Privacy policy

The short version

Tropy records dog walks: the route, photos, and what the dog did along the way. To make that work we have to store data about you and your walks. We do not sell it and we show no advertising. We do measure how people find us — but only on the pages before you sign in, and only if you agree to it. Below we say plainly what we collect and who gets to see it.

1. Who the controller is

The controller of your personal data is Dev-Solutions Bartosz Giełczyk, 64-920 Piła, ul. Opalińskich 16, contact: support@tropyapp.com.

2. What we collect

Account. Your email address and the name you give. The email address is also your identifier — signing in means entering a code sent to that address, or using a passkey.

We store no password, because the application does not use one. For a passkey we keep only its public half, which on its own cannot sign anyone in.

Dogs. Name, breed and date of birth, if you provide them.

Walks. Start and end time, distance, and the route itself — that is, data about your location. We treat it as the most sensitive thing in this application: a dog walk usually starts and ends at your home.

Events and comments. Recorded pees and poops with their time, and the text of comments under a walk.

Photos. Pictures added to a walk. We strip EXIF metadata on upload, including the GPS coordinates a phone camera writes into the file.

Sitter profile — only if you create one. Your description, town, the point and radius you marked on the map, the photos added to the profile and the identifier in the page address.

Settings. Your chosen language and what you want to be notified about.

Technical data. Your IP address and ordinary server log entries, written on every connection.

3. Why we use it, and on what basis

• To run the service — your account, recording walks, sharing them with your household. Basis: performance of a contract (Article 6(1)(b) GDPR).
• To send the emails the service needs — sign-in code, dog invitation, confirmation of an address change. Same basis.
• To keep things secure — server logs, abuse detection. Basis: our legitimate interest (Article 6(1)(f) GDPR).

We do no email marketing, no profiling, and no automated decision-making about you.

4. Who sees your data

Household members. People you share a dog with see its walks, routes, photos and comments — including the ones you added.

Temporary sitters. People invited for a set period see only the walks from that period. Once it expires or is revoked, they lose access to everything.

Publicly — only a sitter profile, and only once you switch it on. Its page then shows anyone, account or not: the name you provide, your town, your description, the profile photos and a map with an approximate service area. The exact point you marked on the map is never shown — the area is drawn around a location snapped to a grid of roughly two kilometres. The page may be indexed by search engines. You can switch the profile off at any time; search engines may keep showing a copy for a while. Your account photo and your walks are never public.

Beyond that, your data reaches only the parties that carry out specific technical work for us:

• HERE Global B.V. — maps. Your browser fetches map tiles from HERE. In addition, when a walk ends we send HERE the route coordinates so it can render a picture of it.
• Sinch Mailgun — email delivery. The recipient address and the message content go there. The account is in the European region, so the data stays in the EU.
• OVH — the server the application and database run on.
• Microsoft Azure — storage for photos and database backups. The data sits in the Poland Central region. Photos are not publicly available — the application fetches them once it has checked that you are allowed to see them.
• Google Ireland — push notifications to your phone. The device identifier and the notification text go there, which means the name of the dog and of the person. Routes never do.
• Sentry — application error reports, in the European Union region. The error description, the place in the code and your account identifier go there, and from the phone app also the device model and system version. Coordinates, form contents, screenshots, your email address and your IP address do not — we strip them before a report leaves the device or the server.

We do not sell data and do not pass it to advertisers.

5. How long we keep it, and what remains after deletion

Account and walk data is kept for as long as your account exists. You can delete it yourself in settings or ask us by email — the account deletion page explains how.

We then immediately remove the account, the email address, your name, your profile photo, the photos added to walks, the sitter profile, settings and notification tokens. Walks and comments on dogs you share with others stay in the dog's history without your name — signed "Deleted account" — because they are a shared record of those people. A dog with nobody left to share it with disappears along with everything.

Database backups are kept for 14 days and then overwritten. Server logs roll over on a cycle of a few weeks.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on our legitimate interest.

Write to support@tropyapp.com. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.

7. Cookies and measurement

Necessary cookies always work and we do not ask about them: they keep your session after you sign in and remember your language and theme. Without them the application could not recognise you between clicks.

We ask separately for consent to advertising measurement — Google Analytics and the Meta pixel. You answer once, on your first visit; refusing is as easy as agreeing and limits nothing in the application. Until you agree, neither script loads at all — it is not that they store nothing, it is that they are not on the page. We remember your answer for six months, then ask again.

These tools only run before you sign in. Once you are signed in, the tag container's identifier is no longer sent to the browser at all, so what you do inside the application — your walks, routes, photos, dogs — never reaches Google or Meta and cannot reach them. The phone app does not carry these tools at all.

The sign-in code screen is excluded separately, because its address contains a token — we do not want such an address leaving our service even by accident.

8. Security

The connection to the application is encrypted. Photos sit outside the public directory and are served only after checking that you are allowed to see them. Signing in uses no passwords, so there is nothing to steal and nothing to reuse on another site.

9. Children

The service is not intended for anyone under 16.

10. Changes

When we change this policy we will update the date at the top. We will announce significant changes in the application.