Legal
Privacy Policy
Last updated: January 1, 2026.
Who processes your data
Data controller:
2. Scope of processed data
During use of the platform we process the following data: email address, name (optional), and the data from the dog profiles you fill in (dog name, age, weight, health status). For payments, the Stripe payment platform handles card data; we only store the transaction status and the billing name.
3. Purpose of processing
We use your data solely to provide the service, generate personalized nutrition recommendations, and manage subscriptions. We do not sell your data to third parties. Operating the service does require the involvement of technology partners (data processors); see section 3.2.
3.2. Data processors (technology partners)
We rely on the following data processors to operate the service. Each partner processes data under its own privacy policy in a GDPR-compliant framework:
- Base44 (platform hosting, database, authentication, and anonymous session recording to improve the user experience), privacy policy
- Stripe, Inc. (US, payment processing), privacy policy
- Resend (transactional email delivery), privacy policy
- Google (Gemini API) (US, AI-based content processing and translation), privacy policy
- OpenAI / Anthropic (US, AI-based diet recommendations and report generation), dog profile data (name, weight, age, health status) is processed anonymously, without personal identifiers
3.3. Cross-border data transfers
Some of our processors (Stripe, Google, OpenAI/Anthropic) operate in the United States. Transfers occur under the EU-US Data Privacy Framework or Standard Contractual Clauses (GDPR Article 46) approved by the European Commission, which provide an adequate level of data protection in line with GDPR Articles 44–49.
3.1. Legal basis for processing
Processing is based on the following legal grounds:
- Service delivery: performance of a contract (GDPR Art. 6(1)(b))
- Customer support and communication: legitimate interest (GDPR Art. 6(1)(f))
- Marketing communication: explicit consent (where applicable)
4. Retention period
We retain your data until you delete your account, except where law requires longer retention (e.g. accounting obligations). Some data may persist for a limited time in backups. You can delete your account and data at any time by emailing us.
5. Your rights (GDPR / CCPA)
Under the GDPR (EU) and the CCPA (California, US), you are entitled to:
- Access – request a copy of the data we hold about you (GDPR Art. 15)
- Rectification – request correction of inaccurate data (GDPR Art. 16)
- Erasure – request final deletion of your data (GDPR Art. 17 – "right to be forgotten")
- Portability – download your data in a structured format (GDPR Art. 20)
- Objection – object to processing for marketing purposes (GDPR Art. 21)
- CCPA rights – for California residents: right to know, delete, and opt out of the sale of personal information (we do not sell data)
You can exercise these rights simply, online: Data privacy center →
Or email info@dogdietlab.com. We respond within 30 days.
6. Cookies
The platform uses the following types of cookies:
- Functional cookies: required for basic site operation (e.g. login, preferences)
- Analytics cookies: for analyzing site usage (e.g. Google Analytics)
- Session recording: to improve the user experience, the platform – via Base44's hosted recorder – may anonymously record and replay your interactions on the site (clicks, scrolling, navigation). Sensitive input (e.g. passwords) is not recorded. This is analytics processing that is active only with your consent; you can disable it by declining analytics cookies in the cookie banner.
You can manage cookie use and session recording through the cookie banner. Detailed information on cookie handling is available here.
6.1. Payment processing
Payment provider: Payment processing is handled by Stripe, Inc. (US) as a data processor. DogDietLab does not store card data.
Learn more: https://stripe.com/privacy
7. Contact
For privacy-related questions, contact us at: info@dogdietlab.com