Back to Allby

Allby helps you look after your dog's health and everyday care. We think privacy should feel as calm as the rest of the app, so this policy explains, in plain words, what we collect, why, and the choices you have. If anything here is unclear, please reach out and we're happy to explain.

1Who we are

Allby is operated by Narek Manukyan, a sole proprietor (individual entrepreneur) registered in Armenia at Armenia, Yerevan, Pushkin 62 ("Allby", "we", "us"). We are the data controller, and for California residents the "business", responsible for the information described in this policy. For any privacy question or request, email us at narek@zoel.io.

We offer Allby to people in the European Economic Area and the United Kingdom. Because we are based in Armenia rather than inside the EEA or UK, Article 27 of the GDPR and UK GDPR requires us to appoint a representative in each. We have not appointed them yet. Until we do, write to us directly at narek@zoel.io for any request under those laws and we will handle it ourselves, and we will name the representatives here as soon as they are in place.

2What we collect

We only collect what Allby needs to work for you and your dog:

Account details

Your email address and name, provided when you sign in. Sign-in is handled by Firebase Authentication (Google).

Your dog's care data

The profile and records you create: your dog's details, health and vaccination history, activity, meals, care tasks and notes. These are stored in Cloud Firestore (Google) so they sync across your devices.

Your dog's health records are information about your pet, not human health data, so they are not "special category" data under the GDPR or protected health information under laws like HIPAA. We still treat them with care because they matter to you.

Reminders

If you enable notifications, we store a push token from Firebase Cloud Messaging (Google) so we can send the reminders you asked for.

Subscription status

Whether you have an active Allby Premium subscription, managed through RevenueCat together with the App Store or Google Play. Apple and Google are the payment processors, and RevenueCat receives purchase receipts and a subscriber identifier, not your card details. We never receive or store your card details.

Diagnostics

Crash reports and basic diagnostic data via Sentry, which help us find and fix problems. These reports can include limited technical identifiers such as a device identifier, app version and, in some cases, an IP address, and we configure Sentry to keep personal data to a minimum.

AI care assistant

When you ask the assistant a question, your question and the relevant context from your dog's profile are sent to Google (Gemini API) to generate a response. The assistant creates its answers automatically, without a person reviewing them, and its answers can sometimes be wrong or incomplete. Google processes this data only to return an answer to you and does not use it to train its models. It may retain the data for a short period to detect and prevent abuse, after which it is deleted.

Usage data

We use Firebase Analytics (Google) to understand how the app is used, such as which features are opened, so we can make Allby better. This includes a per-app identifier but not your name or your dog's records. In the EU and UK we rely on your consent for this, which you can change at any time in the app's settings. We do not use advertising SDKs and we do not track you across other apps or websites.

3How we use it

If you are in the EU, UK or a similar region, the laws we rely on to process your data depend on what we are doing:

• Performing our contract with you to run the app, sync your dog's records, and manage your subscription.
• Your consent for push notifications, and for analytics where we ask for it. You can withdraw either at any time.
• Our legitimate interests in keeping Allby secure, preventing misuse, and improving the app. You can object to this, and we will stop unless we have compelling grounds to continue.

4Who we share with

We share data only with the service providers ("processors") that make Allby work, and only as far as needed:

• Google: Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging, and Firebase Analytics.
• Google (Gemini API): powering the AI care assistant.
• RevenueCat: subscription management.
• Sentry: crash and diagnostics reporting.
• Apple / Google: payment processing for subscriptions.

Each of these providers is bound by a data processing agreement that limits them to acting on our instructions. We can give you our current list of sub-processors on request. We do not sell your data, and we do not share it with advertisers. We may disclose information if the law genuinely requires it, or to protect the safety of our users.

5Your rights

Your dog's data is yours. You can:

• Access and export your data. The app includes an Export data option.
• Correct anything that's wrong by editing it in the app.
• Delete your account and records. The app includes a Delete account option.
• Withdraw notification consent at any time in your device or app settings.

Depending on where you live, you may also have the right to ask us to restrict or stop certain processing, to object to processing based on our legitimate interests, to receive your data in a portable format, to have it erased, and not to be subject to decisions made solely by automated means. You can also lodge a complaint with your local data protection authority.

To make any request, email narek@zoel.io. We will acknowledge California requests within 10 business days and respond within 45 days, and we will respond to GDPR and UK GDPR requests within one month. You may use an authorised agent to make a request on your behalf. We will never treat you differently for exercising your privacy rights.

6Retention

We keep your data only as long as we need it:

• Your account and your dog's records: for as long as your account is active. When you delete your account, we delete or anonymise them within 30 days, allowing a short window for secure backups to cycle out.
• Diagnostics and crash data (Sentry): up to 90 days.
• Subscription records (RevenueCat, Apple, Google): for as long as needed to manage your subscription and to meet tax and accounting obligations, which may be several years.
• Support and legal records: only where we must keep them to meet a legal obligation.

7If there is a data breach

We keep a plan for handling security incidents. If a breach affects your personal data in a way that is likely to put you at risk, we will notify you and the relevant regulator without undue delay and, where the law requires, within 72 hours of becoming aware of it. We will tell you what happened, what data was involved, and what you can do.

8For California residents (CCPA / CPRA)

In the past 12 months we have collected these categories of personal information: identifiers (such as your email, name, and app or device identifiers), commercial information (your subscription status), internet or app activity (how you use the app and diagnostic data), and the content you create (your dog's profile and care records). We collect this from you directly and from the app as you use it. We use it for the purposes described in "How we use it", and we disclose it only to the service providers listed in "Who we share with".

We do not sell or share your personal information as those terms are defined under the CCPA and CPRA, and we have not done so in the preceding 12 months. We do not use your information for cross-context behavioural advertising.

We do not collect sensitive personal information beyond the account login details needed to sign you in, and we do not use it to infer characteristics about you. If this changes, we will offer you the right to limit its use.

You have the right to know, delete, and correct your personal information, and the right not to receive discriminatory treatment for exercising these rights. To exercise them, email narek@zoel.io.

9Not medical advice

Allby, including its AI care assistant, is for general information and everyday care only. It is not veterinary advice and is not a substitute for a qualified veterinarian. For anything concerning your dog's health, please consult your vet.

10Children

Allby is not directed to, and is not intended for, anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will remove it.

11Security

We protect your data with encryption in transit, access controls, and Firestore security rules that keep each person's records private to their account. Our processors are bound by data processing agreements with their own security commitments. No system is perfectly secure, but we work to keep yours safe, and we follow the breach process above if something goes wrong.

12International transfers

Allby is run with the help of providers in the European Economic Area, the United Kingdom, the United States, and Armenia. When your data is transferred outside your region, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, and, where a provider is certified, the EU-US Data Privacy Framework (Google is certified). You can ask us for more detail at narek@zoel.io.

13This website

This page is part of our marketing website, which is separate from the app. When you visit, our hosting provider records standard technical information such as your IP address and browser type in server logs to keep the site secure and running. This site also loads fonts from Google Fonts, which means your browser contacts Google to fetch them, and we use analytics to understand visits. We do not use advertising cookies on this site. Where your local law requires consent for non-essential cookies or analytics, we ask for it before setting them.

14Changes

If we update this policy, we'll post the new version here and change the "last updated" date above. If the changes are significant, we'll let you know in the app.

15Contact

Questions about your privacy? Email narek@zoel.io and we'll get back to you.