Privacy Policy - CalmPup

Version 1.0 · Last updated: August 2026

This English text is a convenience translation. In the event of any inconsistency, the Hebrew version above prevails.

1. Who We Are

The CalmPup app ("the App", "the Service") is operated by Bar Blonder, a registered exempt dealer (עוסק פטור) in Israel ("we", "our", "us").

Trader name	Bar Blonder
Exempt dealer number	208827766
Address	Sarah Aaronsohn St 51, Ramat Gan, Israel
Email	support@calm-pup.com
Phone / WhatsApp	+972-55-291-5897

We are the controller of the database in which your personal information is held, within the meaning of the Israeli Privacy Protection Law, 5741-1981.

This policy explains what personal information we collect, why, who it is shared with, how long it is kept, and what rights you have. It is written in accordance with the Privacy Protection Law (including Amendment 13), the Privacy Protection (Data Security) Regulations, 5777-2017, and the requirements of Google Play and the Apple App Store.

2. Notice Under Section 11 of the Privacy Protection Law

Section 11 requires us to tell you the following when we approach you to collect information:

• Purpose of collection: Providing the App's services - personalising training content, tracking progress, managing subscriptions, arranging professional consultations and private training, improving the service, and security. Full detail in section 4.
• Are you legally obliged to provide it: No. You are under no legal obligation to give us any information. Providing it is entirely voluntary and based on your consent.
• What happens if you don't: Some services will not work. Specifically:
  • Without an email address you cannot create an account (you may use the App as a guest, with limited features).
  • Without dog details, content will not be personalised, but the App will work.
  • Without a phone number you cannot book a consultation or private training, because there is no way to arrange the appointment.
  • Without the pre-consultation questionnaire we cannot prepare the trainer, and the quality of the consultation will suffer.
  • Declining to provide information does not affect any other right of yours, and will not affect an existing subscription.
• To whom the information will be transferred and for what purposes: To technology service providers and to external trainers - full detail in sections 7 and 8.
• Right of access and correction: You have the right to access your personal information under section 13 of the Law, and to request its correction under section 14. See section 12.

3. Information We Collect

3.1 Information You Provide

• Account details: Display name and email address (via Google Sign-In, Apple Sign-In, or email and password).
• Dog profile: Name, breed, age, sex, neutered status, and the behavioural challenges you select with severity ratings and free-text description.
• Photos: Profile picture and dog photo, if you choose to upload them.
• Personal context for the AI Trainer: Free text (up to 500 characters) you may write about yourself and your dog to make answers more relevant.
• Training activity: Exercises completed, activities you create yourself, and post-session mood ratings.
• Support enquiries: The content of messages you send us.

3.2 Information for Consultations and Private Training

The following is collected only if you choose to book an online consultation or submit a private training request, and only for that purpose:

• Phone number - to arrange the appointment.
• Area of residence (city/region) - private training requests only, to match an available trainer near you. We do not collect GPS location.
• Behavioural questionnaire: The issues you face and urgency ratings, when they started, what you have tried, your expectations, the dog's age at adoption, and its daily routine.
• Bite history: Whether the dog has bitten, how many times, and a description of the injury caused. This is essential for safety assessment and for deciding whether the case is suitable for remote consultation.
• Medical information about the dog: Medications, allergies and relevant conditions.
• A video of your dog (up to one minute), if you choose to upload one.
• Free-text notes you choose to add.

3.3 Information Collected Automatically

• Usage data: Screens viewed, lessons completed, progress, streaks, achievements, and paywall interactions.
• Device identifiers: Advertising ID / IDFA, device model, OS version, language.
• IP address and approximate location: Derived from your IP - country/region only, not GPS. Collected by our analytics, advertising and content-delivery providers.
• Crash and error data: Technical reports to improve stability.
• Time zone: For scheduling reminders.
• Notification tokens (FCM): For push notifications.
• Video delivery data: Requests to our video servers, which include your device's IP address.

3.4 Voice Input (Microphone)

The App lets you dictate a question to the AI Trainer. If you use this, the App requests microphone permission and your speech is converted to text by your operating system's speech recognition service (Google on Android, Apple on iOS), subject to their privacy policies. We do not record, store or transmit the audio itself to our servers - only the resulting text, and only if you choose to send it.

3.5 Payment-Related Information

• Subscriptions: Type, status, renewal date and product identifiers. Payment is processed by Google Play or the Apple App Store - we neither receive nor store your card details.
• Consultation payments: Processed by AllPay (an Israeli payment provider) and its processing partner PayMe. We receive payment confirmation, transaction ID, amount, the last four digits and the card brand - not the full card number.
• Accounting records: As required by tax law.

3.6 Browsing Our Website

This policy also covers our website at calm-pup.com. The website is informational only - there is no registration, no purchasing, and we set no tracking or advertising cookies on it.

Browsing does, however, involve minimal technical collection:

• Server logs: Google's Firebase Hosting records the IP address, browser type and request time, for security and operational purposes.
• Fonts: The page loads a font from Google Fonts, so your device's IP address is disclosed to Google when it loads.

We do not link this information to your identity and do not use it for profiling.

3.7 Information We Generate About You

• Weekly recaps: AI-generated text summarising your training week.
• Service notes: Internal notes we may record following a support enquiry or consultation request. These are also subject to your right of access.

4. How We Use Your Information

• Service delivery: Personalised content, progress tracking, subscription and entitlement management.
• AI Trainer: Generating tailored answers - see section 5.
• Consultations and private training: Scheduling, preparing the trainer, and matching a trainer in your area.
• Service improvement: Analysing usage patterns, A/B testing, and content decisions.
• Communication: Training reminders, streak alerts, content updates and service messages.
• Advertising: Serving ads to non-premium users.
• Security and fraud prevention: Detecting misuse, verifying purchases, preventing unauthorised access.
• Legal compliance: Retaining accounting records and responding to lawful requests from competent authorities.
• Trainer-network oversight: Contacting users who were referred to an independent trainer for quality control, verifying the number of sessions held (to calculate the referral fee), and requesting feedback on the service.

We do not sell personal information. We do not transfer personal information to third parties for their own marketing.

5. The AI Trainer

The App includes an "AI Trainer" - a chat feature available to premium subscribers, powered by Google's Gemini model. Here is exactly what happens:

5.1 What Is Sent to Google

When you send a question, the following is sent to Google's servers in addition to the question itself:

• Up to the last four messages in the conversation (each truncated to 500 characters).
• Your dog's profile: name, breed, age, sex, neutered status and the challenges you selected.
• Breed traits (energy level, barking, sociability and similar).
• The free-text personal context you wrote, verbatim.
• Training data: exercises practised and how often, number of training days, consistency, time since your last session, your chosen goal, and mood ratings from your most recent session.

This is sent so the answer relates to your dog rather than being generic. Your name and email address are not sent.

5.2 Retention of Conversations

We do not store your chat history in the App - it is cleared when you close the window. However, some conversations are retained by us for a short period for quality control and abuse prevention:

• Retained are conversations where the answer was unusually short, referred you to professional help, or repeated an earlier question - plus a random sample of approximately 10% of all other conversations.
• The record includes the messages, the answer, and your user identifier.
• These records are deleted automatically after 7 days.

If you save an answer as a "saved tip", it is stored in your account indefinitely until you delete it or delete your account.

Reporting an answer: if you report an offensive, dangerous or incorrect answer from within the chat, we keep a report record containing the answer, the question that preceded it, the reason you selected, and your user ID - in order to review the report and improve filtering and moderation. Report records are retained after account deletion, but without your user ID - in a form that does not identify you.

5.3 Limitations

Answers are generated automatically and may contain inaccuracies. The AI Trainer is not a certified trainer, veterinarian or animal behaviourist, and using it does not create a professional trainer-client relationship. Full detail in the Terms of Service.

6. Advertising

Non-premium users see ads served through Google AdMob. Ads may be personalised based on the device advertising identifier, approximate IP-based location, and previous ad interactions.

• Premium subscribers see no ads at all.
• You can reset your advertising ID or limit ad tracking in your device settings (Android: Settings > Google > Ads; iOS: Settings > Privacy & Security > Tracking).
• On iOS you will be shown an App Tracking Transparency prompt before personalised ads are served.
• If the App is offered in the European Economic Area, the United Kingdom or Switzerland, users in those regions will be shown a dedicated consent request before personalised ads are served, and will be able to change their choice at any time in the App settings.

7. Service Providers With Whom Information Is Shared

We rely on the following providers to operate the Service. Each is subject to its own privacy policy and to contractual commitments to us:

Service	Purpose	Data shared
Firebase Authentication (Google)	Authentication and registration	Email, name, user ID
Cloud Firestore (Google)	Data storage	All user and training data
Firebase Storage (Google)	Photo and video storage	Profile pictures, dog photos and videos
Cloud Functions (Google)	Server logic, payment verification, AI calls	User ID and request data
Firebase Remote Config (Google)	Configuration and A/B testing	Device identifier
Firebase Analytics (Google)	Usage analysis	Usage events, device identifiers, user ID
Mixpanel	Advanced product analytics	Usage events, our user identifier, subscription status, streak and achievement data, device model, OS and approximate IP-based location. Data is stored on Mixpanel's servers in the European Union.
Firebase Crashlytics (Google)	Stability monitoring	Technical crash reports, user ID
Firebase Cloud Messaging (Google)	Push notifications	Device tokens, notification preferences
Firebase App Check + Play Integrity / App Attest	Preventing unauthorised server access	Device and app attestation tokens
Google AdMob	Advertising	Advertising ID, ad interactions, approximate location (IP)
SKAdNetwork (Apple)	Privacy-preserving ad measurement on iOS	Aggregated conversion data
Google Play Billing / Apple StoreKit	Subscription processing	Purchase token, product ID
RevenueCat	Cross-store subscription management	User ID, subscription status, product IDs, transaction history
AllPay	Consultation payment processing	Name, email, phone, amount and transaction ID
PayMe	AllPay's processing partner - performs the actual payment processing and merchant verification	Transaction and payment-instrument details, processed by them as a licensed payment processor
Cardcom	The licensed acquirer that actually charges the card with the card schemes	Card and transaction details, processed by them as a licensed acquirer
Calendly	Consultation scheduling	Name, email, phone number, time zone, appointment time
Google Gemini (Google AI)	AI Trainer and weekly recaps	As detailed in section 5
Gcore (content delivery network)	Streaming training videos	IP address and video file requests
Google Fonts	Font loading	Device IP address
Google / Apple speech recognition	Speech-to-text conversion	Your speech recording, if you use the feature

Google services are subject to Google's Privacy Policy.

8. Transfer to External Trainers

If you submit a request for in-person private training, we may refer you to an independent dog trainer from our trainer network. In that case we will pass to the trainer the information they need to contact you and prepare for the session:

• Your name and phone number
• The area of residence you provided
• Your dog's details and the issues you described
• Bite history and medical information about the dog - critical for the trainer's safety and for planning the session correctly

These trainers are independent contractors, not our employees. Each has signed an agreement with us requiring them to keep the information confidential, use it solely to provide the service you requested, not use it for marketing, not pass it to anyone else, and destroy it when the engagement ends.

We will not pass your details to any trainer unless you have requested private training. If you do not want your details passed on, do not submit the request, or contact us before we do so.

9. Camera, Gallery and Microphone

• Camera and gallery: Required only to take or select a profile picture, a dog photo, or a video of your dog for a consultation. We have no access to any other media on your device.
• Microphone: Required only for voice input to the AI Trainer, as described in section 3.4.

You may revoke any permission in your device settings at any time. Doing so will only disable the relevant feature.

Photos and videos you upload are stored on Firebase Storage, used solely for display in the App and for the consultation you requested, and are never sold or used for advertising. They are deleted when your account is deleted.

10. Data Storage and Security

10.1 Storage Location

Data is stored on Google Cloud servers in the Middle East region (me-west1, Israel). Some data is processed on servers in other locations - see section 13.

10.2 Security Measures

• Encryption in transit (TLS) and at rest
• Rule-based access control (Firestore Security Rules)
• App attestation (Firebase App Check) to prevent unauthorised server access
• Server-side payment verification
• Password management via Firebase Authentication - we never see or store your password
• Access to sensitive information limited to those who need it to provide the service

Although we use industry-standard security measures, no method is perfect and we cannot guarantee absolute security.

10.3 Security Incidents

In the event of a serious security incident that may affect your personal information, we will act in accordance with the reporting obligations under the Privacy Protection (Data Security) Regulations, and will notify you where required or where warranted in the circumstances.

11. Retention and Deletion

11.1 Retention Periods

Type of information	Retention period
Account, profile and training data	While the account is active
Retained AI Trainer conversations	7 days
Crash reports	90 days
AI content reports	Retained for moderation; after account deletion - without your user ID
Analytics data	Up to 14 months
Payment and accounting records	As required by tax law
Consultation and private training records	Up to 7 years, to defend against claims and meet legal requirements
Record of consent to the terms	Retained as legal documentation even after account deletion

11.2 Account Deletion

You may delete your account at any time:

• In the App: Profile > Settings > Delete account
• Via the web: Account deletion request form

Account deletion is irreversible and removes:

• Account details, profile and dog profile
• All training history, progress, streaks, achievements and statistics
• Photos and videos you uploaded
• Saved tips, custom activities and weekly recaps
• Retained AI Trainer conversations
• Preferences, settings and notification tokens
• Consultation and private training requests and their questionnaires
• Your subscriber record at RevenueCat

What is retained after deletion, and why:

• Payment and accounting records - a legal obligation under tax law.
• Record of consent to the terms - legal proof that the terms were accepted.
• Referral codes you created - marked inactive and retained to prevent abuse of codes already redeemed.
• AI content reports - retained for moderation and filter improvement, without your user ID.
• Aggregated analytics data that does not identify you personally.

We request that our partners (such as Mixpanel and Google Analytics) delete data relating to you, but we do not have full control over their timelines.

12. Your Rights

• Right of access (section 13 of the Law): to receive a copy of the personal information held about you.
• Right of correction (section 14): to request correction of information that is incorrect, incomplete or out of date. Much of it can be corrected directly in the App.
• Right of deletion: to delete your account and associated information, as set out in section 11.
• Objection to direct marketing: you can stop receiving marketing messages at any time, via notification settings in the App or by contacting us.
• Notification management: change or disable any notification type in App settings.
• Limiting ad tracking: via your device settings.
• Subscription cancellation: at any time via Google Play or the App Store.

To exercise your rights, contact us at support@calm-pup.com. We will respond within a reasonable period and no later than any deadline set by law. We may ask you to verify your identity before releasing information, for your own protection.

13. Transfers Outside Israel

Some information is processed and stored outside Israel:

• Google services (analytics, advertising, Gemini, backups) - on servers in various locations worldwide.
• Mixpanel - on servers in the European Union.
• RevenueCat, Calendly, Gcore - on servers outside Israel.

These transfers are made subject to the providers' contractual commitments to protect the information adequately, in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

14. Minors

The App is intended for users aged 18 and over, and we do not knowingly collect personal information from minors. We do not operate age verification and therefore rely on your declaration at registration.

If you become aware that a minor has provided us with personal information, contact us at support@calm-pup.com and we will delete the information and the account.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to you in the App before they take effect, and you will be asked to accept the updated version. The document version is stated at the top.

16. Contact and Complaints

For questions, requests or complaints regarding your personal information:

Email: support@calm-pup.com

Address: Sarah Aaronsohn St 51, Ramat Gan, Israel

If you are dissatisfied with our response, you may contact the Israeli Privacy Protection Authority.