Sniffo (“Sniffo”, “we”, “us”) is a business based in Dublin, Ireland, and is the controller of the account data described below. This policy explains what personal data we handle when you use the Sniffo app (Android, iOS and web) and the public booking pages at book.sniffo.ie, why, and what your rights are.
Questions or requests: privacy@sniffo.ie.
1. Two kinds of data, two roles
Sniffo is a tool for pet care businesses (dog minders, daycares, walkers, groomers). That creates two different situations:
- Your account data (you, the business using Sniffo). For this data, Sniffo is the controller.
- Your clients’ data (the pet owners and their dogs that you add to Sniffo). For this data, your business is the controller and Sniffo is your processor: we store and process it only to run the service for you, under our Terms of service. If you are a pet owner and want to access or delete your data, please contact the business that looks after your dog first. We will help them respond.
2. What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account | Email address, password (stored hashed by Google Firebase Authentication), or your Google account name, email and profile picture if you sign in with Google | You |
| Business profile | Business name, profile photo, prices, services offered, capacity, invoice details you choose to add (address, phone, website, VAT number, payment details, logo) | You |
| Team | Names and emails of team members you invite | You |
| Client records | Pet owner name, phone, email, emergency contact; dog name, breed, age, notes, allergies and care notes, photos | You (about your clients) |
| Bookings and payments | Dates, times, services, prices, check-in/check-out times, whether a booking was paid, invoices you generate | You |
| Public booking page | Anything you publish there: business name, photos, description, reviews you add, WhatsApp number, availability | You (it is public by design) |
| Support and feedback | Messages, screenshots and the email address you send with a feature request or support chat | You |
| Technical data | IP address and request counts used to stop abuse (rate limiting), and server logs | Automatically |
We do not use advertising, tracking pixels or third-party analytics, and we do not sell personal data.
3. Why we use it (and our legal basis)
- To provide the service: create your account, store your records, sync between your devices and your team, generate invoices, show your public page. Basis: performance of our contract with you.
- To send service emails: account confirmation, password reset, team invites. Basis: contract.
- To keep Sniffo secure: rate limiting, preventing abuse, fixing errors. Basis: our legitimate interest in a safe, working service.
- To answer you and improve Sniffo: support and feature requests you send us. Basis: legitimate interest.
- To meet legal obligations, where they apply. Basis: legal obligation.
4. Who we share it with
Only with the service providers we need to run Sniffo, under data processing terms:
- Google (Firebase / Google Cloud): hosting, database, file storage, authentication and server functions.
- Resend: delivery of transactional emails.
When you or a visitor tap a WhatsApp link, WhatsApp (Meta) handles that conversation under its own privacy policy. Members of your team can see your business’s records. Anything you put on your public booking page is visible to anyone with the link.
We may disclose data if required by law or to protect the rights and safety of people.
5. International transfers
Our providers may process data outside the European Economic Area, including in the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Account and business data: for as long as your account exists.
- When you delete your account (Settings → Delete account), your login and profile are deleted straight away. If you were the only member of your workspace, all of its clients, bookings, invoices, blocked dates, public page and photos are deleted too. If other team members remain, the workspace’s business records stay with them, because they belong to the business, and only your own account and membership are removed.
- Rate limiting records (which contain IP addresses or email addresses): deleted automatically within 30 days.
- Server logs: kept by Google Cloud for up to 30 days.
- Support emails: kept while needed to handle your request, and no longer than 2 years.
7. Your rights
Under the GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to its use, and to withdraw any consent you gave. Email privacy@sniffo.ie from the address on your account. We reply within one month.
You can also delete your account yourself at any time in the app: Settings → Delete account. See how account deletion works.
If you are unhappy with how we handle your data, you can complain to the Irish Data Protection Commission (dataprotection.ie) or to the supervisory authority where you live.
8. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Access to a workspace’s records is limited to its members by server-side security rules. No system is perfectly secure; if a breach affects your data we will tell you and the regulator as the law requires.
9. Children
Sniffo is a business tool for adults. It is not intended for anyone under 18, and we do not knowingly collect children’s data.
10. Changes
If we change this policy in a meaningful way we will tell you in the app or by email before the change applies. The date at the top shows the latest version.