Legal / 01

Privacy

Last updated 2 August 2026

The short version

PupBooker is an appointment book for dog groomers that runs on the groomer's own phone. Their business data stays on that phone. There is no PupBooker account and no PupBooker server holding client records. If they turn on backup, the copy goes to their own Google Drive on Android, or their own iCloud on iPhone. It does not come to us.

What PupBooker stores, and where

The app stores:

• client names, phone numbers and email addresses;
• dog names, breeds, ages, grooming notes and rabies dates;
• appointments;
• sales and expenses.

All of this is written to the phone's own storage and stays there. We cannot see any of it. If the company went away tomorrow, the app would keep working, because nothing about it depends on a server of ours.

Signing in with Google, on Android

The app asks for three Google scopes: openid, email and profile. This only confirms which Google account the backup belongs to. We receive the email address and name, and we use them only to label the backup. They are not used for a mailing list, for profiling, or for anything else.

Backup on Android, and the drive.appdata scope

The app requests https://www.googleapis.com/auth/drive.appdata. That scope gives the app a private folder of its own inside the user's Google Drive. The app can only see files it put there. It cannot read the user's documents, photos, or any other Drive file, because the scope does not allow it.

Backups are written to that private folder nightly, when the phone is charging and on unmetered wifi. We keep the seven most recent backups and delete older ones. The user can delete backups from inside the app. They can also revoke the app's access at any time from their Google account permissions page at myaccount.google.com/permissions.

Signing in and backup on iPhone

The iPhone app does not use Google. It uses Sign in with Apple, which tells us only that a sign-in happened and gives us an identifier Apple generates for this app alone. If the user chooses to hide their email address, we never see the real one, and nothing in the app needs it.

Backups go to the user's own iCloud, in a container that belongs to this app. Apple holds them under the user's own iCloud account and storage. We cannot read them, and neither can any other app. Turning off iCloud for PupBooker in iOS Settings stops the backups and leaves the book working on the phone as before.

A backup made on Android does not appear on an iPhone, and the other way round, because the two are stored in different places that belong to two different accounts. Moving between them means exporting the book to a file and importing it on the new phone.

What is not in the app

• no advertising identifier;
• no analytics library;
• no third party tracker;
• no location access;
• no sale of data;
• no sharing of data.

The app requests internet access for exactly one purpose: writing those backups.

Sending email and calendar entries

These features are planned and not built. If they ship, the app would use gmail.send to send appointment reminders as the groomer, from the groomer's own address. It would use calendar.app.created to put appointments on a calendar it creates itself. That calendar scope only lets the app see and manage the calendar it creates, not the groomer's existing calendars.

This page will be updated before either feature ships. Nothing is being collected for them today.

This site, as opposed to the app

Everything above is about the app. This part is about pupbooker.com, which does two things with data.

The first is the waitlist. The address you type is stored by our own form service at forms.myseodesk.com, along with which page you sent it from, and it is used once, to tell you when PupBooker reaches Google Play.

That form is protected by Cloudflare Turnstile, which checks that a person rather than a script is filling it in. Turnstile runs only on that form, and only once you have touched the field, so a visitor who reads the page and leaves loads nothing from Cloudflare at all. It sets no advertising cookie and does not track you across sites.

The second is a visitor counter we run ourselves, on our own server, so we can see how many people found the site. It records the page you landed on, where you came from, your browser and rough location from your address, and your screen size. It sets no cookie, it cannot follow you to another site, and there is no Google Analytics or advertising network on this site at all.

The dogs' owners

The groomer types their clients' details into the app. Those clients' data lives on the groomer's phone, under the groomer's control. The groomer is responsible for what they collect and for telling their clients about it. We never receive it.

Deleting everything

Uninstalling the app removes the local data. Backups sit in the user's own Drive and can be deleted in the app, or in Drive under the hidden app data area, or by revoking access. Nothing needs to be requested from us, because we hold nothing.

Children

The app is a tool for a business, not aimed at children, and collects nothing from them.

Changes to this page

If what the app does with data changes, this page changes first, and the date at the top moves.

Contact

Email [email protected].