1. Scope and controller

This policy describes how [Your Company Legal Name] (“Otherhalf OS,” “we,” or “us”) handles information in the Otherhalf OS mobile app and this website. Contact privacy@otherhalf.pet.

2. Template and production modes

The starter defaults to local mock data. Its production adapters remain inactive until the publisher configures and selects them. This explanation is hidden when the legal site is explicitly placed in production mode.

3. Information a production app may handle

• Account data: email, display name, authentication provider, and stable account identifier.
• Dog profile and label content: dog profile fields, extracted label text, and photos a user chooses to scan.
• Subscription data: entitlement state and transaction identifiers supplied by Apple, Google, or RevenueCat. We should not receive full payment-card details.
• Device and diagnostics: app version, device type, locale, crash data, and product events if those optional services are enabled.
• Notifications: a push token after the user grants notification permission.

4. Purposes and legal bases

We use information to provide requested features, secure accounts, restore purchases, respond to support, improve reliability, and comply with law. Where applicable, rely on contract for core service, legitimate interests for security and diagnostics, consent for optional notifications or tracking, and legal obligation where required.

5. Label analysis and photos

Label photos are processed only after the user initiates the matching feature. Provider credentials stay on the server. Temporary photo objects are private, deleted after the request, and covered by a one-hour orphan cleanup job. The configured processor is [Your AI Provider]; its processing, retention, region, and training terms are included in our vendor review. We do not permit dog profile or label content to be used to train models without the user’s informed agreement.

6. Sharing and processors

The production service uses Supabase, RevenueCat, PostHog, Sentry, Expo, and [Your AI Provider] for the purposes described here. Optional product analytics can be disabled in Settings and excludes label text, photos, email, session replay, and advertising identifiers. We do not sell personal information or use dog profile data for targeted advertising.

7. Retention

Account and dog profile data is kept while the account is active, deletion backups for no more than 30 days, security logs for no more than 90 days, and transaction records for the period required by law.

8. Controls and deletion

Users can change permissions in device settings, disable optional usage analytics in Otherhalf OS, manage subscriptions in the app store, and request deletion in Otherhalf OS under Profile → Settings & privacy → Delete account or through the public deletion page. Deleting a Otherhalf OS account does not automatically cancel an Apple or Google subscription.

9. Security, transfers, and children

We use encryption in transit, least-privilege access, protected secrets, and incident procedures. Applicable international transfer safeguards cover the providers listed above. Otherhalf OS is not directed to children under 13, or the higher minimum age required locally, without a compliant child-consent flow.

10. Changes

Post material updates here, revise the date above, and provide additional in-app notice when the change materially affects user rights.