TailWag

Privacy Policy

Last updated: 14 October 2026 · Effective: 14 October 2026

The short version (not a substitute for the full policy):

We collect what we need to run TailWag — your account and dog details, the things you post, walk and location data, and basic usage and device data. Your core data is hosted in Australia; some service providers process data overseas (mostly the US). We don't sell your data, and we don't use your in-app information for targeted advertising — our marketing website does use the Meta Pixel to measure how our ads perform (section 6). You can access, correct, download, or delete your data at any time, and complain to the OAIC.

This Privacy Policy explains how TailWag Group Pty Ltd (ACN 703 225 932, ABN 84 703 225 932), of Victoria, Australia ("TailWag", "we", "us") collects, uses, discloses, and protects personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), and the Notifiable Data Breaches (NDB) scheme. Where the EU/UK GDPR applies to a user, we also seek to comply with it.

Business structure: TailWag is operated by TailWag Group Pty Ltd (ACN 703 225 932, ABN 84 703 225 932), an Australian proprietary company registered in Victoria. Before 14 October 2026 TailWag was operated by Peter Warden as a sole trader (business name TailWag App, ABN 91 360 554 740). From 14 October 2026 the company is the entity responsible for your personal information. Your personal information continues to be handled on the same terms.

1. Information we collect

CategoryExamplesPurpose
Account dataEmail, Apple ID token, nickname/username, and your first name and last initial (asked at sign-up and shown on your profile as, for example, "Sam T.")Authentication, account management, support, and showing other members who you are
Date of birthYour date of birth, collected once at signupVerifying you are 18 or older (TailWag is 18+ only); kept while your account exists and deleted with it
Dog profileName, breed, age, size, temperament, photos, owner-reported vaccination/health badgesDiscovery, matching, boards
Location (coarse)Suburb / area bucket (not exact address)Proximity discovery, leaderboards, parks
Location (precise)GPS coordinates during an active walk, including in the background while a walk is recording (with your permission); your position at the moment you check in to a park or partner cafe; and your device position if you use it to suggest a park with "Add a park"Walk tracking and stats; confirming you are at the park or cafe you check in to; placing a park you suggest on the map
Messages & postsChat content, board posts, comments, reactionsCommunity and messaging features
Activity dataWalk distance/duration/route, check-ins, XP, challenges, Wag WarsStats, progression, leaderboards
Your patchWhich map squares (about 100 m across) your walks have coveredShowing you your own patch in the app; only you can see it
ConnectionsYour friends and friend requests, likes, matches, follows and blocksRunning Discover (including who you see and in what order), friends-only settings, and keeping blocked members away from you
Purchase dataMembership/order status, transaction IDs, shipping address (for physical orders)Billing, fulfilment, support (we do not store card numbers)
Device & push tokenApple Push Notification (APNs) token, device/OS/app versionDelivering enabled notifications; diagnostics
Hashed device IDSHA-256 of a vendor identifierAnonymous grouping, anti-abuse
Usage & analyticsFeature interactions, sessions, screensProduct analytics (no cross-app tracking)
Crash & diagnostic dataError reports, app/OS/device infoFinding and fixing problems
Found-dog reportsFinder's message, finder's phone number (required on an urgent "I found this dog" report so the owner can call), optional name, the found area (a place description, or — if the finder chooses "use my current location" — their device's precise GPS coordinates), hashed device IDPassing a found-dog report to the dog's owner — collected only from a member of the public who submits one on our website (see section 9)
Website waitlistEmail, suburb or country, postcode, your dog's breed, the ad or link that brought you to the site, and whether you ticked to receive news and offersTelling you when TailWag opens in your area; news and offers only if you ticked to receive them
Support & commsEmails/messages you send usResponding to and recording enquiries

We do not intentionally collect sensitive information about you (such as health, racial, political, or biometric information) beyond what you voluntarily include in your profile or messages. We do not collect payment card numbers — memberships are processed by Apple In-App Purchase (iOS) and website merchandise orders by Stripe. Dog vaccination/health details are owner-reported and not verified by us.

2. How we collect it

  • Directly from you — when you create an account, build profiles, post content, walk, purchase, or contact us.
  • Automatically — usage, device, diagnostic and approximate-location data generated as you use the Service.
  • From third parties — e.g., Apple (Sign in with Apple), our payment processors (transaction status), and members of the public who submit a found-dog report about your dog.

Where it is lawful and practicable, you may interact with parts of the Service using a nickname rather than your real name (APP 2).

3. How we use your information

  • Provide, operate, secure, and improve the app, website and products;
  • Match and connect owners and dogs, and power boards, leaderboards, walks, challenges and events;
  • Process memberships, orders and fulfilment;
  • Pass on a found-dog report submitted through our website (section 9);
  • Send service messages and the in-app/push notifications you enable;
  • Moderate content and prevent fraud, abuse and harm;
  • Understand product usage through analytics and diagnose crashes;
  • Comply with our legal obligations and enforce our Terms.

We use information only for the purpose it was collected, a directly related purpose you would reasonably expect, or another purpose you have consented to (APP 6). We do not sell your personal information. We use the Meta (Facebook) Pixel on our marketing website to measure advertising performance (see section 6); we do not use your in-app personal information for targeted advertising.

4. Direct marketing & communications

We send essential service messages (security, billing, account, order and safety notices) while you hold an account — you cannot opt out of these. We only send marketing (news/offers) where you have consented, either expressly or where consent can reasonably be inferred from your existing relationship with us. Every marketing message identifies TailWag as the sender and includes a functional unsubscribe option, and we action unsubscribe requests within 5 business days. You can also turn off analytics and notification categories in the app's Privacy & Data screen or your device settings. We handle marketing consistently with the APPs and the Spam Act 2003 (Cth).

5. When we disclose information

We disclose personal information only as needed to run the Service, to the following categories of recipients (our service providers / sub-processors), each bound to handle it securely and only as instructed:

  • Supabase Inc. — database, authentication and file storage (your core data is hosted in AWS ap-southeast-2, Sydney, Australia)
  • Apple Inc. — Sign in with Apple, in-app payments, and push notification delivery (APNs)
  • Stripe Payments Australia Pty Ltd — website merchandise order payments. Stripe processes card data on its own systems (we never see or store card numbers) and may transfer limited billing data to Stripe, Inc. (US) under Standard Contractual Clauses.
  • Vercel Inc. (US) — website and web-API hosting
  • Printify, Inc. (US) — print-on-demand fulfilment of physical orders; receives your name, email and postal address for physical orders only
  • Resend (US) — transactional email (sign-up, password reset, support)
  • Open-Meteo (outside Australia) — weather forecasts for the in-app walk-weather card; receives only your approximate coordinates rounded to about 1 km (never your exact location) and no account, email or device identifier
  • Anthropic, PBC (US) — AI tooling used internally to operate, analyse and improve TailWag (e.g., operator analytics digests). Under Anthropic's commercial terms your data is not used to train their models, and it is not used for advertising.
  • Telegram (international) — the channel by which internal operations alerts and digests (which may contain personal information) reach the TailWag team, and any support conversation you choose to start
  • Meta Platforms, Inc. (US / Ireland) — advertising measurement on our marketing website only (Meta Pixel). Not used in the iOS app.
  • Other members — signed-in members can see your nickname, bio, first name and last initial, and membership tier; your suburb is shown to friends only unless you choose Everyone; your dog's profile is shown in Discover and on your Pawfile; and found-dog report content goes to the dog's owner (see section 9). Park presence and walks are covered in section 10.
  • Anyone with your dog's public Pawfile link — only if you turn on a public web Pawfile for your dog (off by default): your dog's public details (name, breed, photos, walk stats, badges and your dog's own Woofle Lines). It shows only your dog and no information about you: no name, photo, bio, suburb or other owner details.
  • Professional advisers, and a successor entity — e.g., on a sale or restructure of the business (including a company that may later be formed to operate TailWag)
  • Law enforcement / regulators — only where required or authorised by Australian law or a valid legal request

6. Cookies & web analytics

Our website uses essential cookies/local storage needed for the site to function. To limit abuse of the found-dog form, our server briefly uses your IP address to count how many reports are sent from it. We also use the Meta (Facebook) Pixel on our marketing pages to measure how our advertising performs and to understand which pages visitors reach. This sets third-party cookies and sends Meta Platforms, Inc. (United States / Ireland) your IP address, browser and page-view information. We do not use it to build advertising audiences from your in-app activity, and it is not present in the TailWag iOS app. You can clear or block cookies in your browser, though some features may not work.

7. Overseas disclosure (APP 8)

Your core data is stored on servers in Sydney, Australia (AWS ap-southeast-2). Several service providers are based in, or process data in, the United States, including Supabase Inc. (HQ), Apple, Stripe, Inc., Vercel, Resend, Printify, Inc. (print-on-demand fulfilment of physical orders), Anthropic, Telegram and Meta Platforms, Inc. (US / Ireland — advertising measurement on our marketing website only, see section 6). Open-Meteo, which provides the in-app walk-weather forecast, also operates outside Australia and receives only approximate coordinates rounded to about 1 km. Where personal information is processed or stored overseas, we take reasonable steps under APP 8 to ensure it is handled consistently with the APPs, relying on those providers' published privacy commitments and contractual protections (such as Standard Contractual Clauses) where applicable.

8. Data security (APP 11)

We take reasonable steps to protect personal information, including:

  • TLS encryption in transit and AES-256 encryption at rest;
  • Row-Level Security so users can access only their own data; least-privilege access; no secret keys in the app;
  • EXIF metadata stripped from uploaded photos; signed, expiring URLs for photo access;
  • Jailbreak/tamper detection in the app; rate-limiting and anti-abuse controls;
  • Hashed device identifiers rather than raw IDs; and periodic security review.

No system is completely secure; we cannot guarantee absolute security, but we work to protect your information and to destroy or de-identify it when no longer needed.

9. Found-dog reports (website)

TailWag does not currently offer a QR identification tag or lost-dog feature; if one is offered in future, additional terms and a collection notice will apply. A found-dog report page remains available on our website.

If you submit a found-dog report: you are a member of the public, and we still handle your information under this policy. If you submit an urgent "I found this dog" report, your phone number is required and is shared with the dog's owner so they can call you. If you choose "use my current location", your device's precise GPS coordinates are also collected and passed to the owner to help them reach the dog; otherwise we collect only the place description you type. For a casual "just send a message", your phone is optional. In all cases we also collect your message, your name (optional). We never share your email, and we do not share any contact detail you do not provide yourself. You can ask us to delete a report you submitted by emailing founder@tailwag.app.

10. Location data

Coarse location (suburb/area) is used for discovery, parks and leaderboards and is stored against your profile.

Walks. Precise GPS is collected during an active walk to record that walk. iOS asks for "Always" permission so a walk keeps recording while your phone is locked; location is collected in the background only while a walk is recording. Walk routes are stored in full on our servers and are private to you: other members do not see them unless you choose to post a walk. When you post or share a walk, the image trims the first and last 150 m of the route so it does not show where you started or finished. You can switch off "Save Walk Routes" in Profile Settings. The optional live walk map is drawn on your own phone.

Your patch. We store which map squares (about 100 m across) your walks have covered, so the app can show you your patch. Only you can see it, and it is kept until you delete your account.

Check-ins. When you check in to a park, your device sends its position so we can confirm you are at the park; we do not store those coordinates. When you check in to a partner cafe, we store the coordinates of the check-in with the visit. iOS may ask you to allow Precise Location for check-ins and walks.

Who sees you at a park. By default only your friends can see that you are at a park. In Privacy & Data you can choose Everyone nearby, Friends only or No one. Members who can see you there are shown your dog's name and breed, when you checked in (and how many minutes ago), and the distance to the park, not your coordinates.

Deleting walks. The app does not currently let you delete individual walks. Your walks are deleted when you delete your account, and you can contact founder@tailwag.app about a particular walk. You can withdraw location permission at any time in iOS Settings → TailWag → Location.

11. Automated decision-making

We use automated tools to rank feeds, surface matches, and assist content moderation. These do not produce legal or similarly significant effects on you without human involvement, and you can contact us to query a moderation decision.

12. Data retention

  • Chat messages: retained while your account is active; deleted when you delete the message, the conversation or your account;
  • Analytics events: retained for up to 24 months, so we can understand how the app is used over time. After 24 months we delete them, keeping only de-identified monthly totals (counts of how often a feature was used) that are no longer linked to you or your device and which we may keep indefinitely;
  • Walk and activity data, and your patch (the map squares your walks covered): retained until you delete your account;
  • Notifications: read notifications are deleted after 30 days;
  • Identification-tag tokens (where that feature has been used): deleted 90 days after revocation;
  • Account, profile and order data: retained while your account is active. When you delete your account, deletion runs straight away. We keep financial records as the law requires, and some safety records (reports, moderation records and admin audit records) with your account ID removed;
  • Found-dog reports (finder's message, phone, optional name, found area/GPS): kept only as long as needed to pass the report to the owner and for basic abuse-prevention, and in any case deleted or de-identified within 90 days of the report (or sooner on request — see section 9);
  • Website waitlist entries: kept until you unsubscribe or ask us to delete them;
  • Payment event records from Stripe (order and payment identifiers, amounts and status, without your name, email, phone or address): kept with our transaction records (see below);
  • Legal/compliance records (e.g., transaction and ToS-acceptance records): retained as long as required by Australian record-keeping and tax law (generally up to 7 years).

13. Your rights

Under the Privacy Act (and, where applicable, the GDPR) you can:

  • Access — download your data (in the app: the menu on the Home tab → Privacy & Data → Download My Data);
  • Correct — update inaccurate information in your profile or by request;
  • Delete — permanently delete your account and associated data (in the app: the menu on the Home tab → Privacy & Data → Delete My Account). Deletion runs straight away, subject to the records described in section 12;
  • Port — receive your data in a machine-readable (JSON) format;
  • Withdraw consent — for optional processing such as location, analytics, or marketing;
  • Complain — to us first (below), and to the Office of the Australian Information Commissioner (OAIC).

To exercise a right, use the app's Privacy & Data screen or email founder@tailwag.app. We aim to respond within 30 days.

14. Children's privacy

TailWag is for users 18 and over only. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has created an account, we will terminate it and delete their data promptly.

15. Data breaches

If we suspect a data breach, we will take all reasonable steps to complete our assessment within 30 days (the NDB scheme's assessment timeframe), contain the breach, and document our assessment in all cases. Where a breach is likely to result in serious harm and the NDB scheme requires it, we will notify affected individuals and the OAIC as soon as practicable.

16. Third-party links

The Service may link to third-party sites or services (for example, partner cafes or carriers). We are not responsible for their privacy practices; review their policies before providing information.

17. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify you in-app or by email. Continued use after the effective date constitutes acceptance.

18. Contact us

Privacy enquiries and complaints: founder@tailwag.app
TailWag Group Pty Ltd (ACN 703 225 932, ABN 84 703 225 932) · Victoria, Australia
If you are not satisfied with our response, you may contact the OAIC at oaic.gov.au.

© 2026 TailWag Group Pty Ltd (ACN 703 225 932, ABN 84 703 225 932). All rights reserved.

Privacy Terms EULA Returns Promotions Contact