Your walks belong to you.

Overview

GoFetch is a dog-walking discovery app for iPhone. This policy explains what information GoFetch handles, why it is needed, when it leaves your device and how you can delete it.

We do not sell personal information or build data-broker profiles. In app versions with Meta ad measurement, Apple provides aggregate install attribution, and optional Meta SDK reporting requires your tracking permission, as described below. Earlier app versions may offer separate TikTok measurement controls. The public GoFetch website does not use advertising cookies or third-party analytics.

Information we handle

Information kept on your iPhone

GoFetch stores your profile name, dog profiles, dog photos, discoveries, full walk routes, saved walks, reward history, settings and notification preferences on your device. Your Supabase session and a random reward-installation identifier are stored in the iPhone Keychain.

Account and social information

When social features start, GoFetch creates a randomly identified service account. We may sync your display name, username, dog names and breeds, walk titles and statistics, trimmed and rounded route previews, follows, Pack Walk invitations and notes, live messages, reactions, comments, blocks and reports. Depending on the feature, this information is visible to people you follow, people who follow your dog, or accepted participants in a Pack Walk. Full recorded routes are not placed in the social feed. Your Pack profile photo remains on your iPhone unless you explicitly choose to share it with other GoFetch users.

When you post a comment on a walk, GoFetch sends the comment text to its server and OpenAI for safety screening before saving it. A comment that does not pass screening is not posted. People allowed to view that walk can see an approved comment. You can report a comment for operator review or block its author.

Photos and camera information

Live camera frames are used on your device to find a dog-shaped subject and support AR. When you request a breed identification, the selected scan image is sent securely to GoFetch's server and OpenAI to complete that request. Golden Squirrel camera frames are used only on the device to present the optional AR encounter; they are not uploaded for reward verification. A non-camera encounter is available if Camera access is not granted. Avoid including identifiable people, homes, documents or other private information in a dog scan.

GoFetch does not add scan images to your public profile or social database. Dog profile photos remain local unless you deliberately select a photo to share with a Pack Walk. A shared Pack Walk photo and its optional caption are uploaded to private Supabase storage and are available only through the Pack Walk sharing rules. If you choose Share Profile Photo, a reduced copy of your Pack photo is stripped of image metadata, checked by OpenAI for unsafe content and stored in public Supabase storage. Other GoFetch users can then see it on your profile and shared walks; anyone with its link may copy or cache it. You can remove the shared copy without deleting the original photo on your iPhone.

Location and walk information

Location is used to record an active walk, display maps and weather, save discovery locations, find nearby Golden Squirrels and, when you choose the GPS route, verify proximity for a reward claim. An active walk can continue recording while the app is in the background if you grant background location access. GoFetch uploads only a trimmed, rounded route preview for the social walk feed. Nearby reward checks send your current coordinates to Supabase to calculate distance.

Location Services and Camera permission are not required to browse eligible reward parks or receive a voucher. When Location is unavailable, the permission-free route lets you choose the active park you are visiting. When Camera is unavailable, the same drop-specific squirrel encounter is presented without AR. The server applies account, installation, time and attempt limits and issues a short-lived, one-use token before the selected drop can allocate its voucher. This route does not share claim coordinates.

During a live Pack Walk, an accepted participant's precise location is uploaded about every 15 seconds and shared with the other accepted participants only while the live Pack Walk screen is open. Each live-location update expires after two minutes, and GoFetch requests its removal when the participant leaves the screen.

A GPS Golden Squirrel claim can store the claim coordinates, distance, time, account identifier and random installation identifier. A permission-free claim stores the selected drop, time, account identifier, random installation identifier and one-use-token audit data, but no claim coordinates, camera frame or distance. These details protect the single-winner rule, limit repeat fraud and help resolve a disputed claim.

Reward and support information

A claimed voucher is revealed and saved in the app. You can optionally provide an email address for a backup copy. We store that address with the fulfilment record and send the voucher through Resend. If you contact support, we receive the information you choose to include in your message.

Website and network information

Vercel and other network providers may process standard request information such as IP address, browser type, request time and security logs to deliver and protect the website and API. GoFetch's image endpoints also use short-lived IP-based limits to reduce abuse.

Optional app usage analytics

In app versions that offer these controls, if you choose Share Mixpanel analytics, the iPhone app sends Mixpanel app opens, onboarding progress, walk and scan actions, discovery saves and prize-claim outcomes. These events use a random app identifier and basic app/device information. We do not send names, email addresses, photos, walk routes, precise locations or voucher details. IP-based location enrichment and automatic event capture are disabled. Mixpanel stores this project in its EU region. Analytics is off until you choose to enable it, and you can stop future collection in GoFetch Settings. App usage analytics does not measure App Store downloads or identify which advertisement led to an install.

Apple aggregate install attribution

Tracking-enabled versions register an initial conversion value with Apple's SKAdNetwork so ad networks can receive privacy-preserving install attribution. This does not send your GoFetch account, dog details or walk locations, and it does not require App Tracking Transparency permission. Apple controls attribution, privacy thresholds and reporting delays. It is separate from Meta SDK event reporting and from the optional usage-analytics choices below.

Optional Meta advertising measurement

In versions with this integration, GoFetch asks for Apple's App Tracking Transparency permission after onboarding. Meta's official SDK starts only if you allow tracking. It reports the SDK's installation and standard app-activation information to measure GoFetch ads. A first SDK observation is not itself proof of a first-time App Store download; we assess downloads separately in App Store Connect.

Meta can receive event times, app and operating-system versions, device and SDK identifiers, language and network metadata such as IP address, and may match permitted information with its own data for advertising measurement. Advertiser-ID collection, automatic event logging, automatic deep-link interception, screen and link metadata collection, product-improvement collection and advanced matching are disabled. We send no GoFetch account identifiers, sign-in details, dog details, photos, routes, precise locations or voucher contents through this integration. We do not send custom walk, scan, reward or purchase events to Meta.

You can withdraw permission in iPhone Settings → Privacy & Security → Tracking → GoFetch. GoFetch checks permission before adding each SDK activation; no SDK is started before permission. After initialization, the SDK can make its own configuration requests and collect SDK diagnostic information. Withdrawal does not undo information already sent. Apple's aggregate attribution remains separate. The Meta SDK's SKAdNetwork writer is disabled so it does not compete with GoFetch's Apple registration.

TikTok advertising measurement in earlier versions

In app versions that offer this control, TikTok ad measurement is a separate choice, off by default. The TikTok App Events SDK starts only after you enable this choice and allow tracking through Apple's App Tracking Transparency permission. GoFetch sends app-open events and, when identified during a fresh installation's first launch, an install event. Upgrades and later opt-ins are not backfilled as new installs.

TikTok receives event times, Apple's advertising identifier (IDFA), device and SDK identifiers, app and device information, and network metadata such as IP address. TikTok may match this information with information it holds to attribute and measure GoFetch advertisements. We do not send GoFetch account details, contact details, photos, messages, routes, precise locations or voucher contents through these events. Automatic purchase, retention and enhanced interaction-event collection are disabled.

You can turn this choice off in GoFetch Settings or withdraw tracking permission in iPhone Settings. Turning it off stops GoFetch from adding install and app-open events and disables SDK event uploads while the choice is off. It does not delete information already received by TikTok or erase the SDK's local queue; retained events may be uploaded if you enable it again. After initialization, the SDK may continue configuration requests and its own diagnostic collection. This choice is independent of Mixpanel analytics and activity shared with GoFetch.

These controls describe earlier versions with the TikTok integration, which was removed in version 1.1.0. TikTok's privacy information is linked in the provider list below. Current tracking-enabled builds use GoFetch's Apple registration and the optional Meta integration described above.

Optional activity shared with GoFetch

Share activity with GoFetch is a separate choice, off by default. If enabled, GoFetch records first observed activity, app opens, short-lived foreground presence, walk starts and completions, distance, moving time, and successful operating-system share/export completions in its private founder dashboard. These events are linked to your existing GoFetch account so we can understand return visits. They do not include names, email addresses, photos, routes, coordinates, notes or voucher details. A share/export completion is not proof that somebody viewed a post. First observed activity is not an App Store download. If you voluntarily answer where you heard about GoFetch, we link the selected source and video to your account to measure repeat walks. For a new account, we also record the first launch from fresh app storage when available and consented. Before consent its timestamp stays only in process memory; it is not an App Store download or a unique-person count, and upgrades or unknown launches are not backfilled. Attribution answers are self-reported information, not ad-platform tracking; skipping remains unattributed.

This choice does not enable Mixpanel or change your Mixpanel choice. You can disable it in Settings; collection stops immediately on this device and GoFetch requests removal of the optional event history and live presence, including your optional acquisition answer and first-launch record, when it next connects to your account. Your dogs, saved walks, social actions and reward claims remain part of the app’s normal service and are not erased by this analytics switch.

Notifications and diagnostics

If you allow notifications, Apple gives GoFetch a device token that is stored with your account so we can send Pack Walk invitations and social updates. The token is not visible to other users. Apple's MetricKit may also provide first-party crash, hang, disk-write and CPU diagnostic counts. GoFetch sends those counts with the app version, build, iOS version and reporting period to diagnose reliability; it does not send advertising identifiers, screen recordings or the contents of your walks through this diagnostic path.

How we use information

We use information only where needed to:

• run the app, authenticate the service account and sync chosen social features;
• record walks, show maps and weather, and keep discovery memories;
• identify dog breeds from a scan you request;
• show nearby or manually selected Golden Squirrels, verify a claim and deliver a partner voucher;
• deliver notifications and monitor crashes, hangs and service availability;
• measure GoFetch advertisements through Apple's aggregate attribution and optional Meta reporting with tracking permission, or through TikTok controls in earlier versions;
• prevent fraud, abuse, unsafe content and unauthorized access;
• respond to support, privacy and account-deletion requests; and
• meet legal obligations and enforce the Terms of Use.

Where data-protection law requires a legal basis, we rely on performing the service you request, your consent for optional permissions, legitimate interests in security and fraud prevention, and legal obligations. You can withdraw a permission in iPhone Settings at any time.

Service providers

Providers that help operate GoFetch are required to use information for the contracted service and to provide protections consistent with this policy and applicable law. For optional advertising measurement, Meta and, in earlier app versions, TikTok also process shared information as described in their privacy policies.

We may also disclose information if required by law, to protect a person's safety, to investigate fraud or misuse, or as part of a business transfer with appropriate confidentiality protections.

Retention and deletion

Local data remains on your iPhone until you remove it, delete your account and local data, or uninstall the app. Cloud profile and social data remains while the account is active and is deleted when the cloud account is deleted, subject to limited records described below.

GoFetch's dog-breed identification endpoint uses a requested photo to answer the current request and does not intentionally add the input to the GoFetch database. Golden Squirrel encounters do not upload camera images for reward verification. Non-reversible device and claim-token digests can be retained with a claim to prevent duplicate or fraudulent voucher collection. Service providers may retain limited request or security records under their own policies. Support correspondence is kept while the request is handled and for a reasonable follow-up or legal period.

A profile photo you choose to share remains visible until you remove it, replace it, or delete your account. GoFetch removes the hosted copy when you withdraw sharing, although copies saved or cached by others may remain outside GoFetch's control. Your original Pack photo stays local. Pack Walk messages and shared photos remain available according to the Pack Walk's visibility and account lifecycle. Account deletion removes the account-linked database records and local data; provider backups and security logs age out under the provider's retention cycle. A disconnected Golden Squirrel claim timestamp or aggregate outcome may remain so the same voucher is not issued twice, but it does not retain the deleted account link.

Deleting a walk comment hides it from other users. A report about that comment and a limited moderation record may remain while it is reviewed or needed to address misuse. Deleting the account removes its comments and account link from those records, subject to legal or security records described above.

Operational diagnostic summaries are normally deleted after 30 days. Push tokens that have not checked in for 180 days and completed notification-delivery records older than 30 days are removed automatically.

Your choices and rights

You can control GoFetch in several ways:

• change Camera, Photos, Location and Notification access in iPhone Settings;
• withdraw Meta tracking permission in iPhone Settings, or turn TikTok measurement off in earlier versions with that control;
• delete individual walks, comments or dog profiles using the controls in the app;
• share, replace or remove your public profile photo without changing your local Pack photo;
• block or report another profile from the social feed;
• delete the cloud account and local GoFetch data from Pack, Settings, Delete Account; and
• email us to request access, correction, deletion, restriction or a portable copy where the law applies.

GoFetch may use a random account without a login email, so we may need profile, dog or Pack Walk details to locate and safely verify an off-device request. See the privacy choices and deletion guide.

Children

GoFetch is not designed to collect personal information from a child without any consent or authorization required by local law. A parent or guardian who believes a child has provided personal information should contact us so we can review and delete it where appropriate. Adults should supervise younger walkers, especially around roads, unfamiliar dogs and location-based rewards.

Security and international transfers

GoFetch uses encrypted network connections, iOS Keychain storage, access controls and Supabase row-level security. No system can guarantee absolute security, so please contact us if you believe an account or content or account has been misused.

Providers may process information in countries other than your own. Where required, we use provider terms and transfer safeguards intended to protect that information under applicable data-protection law.

Changes and contact

We may update this policy when GoFetch or the law changes. The effective date at the top will change, and a material change will be communicated in an appropriate way.

GoFetch is responsible for the processing described in this policy. For privacy questions, rights requests or complaints, contact: