WagWatch Privacy Policy

Last updated: October 2026

WagWatch is a pet-care tracking and logging app. It helps you record and review your pet's daily events, medications, and notes, and share that history with people you choose. This policy explains what data we collect, why, and your choices. WagWatch is not a medical service and does not provide veterinary advice.

Data we collect

We collect only what the app needs to function. We do not use any of the data below for tracking you across other apps or websites, and we do not sell your data.

The content you log

Information you enter about your pet — events, medications, reminders, daily ratings, and notes — is stored so you can review it and share it within your household. It is used only to provide the app's features.

Two features share it beyond your household, and only when you choose them. A vet share link turns one pet's profile and its last 90 days of entries and medications into a secret web address: anyone holding that link can open it without signing in, until you revoke it or it expires 30 days after you created it — so send it to your vet, and revoke it when the visit is done. A temporary pass, which the household owner gives to a sitter or trainer by email, lets that person see your pets, their current medication schedule and today's entries (depending on time zones, that can include yesterday's), and add entries of their own. It does not open your pet's earlier history, and it ends by itself on the date the owner set.

AI features

Some WagWatch Premium features are generated by an AI model: the assistant you can ask questions of, the insight paragraph in your Weekly Review and Monday digest, and the pre-visit summary you can take to your vet. To produce those, the pet data you have logged — entries, medications, vaccines, notes and your pet's profile — is sent to the model. The assistant is also given the display names of your household's members (so it can say who logged an entry), the names and species of your household's other pets, and your language and time zone.

The model runs on Amazon Bedrock, inside our own AWS account. Two things follow from that, and they are the reason we chose it:

• Your pet's information is not used to train any model.
• It is not shared with any other company, and it does not leave our AWS account.

Only your own household's data is ever sent — never another household's, and never your email address or anything else from outside your household. Photos are sent only to the assistant, and only when you ask: if you ask it about something you photographed, it can look at up to three photos you attached to entries in the dates it is reading. Your pet's profile photo is never sent, and the Weekly Review, the Monday digest and the vet summary never send any photo at all — they read text only. The two guarantees above cover photos exactly as they cover everything else.

When data is sent. Nothing is sent to the model unless your household has Premium (a free trial counts). With Premium, two features send it without you typing anything: the Weekly Review card on your Home screen writes its paragraph when you open the app on a day it has not summarized yet if your Premium is a subscription (a free trial counts), or on a week it has not summarized yet if it comes from a promo code or the referral reward, and the Monday digest email writes one for your household each week unless every member has turned the digest off (in the app's settings, or with the unsubscribe link in any digest). The assistant and the vet summary send data only when you use them. Each conversation with the assistant is deleted automatically about 30 days after its last message, and all of them are deleted with your account.

Where the AI features are offered. The AI features are not offered in a few countries and regions: those outside the terms we use the AI model under, and a few others we have chosen to add. From those places nothing is sent to the model: the assistant and the vet summary say they are not available, and the Weekly Review shows its numbers without the paragraph. We tell from the country your connection comes from, the same one that picks the web app's currency (see Purchases and subscriptions below), and it is not stored. The Monday digest is not an answer to a request, so for it we go by the time zone saved with your account: a member whose time zone is in one of those places gets the digest without its paragraph.

AI answers are generated from your own records. They are not veterinary advice, and WagWatch is not a substitute for a vet.

Purchases and subscriptions

WagWatch Premium is an optional subscription billed through your Apple App Store or Google Play account, or, on the web app, by card through Stripe. Payment, card details, and billing addresses are handled entirely by Apple, Google or Stripe — we never see them. A web subscription is opened and managed on a Stripe checkout and billing page, where Stripe receives your email address so it can send its receipts and let you manage the plan. To validate purchases and keep your subscription status in sync across your devices, we use RevenueCat, which processes an internal account identifier and store receipt data on our behalf. That identifier is not your name or your email address, but it is linked to your account on our side. When you choose a plan on the web app, RevenueCat also receives your account's email address, which it uses to open that Stripe checkout. RevenueCat does not receive your name or the content you log. On iPhone, if you installed WagWatch from an Apple Ads ad, Apple tells RevenueCat which of our ad campaigns it was, through Apple's own attribution system; no advertising identifier is used, and nothing is shared with other advertisers. You can manage or cancel your subscription at any time in your device's app-store subscription settings, or, for a web subscription, in the web app under More → WagWatch Premium → Manage subscription.

On the web app, the currency the plans are shown and charged in follows the country your connection comes from, which the Amazon Web Services network already reports with each request, so that where we offer a local price, you see it. We use the country only for that and to tell whether the AI features are offered where you are (see AI features above): it is not stored, and Stripe and RevenueCat receive only the currency code, never the country. Anywhere we do not offer a local price, it is US dollars.

Emails we send

We send account-related email (such as verification codes) to everyone. If your household has Premium, we also send an optional weekly digest summarizing each pet's week. You can turn the digest off in the app's settings or with the unsubscribe link included in every digest email.

We also send up to six short getting-started tips about using WagWatch, over the three weeks after you create your account, or after you turn them on if that comes later. Which ones you get depends on what you have already set up and how often you have logged: we skip a tip you don't need, and no tip comes twice. We never use what your entries say to choose them, and none of them sells anything. Every tip has a link that stops them, with no sign-in needed, and you can turn them off or back on in the app (WagWatch 1.4.0 or later on a phone) or the web app, under More, then Emails. If your account's time zone is in the EU, the European Economic Area, the UK or Switzerland, or we cannot tell from it where you are, we send them only if you turn them on. If your account was created before we began sending these tips, you won't get them, even if you turn them on.

If you invite someone to your household by email, we send that person one invitation from you, naming you and your email address so they know who it is from. We do not email them again unless someone invites them again, and anyone can ask support@wagwatch.app to stop all invitations to their address.

No tracking

We do not use your data for cross-app or cross-site tracking, advertising, or profiling, and we do not share it with data brokers. WagWatch shows no ads and carries no advertising code; the one exception is on iPhone, where Apple tells RevenueCat which of our Apple Ads campaigns brought you, if one did (see Purchases and subscriptions above).

The one thing we tailor is which getting-started tip to send, from what you have set up in WagWatch and how often you have logged, as described under Emails we send.

This website (wagwatch.app, not the app itself) uses Cloudflare Web Analytics to count page views and see which pages are read. It sets no cookies, stores nothing on your device, and — by Cloudflare's design — does not fingerprint or identify individual visitors; we see only aggregate counts. We also keep our own server access logs for the website for up to 400 days for the same purpose and for security.

In Europe, nothing below runs until you say yes. If your device says you are in the EU, the EEA, the UK or Switzerland, the first time you visit wagwatch.app you are asked, in a banner at the bottom of the page, whether we may measure how the site is used. If you say no — or if you simply never answer — neither of the two services below is loaded at all, nothing is stored on your device by them, and the site works exactly the same. We work out where you are from your device's own time zone setting, because that needs no location service and tells us nothing we then have to keep; if we cannot tell, we ask.

Elsewhere, they run unless you turn them off, and the switch below is how. Your answer either way is remembered in this browser for a year (in local storage, under wagwatch.consent.analytics); clearing your site data for wagwatch.app forgets it. The Cloudflare beacon above is outside all of this, because it is cookieless and stores nothing on your device at all.

Where they run — in the EU, the EEA, the UK and Switzerland only once you say yes, and elsewhere until you turn them off — this website uses PostHog and Google Analytics to understand how people move through the pages — which pages are read, which links and buttons are used, and which link someone arrived from. Each of them stores a randomly generated visitor id on your device (in a cookie, in local storage, or both) so that repeat visits from the same browser are counted as one person rather than several. That id is not your name and is not linked to a WagWatch account: there is no sign-in on this website, and we do not send any of them your name, your email, or anything about your pets. Session recording, surveys and feature flags are switched off, and Google Analytics is told not to use anything it sees here for advertising. Clearing your browser's cookies and site data for wagwatch.app removes the ids.

Tutorial videos. The help page and some blog posts show our tutorial videos, which are hosted on YouTube. Each one starts as a card drawn by this website, and nothing from YouTube or Google loads until you press it, wherever you are. When you do, YouTube's player loads in its privacy-enhanced mode (youtube-nocookie.com). From then on YouTube can store data on your device and counts the view, under Google's privacy policy, and YouTube, not us, decides whether an ad plays with the video. The analytics switch above does not cover the player: not pressing a video is how you keep it from loading.

The iPhone and Android apps also use PostHog, and there it sees more than it does on the website. It records which screens you open, and when you are signed in it links what it records to your account, including your email address and your display name, so that your activity on more than one device is recognised as one person. App versions up to and including 1.3.10 also carry HeyCatch, which records the same things and also which parts of the app you tap, including the text on or around what you tapped — so a pet's name, a medication or vaccine name, or the text of an entry can be part of its record. HeyCatch is built on PostHog and shares its storage on your phone, so on those versions the taps it records, text included, reach our PostHog too. This website stopped using HeyCatch on October 25, 2026, and we are taking it out of the apps; a phone keeps sending to it until it runs a version without it. Neither service records your screen, and neither reads your photos or your pets' full history. The apps also report which screens are opened to Google Analytics for Firebase, with an internal account identifier and whether you are on Free or Premium — never your email, your name or anything you logged — and with the advertising identifier switched off. There is no analytics switch inside the apps today: ask us to erase your record, as below, and we will. The web app at app.wagwatch.app runs no analytics script — the links you open there can contain share tokens, and we will not send those anywhere; the few server-side events in the next paragraph cover the web too.

Our server also tells PostHog about a few things you do in WagWatch, on the phone or on the web: that you created your account and on which app; the answer you picked to “How did you hear about WagWatch?” (never what you typed beside it); each entry you log, as its kind only, such as a meal or a medication; that you added a pet, with its species only; your first entry, as its kind; that you set a reminder, as its kind (such as a medication or the evening check-in); that you finished setting up on a phone, and whether you allowed or declined the phone's notifications; that you joined a household, and how many people are in it; and when a Premium subscription starts, renews or is cancelled (monthly or yearly, whether it is a free trial, and which store). They are recorded under the same account identifier as the apps' own events, so deleting your account erases them with the rest. They never include anything you wrote, your pets' names, medication names, your email address or your locatio

Ask us to erase your analytics record at any time by emailing support@wagwatch.app, and we will. Deleting your account also asks PostHog and Google Analytics to erase what they had recorded under your account when you deleted it, and each does that on its own schedule: PostHog says it removes the profile, usually within minutes, and deletes the recorded events in a batch it runs at weekends; Google says the data stops appearing within 24 hours and is permanently removed within 63 days. Deleting your account does not reach HeyCatch yet, so if you are deleting your account, email us and we will erase your HeyCatch record as well.

Data retention and deletion

You can delete your account at any time from More → Delete Account, on the phone or on the web. Deleting your account permanently removes your profile, your reminders, your chat history, and your push registrations. If you were the only member of your household, it also removes the household, its pets, and everything logged about them, photos included. If you shared the household with other caregivers, the household and its pets stay so the record is not destroyed for everyone else: your profile, your sign-in and your access are deleted, but entries and photos you added remain part of that pet's shared history. It also asks PostHog and Google Analytics to erase what the apps sent them under your account, and your HeyCatch record is erased when you ask us (see No tracking). Our delete-account page lists exactly what goes and what stays. You can also export a complete copy of your data from More → Export Data, on the phone or on the web.

Push notifications

If you enable reminders, we register a device push token so we can deliver the notifications you schedule. Delivery goes through Apple's and Google's push services, as it must on those platforms, so they handle the message on its way to your device. We keep the content deliberately bare: a reminder says "Medication reminder" or "Evening check-in" and a prompt to open the app — never a pet's name, a medication name, or anything you wrote in a note. The one exception is a reminder you titled yourself, where the title shown is the one you typed. You can disable notifications at any time in your device settings, and we drop a device's token automatically after 90 days without use.

Who we are, and where your data lives

WagWatch is made by Callida Tech, which is responsible for the data described here. Your account and your pet's records are stored in the United States, on Amazon Web Services — primarily in AWS's Oregon (us-west-2) region.

We keep your pet's records for as long as your account does: we do not expire them, because the history is the point. A few things expire sooner on their own — a conversation with the assistant about 30 days after its last message, a vet share link 30 days after you create it, and a generated vet report or data export after 7 days. Deleting your account removes the rest, as described above.

Children

WagWatch is for adults: our terms require you to be 18, or the age of majority where you live, to create an account. The app is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, email support@wagwatch.app and we will delete it.

Changes to this policy

We may update this policy. When a change matters we will tell you in the app or by email before it takes effect; the date at the top shows the current version.

Contact

Questions about this policy or your data? Email support@wagwatch.app, or see our support page.