Legal

Privacy Policy

Pawlo is a small, independent app built by one person with one goal: helping you teach your dog. We collect only what we need to run the app and never sell your data. This page explains exactly what that means.

Last updated: 9 April 2026

1. Who we are

Pawlo is operated by Ugur Bakisuzun, an independent developer based in the United Kingdom. For the purposes of UK GDPR and EU GDPR, we are the data controller of the personal information you provide through the Pawlo mobile app and the pawlo.so website.

You can reach us at any time at hello@pawlo.so.

2. What we collect

We try to collect as little as possible. Here's the full list:

Account
Email address and password (password is hashed and never visible to us).
Dog profile
Your dog's name, breed, age, sex, and (optionally) weight, vaccinations, and medications you choose to log.
Training data
Completed sessions, XP, streaks, badges, mission completions, tricks practiced, and which programs you've enrolled in.
AI advisor chats
Messages you send to Pawlo (the AI character) and the responses it returns. These are sent to Anthropic via our secure backend so the model can answer.
Walk tracking
GPS coordinates recorded only while you actively start a walk session. Walks are saved with their distance, duration, and route. Location is never collected in the background.
Microphone
When you tap the voice button to talk to Pawlo, your speech is converted to text on-device (or via Apple/Google speech recognition). We do not record or store audio.
Push notifications
A device push token, used only to send you the daily training reminder you opted into. You can revoke this in your device settings at any time.
Purchases
If you subscribe to Pawlo Pro, our payment partner RevenueCat receives an anonymous app user ID and the subscription state. Your card details are handled entirely by Google Play (or Apple) — we never see them.
Device basics
App version, operating system, and locale, so we can debug issues and translate the app correctly.
Waitlist (website only)
If you sign up to the waitlist on pawlo.so we store your email, the page you came from, and your user agent so we can email you when Pawlo launches in your region.

3. Why we collect it

Each piece of data has a single, narrow purpose:

We do not use your data for advertising, do not sell it to anyone, and do not share it with data brokers. We do not run third-party analytics, ad SDKs, or social tracking pixels in the app.

4. Who we share it with

Pawlo runs on top of a small set of trusted infrastructure providers. Each acts as a data processor on our behalf and only sees the data that's strictly needed for their job.

Supabase
Hosts our database, authentication, and serverless functions. Stores account, dog, training, walk, and health data with row-level security.
Anthropic
Receives only the messages you send to the Pawlo AI advisor, via our secure relay. Anthropic does not use your messages to train its models (per its commercial terms).
RevenueCat
Receives an anonymous app user ID and your subscription status. No personally identifiable purchase data.
Google Play / Apple App Store
Process your subscription payment under their own terms. We never see your payment details.
Expo / EAS
Builds and distributes the app, and (optionally, when you opt in) handles push notification delivery. No personal content is sent.
Cloudflare
Hosts the pawlo.so website. Standard request logs (IP, user agent) are kept transiently for security and abuse prevention.

5. International transfers

Some of our processors (Anthropic, RevenueCat, parts of Supabase) are located in the United States. Where data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum and EU Standard Contractual Clauses to ensure your data is protected to the same standard as it is at home.

6. How long we keep it

We keep your data for as long as your account is active. When you delete your account from the in-app Profile screen, all of the following are wiped immediately and irreversibly:

Anonymised, aggregated metrics (e.g. "how many sessions were completed this week") may be retained for product analytics, but cannot be traced back to you.

7. Your rights

Under UK and EU GDPR, you have the right to:

8. Children

Pawlo is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

All data is encrypted in transit using TLS, and at rest using the encryption mechanisms provided by our infrastructure partners. Database access is restricted by row-level security policies so your records can only be read by you. The Anthropic API key never ships with the app — it lives only on our backend.

No system is perfectly secure. If you ever notice suspicious activity on your account, email us immediately at hello@pawlo.so and we'll investigate.

10. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top of this page and, for significant changes, notify you in the app or by email before the change takes effect.

11. Contact

Questions, concerns, or just want to say hi?

Email: hello@pawlo.so
Web: pawlo.so