transaction. Classification pending legal review.
Anthropic (Claude) API — Anthropic (api.anthropic.com (server-side)). Generate DJ itineraries, trip previews, Ask DJ replies, and optional booking-screenshot extraction. Stored as server only. Expiry: No browser cookie.. Third-party. Classification: essential. Does not wait for optional cookie consent. Not a browser tracking technology. Gating AI planning behind cookie consent is not required for this server-side processing.
Vercel hosting / platform logs — Vercel (DogJourney host / Vercel platform). Host the website and record operational server logs. Stored as server only. Expiry: Platform log retention is controlled by Vercel.. First-party. Classification: essential. Does not wait for optional cookie consent. Vercel Analytics and Speed Insights are not enabled. Server logs are not browser cookies.
Supabase platform logs — Supabase (Supabase project). Operate authentication, database, and storage; retain operational logs. Stored as server only. Expiry: Platform log retention is controlled by Supabase.. Third-party. Classification: essential. Does not wait for optional cookie consent.

11. Security

We use reasonable technical and organisational measures designed to protect personal information, including access controls and encrypted transport where appropriate. We limit access to your personal data to people who have a business need to know, and they may only process it on our instructions.

No online service can be guaranteed completely secure. We work to reduce the risk of accidental loss, unauthorised access, alteration, or disclosure, but we cannot promise that those events will never occur. Please use a strong unique password and protect access to your account.

12. International transfers

DogJourney is operated from Switzerland. Our service providers may process data in countries other than your own, including outside Switzerland and outside the EEA/UK where applicable.

Whenever we transfer your personal data out of Switzerland or the EEA, we take steps designed to ensure a similar degree of protection by using one or more of the following safeguards where required:

Adequacy: we may transfer personal data to countries that have been deemed to provide an adequate level of protection by the Swiss Federal Council, the European Commission, or the UK government, as applicable.

Standard contractual clauses: where we use certain service providers, we may use specific contracts approved for international transfers (including the European Commission’s standard contractual clauses, and UK or Swiss addenda where required).

Please contact us if you want further information on the specific mechanism used when transferring your personal data internationally.

13. Children

DogJourney is not directed at children. The Service does not require users to be 18 or over, and we do not operate a dedicated child or child-traveller profile.

We do not knowingly collect personal data from children for their own accounts. A user may mention in trip notes that a child is travelling with them; that is optional trip context, not a child account.

If you believe we have collected a child’s personal data in a way that is inconsistent with applicable law, please contact us and we will review and delete it where required.

14. Changes to this policy

We may update this Privacy Policy as the application, providers, or legal requirements change. The effective date and last-updated date appear at the top of this page.

If changes are material, we will provide additional notice through the Service or by email where appropriate.

15. Contact

Privacy contact: support@dogjourney.online

General support: support@dogjourney.online

Operator: Opt-in Solutions Burns