Dobi Privacy Policy

Effective date: October 10, 2026

Dobi is an app for keeping your dog's food, care, health, and everyday records in one place. It is made by HELLOCOCODOODLE INC. ("we", "us").

This policy explains what information Dobi collects, why, who receives it, how long we keep it, and how you can delete it. Questions? Email contact@hellococodoodle.com.

1. What we collect

Your account
You sign in to Dobi with Apple or Google. We receive the basic profile information your Apple or Google account shares with us: an account ID, your email address, and your name if you choose to share it. If you use Apple's "Hide My Email," we receive a private relay address instead of your real email.
If you sign in with Google, we also receive the web address of your Google profile photo. Dobi does not show or use it.

Your dog's records
Everything you add to Dobi is saved on your phone first, then a copy is saved to your Dobi account on our servers so it comes back on a new phone and can be shared with family. This includes:

  • your dog's profile (name, breed, birthday, weight, and similar details),
  • the records you log: meals, treats, care, medications, vaccines, vet visits, tests, symptoms, weights, allergies, moments, notes, and vet clinics you save,
  • photos and documents you add (for example, vet invoices or vaccine certificates). Photos are resized (longest side up to 1600 pixels) before they are saved, and Dobi removes the location and other camera data stored in a photo (EXIF) at the same time. For Moment photos we also keep one larger copy, privately, for future printing; it is deleted with the Moment. When you add a PDF in Documents, the PDF file itself is sent through our server to OpenAI so it can be read (section 3), and it is saved to your Dobi account as a document, like a photo. A PDF over about 5 MB (usually a scan) is saved as a smaller copy made on your phone. When you send a PDF in Ask Dobi, the PDF file itself is sent through our server to OpenAI so it can be read (section 3); we do not save it on our servers.

Your records and photos on your phone are left out of iCloud and device backups. Your Dobi account is their only backup: on a new phone, sign in and they come back.

Records from your vet by email
If you use Dobi to get records from your vet, your dog gets its own Dobi email address (for example, coco1@dobirecords.com). We keep:

  • your dog's Dobi address,
  • the vet clinics you ask for records, their email address, and where that address came from: you typed it, it came in an email from the clinic, or Dobi found it with a web search,
  • each request: which clinic, when it was sent, your name and email address, and the words you agreed to before it was sent,
  • email that arrives at your dog's address: the sender's name and email address (often a clinic staff member), the subject, the first part of the message, and attached PDF files and images. These wait in your dog's inbox for you to review. They do not become records until you review them and add them.

Emails we send for you. When you tap Send request, Dobi emails the clinic from your dog's address, on your behalf, with you copied. The email includes your name, your email address, and your dog's name, breed, and birth month and year. If After each visit is on for a clinic (it is on unless you turn it off), Dobi also sends that clinic a short request the day after a vet visit with them that you booked or logged. If an email arrives at your dog's address without any files (for example, a clinic asking for a signed form), we forward it to your account email. These emails have no tracking and no links.

Notifications from our servers. When you are signed in, Dobi saves a code from Apple that lets us reach your phone (a push token) to your account. We use it only to tell you when records arrive at your dog's Dobi address. You see these notifications only if you allow notifications for Dobi. The notification shows your dog's name and the clinic's name (or, if Dobi cannot tell which clinic sent the records, the sender's name or email address), and it is delivered by Apple. It goes to the owner and "Can record" members of your dog's family. Signing out or deleting your account removes the code.

Family sharing
If you invite family members, we keep who belongs to your dog's family and their role ("Can record" or "Can view"), the invite codes you create, and which member last changed each record.

Feedback you choose to send
If you tap the thumbs-down on an AI answer and choose Send, we receive that one question, that one answer, the name of the AI model, and the date, linked to your account. We do not receive the rest of the conversation, your photos, or your dog's records with it.

Technical information for abuse protection
You need to be signed in to use the AI features. To stop overuse, our servers count AI requests per account. We store only your account ID with these counts and delete them within about 2 days.
Our server provider keeps technical logs of requests to our servers (such as the IP address and time) for up to 7 days, to keep the service running and secure.

What we do not collect

  • Voice: voice input is turned into text on your phone using Apple's on-device speech recognition. The recording is not sent to us, to Apple, or to OpenAI. Reading answers aloud also happens on your phone.
  • Location: if you search for nearby vet clinics, your phone sends your location to Apple Maps to find clinics near you. Dobi does not receive or store your location.
  • Advertising and tracking: Dobi has no ads, no advertising or analytics tools from other companies, and does not track you across other apps or websites. We do not sell your information.

2. How we use it

  • To save your records and photos and show them back to you and your family members.
  • To sync your records between your phone, your new phone, and your family's phones.
  • To run the AI features, only if you turn them on (section 3).
  • To send record requests to vet clinics for you, and to receive the records they send back (section 1, "Records from your vet by email").
  • To improve Dobi's answers, using only the feedback you choose to send.
  • To keep the service working and protect it from abuse.
  • To send reminders you turn on (medications, vaccines, bookings). Reminders are scheduled on your phone; we do not send them from our servers. The only notification we send from our servers is "New records," when records arrive at your dog's Dobi address.

We do not use your records or photos to train AI models. If we ever want to use records to improve Dobi or train AI, we will ask you separately first, and it will stay off unless you turn it on.

People at Dobi do not look at your records. The only exceptions: when you ask us to help fix a problem, when the law requires it, or when we need to respond to a security incident.

3. AI features and OpenAI

Dobi's AI features (Ask Dobi, reading documents and photos) are powered by OpenAI. They are off until you agree. The first time you use one, Dobi asks: "Turn on AI features?" You can choose Continue or Not now.

When AI is on and you use an AI feature, Dobi sends to OpenAI, through our server:

  • your message and the recent conversation,
  • the parts of your dog's records needed to answer (for example, profile, current medications, allergies, upcoming bookings, recent records, and notes),
  • any photos, documents, or notes you send or add.

OpenAI uses this to create the answer. OpenAI may keep it for up to 30 days to check for abuse, and then deletes it. We ask OpenAI not to store the conversation for later use. Under OpenAI's terms for business customers, OpenAI does not use this information to train its models, and we have turned off sharing our data with OpenAI.

Our server does not save your AI conversations. A conversation stays on your phone only until you fully close the app. Nothing the AI suggests becomes a record until you confirm it.

Finding a clinic's email: if AI is on and you ask Dobi to find a clinic's email address, we send only the clinic's name and address to OpenAI, which searches the web. Your dog's records and your details are not sent. Dobi shows you the page where it found the address, and you can change it. Files that arrive at your dog's Dobi address are read by AI only when you tap Review and AI is on.

Turning AI off: go to Profile › Settings › AI & Data › AI answers and switch it off. With AI off, nothing is sent to OpenAI. You can still log records, and documents you add are saved without being read.

Dobi is not a vet. AI answers are general information, not medical advice. Always check with your veterinarian before making medical decisions for your dog.

4. Who receives your information

We share information only with the service providers that run Dobi, and only so they can provide their service to us:

  • Supabase: our servers and storage, in the United States. Stores your account, records, photos, family sharing, and email that arrives at your dog's Dobi address.
  • OpenAI: AI features, only when AI is on (section 3).
  • Resend: sends the record requests to clinics, and forwards clinic messages that have no files to you. Resend receives each email we send: the clinic's address, your name and email address, your dog's name, breed, and birth month and year, and the message.
  • Cloudflare: receives email sent to your dog's Dobi address and passes it straight to our servers. Cloudflare does not store the message.
  • Apple and Google: sign-in. Apple also provides Apple Maps when you search for nearby clinics. Apple also delivers the "New records" notification.

Anyone we share your information with is required to protect it at the same level as this policy, and to use it only to provide their service to us.

We may also disclose information if the law requires it.

Your family: members of your dog's family can see your dog's records and photos, and the names of the other members (or their email address if no name was shared). "Can record" members can also add records and photos, and can edit or delete only the ones they added; the owner's records are view-only for them. "Can view" members can only look. Only the owner can invite, change roles, or remove members. They can also see your dog's Dobi address and the email that arrives there. Only the owner and "Can record" members can send record requests.

5. How long we keep it

  • Account, records, photos: as long as your account exists, until you delete them.
  • AI conversations: not kept on our servers. OpenAI may keep them up to 30 days (section 3).
  • Abuse-protection counts: about 2 days.
  • Invite codes: stop working after 7 days or once used.
  • Feedback you sent: until you delete your account.
  • Email received at your dog's Dobi address: its files are removed when you review or delete it. Its details (sender, subject, date) stay with your dog's requests as long as your account exists.
  • Record requests and what you agreed to: as long as your account exists.
  • Emails we send for you: Resend keeps a copy of each email we send for up to 30 days.
  • Clinic email search results: the clinic's name and address and the email address found. We keep them so we do not search for the same clinic again, and search again after 30 days. They include nothing about you or your dog.
  • Server logs: up to 7 days (section 1).
  • Backups: our servers keep daily backups for 7 days, so deleted data is gone from them within about a week.

6. Deleting your information and your choices

  • See and edit your records in the app anytime.
  • Delete a record from its detail screen. Its contents are removed from our servers too, along with its photos.
  • Sign out: Profile › Settings › Account › Sign out. Signing out removes your records and photos from this phone. Photos in your phone's photo library are not touched. Your account keeps everything, and it comes back when you sign in again. If some changes have not reached your account yet, Dobi warns you before signing out.
  • Delete your account: go to Profile › Settings › Account › Delete account. This deletes your Dobi account, every record and photo on your phone and in your account, your dog's Dobi address with the email it received and your record requests, and your feedback. If you are the owner of a dog, your family members lose access to its records. If you signed in with Apple, you confirm with Apple once more and we also disconnect Dobi from your Apple ID.
    • Records you added to a dog someone else owns belong to that dog's family and stay with it. The owner can delete them.
  • Leave a family: a member can leave in Profile › Settings › Family. The owner can remove a member there. Nothing is deleted; the member just stops seeing the records.
  • Change your dog's Dobi address: if unwanted email arrives, email contact@hellococodoodle.com and we will give your dog a new address. The old one stops working right away, and email sent to it is returned to the sender.
  • Stop automatic requests: turn off After each visit for a clinic.
  • Stop sharing with OpenAI: Profile › Settings › AI & Data › AI answers (section 3).
  • Export: Profile › Settings › AI & Data › Export saves a copy of your records as a text file you control.
  • Other requests (a copy of your information, corrections, deletion), wherever you live: email contact@hellococodoodle.com. We will reply within one month.

7. Security

Information travels over encrypted connections (HTTPS). On our servers, each account can reach only its own dog's records and the records shared with it through family sharing, and photos are kept in private storage. No system is perfectly secure, but we work to protect your information.

8. Children

Dobi is not meant for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, email us and we will delete it.

9. Changes to this policy

If we change this policy, we will update the effective date above. For important changes, we will tell you in the app before they take effect.

10. Contact

HELLOCOCODOODLE INC.
contact@hellococodoodle.com