1. The short version
- We collect what we need to run your account and your dogs' training records.
- We do not sell your data, show ads, or use analytics or tracking tools.
- Only the people you share a dog with can see that dog's data.
- You can delete your account in the app at any time.
- You have rights over your data, explained below, and you can complain to a data protection authority.
2. Who is responsible for your data
SIMINVEST EOOD, 32 Stefan Stambolov St., 4110 Parvenets, Plovdiv Province, Bulgaria, UIC 160074344, is the controller of your personal data under the EU General Data Protection Regulation (GDPR).
For anything about your data, email info@firepaw.eu. We have not appointed a data protection officer, because the law does not require one for the processing we do.
3. What we collect
Photos you add are resized and re-encoded, which removes location and other hidden data. Health notes are free text: please do not write information about your own health, or anyone else's, in them.
You can export a competition's results as a PDF: its name, the dogs' names and every attempt's results. The app creates the file on your device and either saves it there or hands it to your device's share options. We do not receive it, and where it goes after that is your choice.
The app asks for Bluetooth access, to connect to the sensor, and for permission to show notifications, so you can see a session is recording. On Android 11 and older, Android requires location permission to scan for Bluetooth devices; Firepaw does not collect or store your location. When you choose a photo, the app sees only that photo.
- Account details: your email address, display name, optional first and last name, timezone and unit preference, and your password — stored only as a secure one-way hash.
- Dog profiles: name, breed, sex, date of birth, neutered status, weight history, fitness level, training goal, description, health notes and photo.
- Training data: your dogs' sessions — when they started and ended, duration, distance and speed — with the sensor readings behind them, and goals.
- Treadmills: their names, calibration and the identifier of the Bluetooth sensor paired to each.
- Competitions you run: their name, attempt length, how they are scored and the treadmill used; the names of the dogs taking part; and each attempt's start time, duration, distance and speeds, with the calibration, the sensor identifier and the sensor readings behind them.
- Sharing and transfers: who can access which dog and at what level, who recorded each session, and transfer invitations, including the email address an invitation was sent to.
- Security records: the IP address and device user agent of requests that change your account or fail security checks, such as wrong passwords, and the time they happened.
- Your choices: consents you give, and requests you make about your data.
- Sign-ups that were never finished: the email address, password and name entered, and the IP address and device reported, until they are deleted — see “How long we keep it”. Anyone can start a sign-up with any address, so this may exist for an address whose owner never asked for it; it becomes an account only when a code we email is entered.
4. Where your data comes from
- From you, when you create an account and use the app.
- From your device, automatically, when it connects to our servers: IP address, device user agent and the sensor identifier.
- From other Firepaw users: someone who gives you access to a dog, or invites you to take over a dog's profile, enters your email address, and sessions on a shared dog show who recorded them.
5. Why we use it, and the legal basis
- To provide Firepaw — your account, dog profiles, sessions, photos, treadmills, competitions, sharing and transfers — and to send the emails the service needs, such as verification codes and password reset codes. Legal basis: performing our contract with you (GDPR Article 6(1)(b)).
- To keep accounts and the service secure: limiting sign-in and password attempts, detecting and stopping abuse, keeping a security audit log, and emailing you about security events such as a password change or a device signed out after wrong passwords. Legal basis: our legitimate interest in protecting your account, your dogs' data and Firepaw (Article 6(1)(f)). We keep these records short-lived, as set out below.
- To handle reports of illegal content and to establish, exercise or defend legal claims. Legal basis: our legitimate interests (Article 6(1)(f)).
- To answer requests about your rights, keep the records the law requires and comply with lawful orders of authorities. Legal basis: our legal obligations (Article 6(1)(c)).
- We do not use your data for marketing, analytics or profiling. If we ever wanted to, we would ask for your consent first, and you could withdraw it at any time.
6. Your right to object
Where we rely on our legitimate interests, you have the right to object at any time, on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.
To object, email info@firepaw.eu.
7. Do you have to give us your data?
- To create an account you must give an email address and a password and confirm you are at least 16. Without them we cannot provide Firepaw.
- To record sessions you need a dog profile with a name, and a paired sensor.
- Everything else — names, photos, weight, health notes and the other profile details — is optional.
8. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects, and we do not profile you.
Training insights, such as intensity, trends and personal bests, are calculations about your dog's sessions, shown only to you and the people you share the dog with. As a security measure, repeated wrong passwords temporarily block further attempts; you can wait, reset your password or contact us.
9. Who else sees your data
We do not sell your data or share it for advertising. Our service providers process it only on our instructions, under data processing agreements.
- People you share a dog with — co-owners, trainers, vets and viewers you grant access to — see that dog's profile and the sessions their access allows, including who recorded them.
- Competitions are visible only to you, on the devices signed in to your account. They are not shown to the people you share a dog with.
- Anyone you send a competition results PDF to, when you choose to export and share one.
- Our hosting provider stores the data on servers in Bulgaria.
- Our email provider, Resend, Inc., sends account emails. It processes your email address and the content of those emails, and stores them in the United States.
- Authorities, only where the law requires us to disclose data.
- An organisation that takes over Firepaw, if that ever happens, and only to continue providing it. We would tell you first.
10. Transfers outside the European Economic Area
Resend, Inc. stores the emails we send you, including your email address, in the United States. That transfer is protected by the European Commission's standard contractual clauses, which are part of Resend's data processing agreement, and by Resend's certification under the EU–U.S. Data Privacy Framework. We do not otherwise transfer your data outside the European Economic Area.
To get a copy of these safeguards, email info@firepaw.eu.
11. How long we keep it
- Your account, dog profiles, sessions, photos, treadmills and competitions: for as long as your account exists.
- A sign-up you have not finished: your email address, the password you chose, your name, and the IP address and device your browser or app reported, for 1 hour. Your account is only created once you enter the code we email you, so until then this is all we hold — and if you never finish, it is deleted and nothing remains.
- Records of sign-in and password attempts, used to limit them: 1 day.
- One-time email codes and password reset tokens: 7 days. They stop working after 10 and 15 minutes.
- Security audit log, with IP addresses and user agents: 12 months, then deleted automatically.
- Emails held by Resend: 30 days.
- Encrypted backups of our database, stored with the server in Bulgaria: up to 12 months, then deleted. Anything you delete can remain in a backup until the backups holding it are deleted.
- Records of consents you gave and requests you made about your data: for as long as your account exists and 5 years after it is deleted, then deleted automatically. They show we met our legal obligations, and 5 years is the general limitation period for claims under Bulgarian law.
- When you delete your account, your account details are anonymised straight away, dogs only you could see are deleted with their photos, your treadmills and competitions are deleted, and your access to other people's dogs ends. Sessions you recorded on dogs shared with others stay with those dogs, no longer linked to anything that identifies you.
- Reports of illegal content: for as long as needed to handle them, and 6 months after our decision, so it can be challenged.
12. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of it;
- have inaccurate data corrected — you can edit most of it in the app;
- have your data erased — you can delete your account in the app;
- restrict how we use your data;
- receive the data you gave us in a structured, machine-readable format, and have it sent to another provider;
- object to our use of it, as explained in “Your right to object”;
- withdraw any consent you gave, at any time, without affecting what we did before.
13. How to use your rights
Email info@firepaw.eu from the address of your Firepaw account, or use the options in the app. It is free. We reply within one month; for complex or numerous requests we may extend this by two further months, and we will tell you why within the first month. We may ask you to confirm your identity before we act.
14. Complaints
You have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work or where you believe your rights were infringed. We would appreciate the chance to help first, at info@firepaw.eu.
Our lead authority is the Commission for Personal Data Protection of the Republic of Bulgaria (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria — www.cpdp.bg.
15. Security
We protect your data with measures including encrypted connections between the app and our servers, passwords stored only as secure hashes, short-lived sign-in tokens, limits on password attempts, alerts for security events, and access to each dog limited to the people its manager chooses.
If a personal data breach occurs, we notify the Bulgarian Commission for Personal Data Protection within 72 hours where the law requires, and we tell you without undue delay if it is likely to put your rights and freedoms at high risk.
16. Children
Firepaw is not for anyone under 16. If we learn that an account belongs to someone younger, we close it and delete its data. If you believe this has happened, email info@firepaw.eu.
17. Cookies and storage on your device
- The app stores your sign-in session, your settings and a copy of your data on your device, including sessions and competitions waiting to be uploaded. This is strictly necessary for the app to work, including offline, so it does not need your consent. Uninstalling the app removes it.
- A competition results PDF you save stays in your device's Downloads or Files until you delete it. Uninstalling the app does not remove it.
- These web pages set no cookies.
- Firepaw contains no analytics, advertising or tracking tools, in the app or on these pages.
18. Apple and Google
When you download Firepaw, Apple or Google processes your data as a separate controller, under its own privacy policy. We do not receive personal data about you from them.
19. Changes to this policy
We update this policy when Firepaw or the law changes. We tell you about material changes by email and in the app before they take effect. The date at the top of this page shows the last update.
20. Contact
- SIMINVEST EOOD
- 32 Stefan Stambolov St., 4110 Parvenets, Plovdiv Province, Bulgaria
- info@firepaw.eu