Privacy

We collect what you type in and the files you upload, plus a small security log described below — and nothing else. There is no advertising, no analytics, no tracking pixels and no third-party scripts on this site. We do not sell or share your information. You can delete everything at any time, and deletion means deletion.

• Your account. Email address and password. The password is handled by Supabase, our database and authentication provider, and we never see it.
• Your profile. Name, phone number, city, province and postal code — all optional except what you choose to enter.
• Your dog’s record. Call name, breed, sex, date of birth, colour, weight, microchip number, category, and a photo if you upload one.
• Your Taskbook. Tasks, training sessions and any trainer details you record.
• Your documents. Whatever you upload — veterinary records, certificates, a letter from your health care provider.
• Orders. The amount, and — only for the QR tag, which has to be posted to you — a shipping address. The digital card is a download, so buying it asks for no address at all. Payment card details go directly to Stripe, our payment processor, and never reach us.
• A security log. When you sign in or fail to, reset your password, delete a dog or your account, when an order is paid, or when a tag is marked as posted, we record that it happened — with your account identifier where there is one, and a one-way hash of the internet address it came from, never the address itself. It holds no name, email or content. It is the one thing that survives deletion; see below.

We do not ask for your diagnosis or any medical detail, and no field on this site is for one. If you upload a document that contains medical information, it is stored privately like any other document and is never published.

One page is public: the profile a QR scan opens. It shows the registration number, the status and the registration date, plus whichever of the photo, call name, category, breed, your first name, city, province and emergency contact you have chosen to show.

A field you switch off is not hidden by the page — it is never sent to the visitor’s browser at all. Your documents, your dog’s microchip number and date of birth, your email address and your phone number are never on that page under any setting.

The Taskbook is off the profile unless you put a task there yourself. It takes two switches, both off to begin with: “show tasks” on the dog, and “show on profile” on the individual task. With both on, a visitor sees that task’s name and its description — nothing else from the Taskbook. No dates, no hours, no trainer, no proficiency, no video, and nothing about the disability-related need you recorded. A task description can describe a disability, so leaving both switches off is the default and staying that way is a perfectly good choice.

The category shown publicly is deliberately coarse — service dog, emotional support animal, therapy dog, in training, or pet. A more specific type would say something about a disability, so it is kept to your own record and never published.

Scout is built on Anthropic’s Claude. When you are signed in and ask Scout a question, three things are sent to Anthropic to produce the answer: your question, the verified pages from this site that match it, and the fields from your dog’s record that are listed on the Scout page — call name, the category you recorded, the province on your profile, the registration number and status, and the name and one-line description of each Taskbook task. Nothing else from your account is sent: not your documents, not your emergency contact, not photos, not your dog’s date of birth or microchip number, not your name, email, phone or address, and not the disability-related need you may have recorded against a task.

Anthropic’s commercial terms say: “Anthropic may not train models on Customer Content from Services.” Your question and your dog’s record are Customer Content under those terms. We have not been told anything further about how long they keep it, so we are not going to tell you that either — their terms are the thing to read, and they are public.

If you would rather nothing about your dog was sent anywhere, do not use Scout. The rest of the site works without it, and the record, the Taskbook and the card never go near it.

Data is held by Supabase, in a hosted Postgres database with row-level security, so a query can only return rows belonging to the signed-in account. Files go in two separate Supabase stores: dog photos in one that is readable by anyone with the link, and everything else in a private one that is not readable at all without a short-lived link generated for you at the moment you ask for it.

The site is hosted by Vercel; Supabase holds the database and the files. Both may store data outside Canada. Stripe handles card details under its own terms and we never receive them. Scout is built on Anthropic’s Claude, as set out above.

We do not send marketing email. There is no mailing list to be on and nothing to unsubscribe from.

Two of the services above send you email on our behalf, and neither is given anything beyond the address they already hold. Supabase Auth sends the account emails — confirming your address when you sign up, confirming a change of address, and the password reset link. Stripe sends the receipt when you buy something, because your email address is passed to it at checkout so that the receipt reaches you.

That is the whole of the email this site causes.

You can delete your account from account settings. It removes your profile, your dogs, their registrations, your tasks and training log, your orders, your refusal notes and letters, and every file you uploaded from both stores. It is immediate and cannot be undone.

One thing survives: a security log recording that an action took place, with the account identifier and a one-way hash of the IP address it came from. It holds no name, email or content. It exists so that if something is misused we can tell what happened.

One cookie, used to keep you signed in. There are no advertising or analytics cookies because there is no advertising or analytics.

You can see everything we hold about you by signing in — that is the whole product. If you want a copy in another form, or want something corrected, or want to know more about how any of this works, ask.

How to reach us →