Privacy Policy — What’s Up Dog?

Effective date: 3 August 2026

Data controller: XRDOG LTD
Contact: whatsupdog.app@gmail.com

Google services, analytics and advertising measurement

We do not display third-party advertising inside the App. However, we use Google Analytics for Firebase to understand how the App is used, diagnose performance issues, measure engagement and improve its features.

Google Analytics for Firebase may process information such as:

• App interactions and events;
• Device and operating-system information;
• App-instance and device identifiers;
• Approximate location derived from information such as IP address;
• Diagnostic and performance information; and
• Advertising attribution and campaign-measurement information.

We also advertise the App through Google Ads. Information collected through Firebase may be used to measure whether advertising campaigns resulted in an installation or other in-app activity. Where enabled and where you have consented, Google may also process information for ads personalization.

For users in the EEA, United Kingdom and Switzerland, we use Google’s User Messaging Platform to request and record choices relating to:

• Analytics storage;
• Advertising storage;
• Advertising user data; and
• Ads personalization.

You can refuse these non-essential purposes and continue using the App. You can review or withdraw your decision later through Settings → Privacy choices within the App.

Google processes this information in accordance with its applicable terms and privacy safeguards. More information about how Google handles business data is available at:

https://business.safety.google/privacy/

Legal bases

• Performance of a contract: Processing necessary to provide requested features, including transcription, scene analysis, AI-generated responses and account functionality.
• Legitimate interests: Service security, fraud and abuse prevention, essential diagnostics, troubleshooting and protecting our systems, where those interests are not overridden by your rights.
• Consent: Non-essential analytics, advertising measurement, advertising identifiers, ads personalization and associated device storage or access where consent is legally required.

Camera and microphone permissions granted through Android allow the App to access those device features. These permissions are separate from your choices concerning analytics and advertising-related processing.

Who processes your data

• Google and Firebase — analytics, app-performance measurement, advertising attribution, Google Ads campaign measurement and, where consented, ads personalization.
• OpenAI — generative AI and image analysis.
• AssemblyAI — speech-to-text where transcription is not performed on-device.
• Cloudflare — secure routing, DDoS/WAF protection, serverless execution and service logging.

These providers process only the information required for the applicable service, subject to their contractual terms and your consent choices where relevant.

Retention

Firebase and Google retain information according to the retention settings configured for our Firebase and Google accounts and Google’s applicable policies. Their retention periods are separate from our 30-day retention period for snapshots, transcripts and Cloudflare service logs.

Your choices and rights

You can:

• Change analytics and advertising-related consent choices through Settings → Privacy choices;
• Revoke camera or microphone access through Android settings;
• Delete locally stored videos through your device;
• Request access, correction, deletion, restriction or portability of your personal information;
• Object to processing based on legitimate interests; and
• Withdraw consent at any time without affecting processing that occurred before withdrawal.

Contact whatsupdog.app@gmail.com to exercise these rights.

You may also complain to the UK Information Commissioner’s Office or another applicable data-protection authority.

Changes

We may update this notice when our services or data-processing activities change. We will update the effective date and, where required, notify users or request fresh consent before beginning materially different processing.