We are UK-based and process personal data under UK/EU GDPR and other applicable laws.
What we collect & why
Microphone audio & transcripts: Your push-to-talk audio is transcribed (on-device where available or via AssemblyAI) so the App can generate a response.
Camera frames / snapshots: Used to understand your dog’s context and animate the mouth.
Generated output: AI text/audio and animation parameters to play back the dog’s “voice.”
Diagnostics & security: IP, device/OS, request logs (via Cloudflare) to run and protect the service.
No ads, no data sales. We don’t train our own models on your data. Where providers offer controls, we instruct them not to use our API data for model training.
Camera & media handling (how frames are stored)
Live preview: Processed in memory only for detection/animation. The app does not store the live camera feed.
Snapshot for scene context: Roughly every 30th frame is compressed as a transient snapshot held in memory and then sent to our Cloudflare endpoint, which forwards it to OpenAI for analysis. The app itself does not persist this snapshot. Cloudflare stores request data (including snapshots) for up to 30 days for service and security, after which it’s deleted.
Video recording (user-initiated): If you record video, the file is saved locally on your device. It is not uploaded unless you choose to share it.
Legal bases
Contract / Legitimate interests: To provide core features (transcription, scene analysis, AI response), maintain security, prevent abuse, and fix issues.
Consent (device permissions): You grant camera and microphone access in-app; revoke anytime in Android settings (core features won’t work without them).
Who processes your data
OpenAI — generative AI and image analysis.
AssemblyAI — speech-to-text (if not on-device).
Cloudflare — secure routing, DDoS/WAF, and serverless execution of our API endpoints.
These providers act under our instructions and applicable data processing terms. We share only what’s needed to provide the service.
International transfers
When data leaves the UK/EEA (e.g., to the US), we use Standard Contractual Clauses (SCCs) and/or the UK IDTA (with transfer assessments where required).
Retention
Snapshots & transcripts (server-side): Up to 30 days, then deleted.
Security/diagnostic logs: Up to 30 days (longer only to investigate abuse or legal issues).
Reported items: Kept as needed to review and comply with law.
Local videos: Stay on your device until you delete them.
Your choices & rights
Revoke camera/mic permissions in Android settings.
Delete local videos via your device.
Request access, deletion, correction, restriction, portability, or objection by emailing whatsupdog.app@gmail.com. You can complain to your local authority (e.g., UK ICO).
Children & teens
The App is for 13+ and not directed to under-13s. In the EEA, where local law requires parental consent for younger teens, core processing relies on contract/legitimate interests; sensor access still requires in-app permission.
AI transparency & safety
The dog’s voice is AI-generated. The App is for entertainment, not veterinary advice. AI may be inaccurate—use your judgement. Offensive responses can be reported in-app; we review and act where appropriate.
Security
We use TLS in transit, encryption at rest (where applicable), role-based access, and audited admin access. No method is perfect, but we work to protect your data.
Changes
We’ll update this notice as needed and post the latest version in the App. Continued use means you accept the updated policy.