Privacy

We collect what you type in and the files you upload, plus a small security log described below — and nothing else. There is no advertising, no analytics service, no tracking pixels and no third-party scripts on this site. We do not sell or share your information. You can delete everything at any time, and deletion means deletion.

• Your account. Email address and password. The password is handled by Supabase, our database and authentication provider, and we never see it.
• Your profile. Name, phone number, city, province and postal code — all optional except what you choose to enter.
• Your dog’s record. Call name, breed, sex, date of birth, colour, weight, microchip number, category, and a photo if you upload one.
• Your Taskbook. Tasks, training sessions and any trainer details you record.
• Your refusal log. If you record an incident: the date and time, the business and where it is, who refused you and what they said in your words, what you showed them, what happened, anyone you name as a witness and how to reach them, and any photograph or document you attach. The photograph goes to the private store, never the public one. We never ask why you have your dog, and there is no field for it.
• Your documents. Whatever you upload — veterinary records, certificates, a document from your health care provider.
• Orders. The amount, and — only for the QR tag, which has to be posted to you — a shipping address. The digital card is a download, so buying it asks for no address at all. Payment card details go directly to Stripe, our payment processor, and never reach us.
• Which link brought you. If you arrived from a link of ours that carries a campaign tag, the tag’s words (for example “social” and the name of the campaign), kept on your record and on your order. See Cookies below.
• A security log. When you sign in or fail to, reset your password, delete a dog or your account, when an order is paid, or when a tag is marked as posted, we record that it happened — with your account identifier where there is one, and a one-way hash of the internet address it came from, never the address itself. It holds no name, email or content. It is the one thing that survives deletion; see below.
• Ads from our paid partners. When a paid partner’s ad is shown or clicked, we add one to a monthly count for that ad and that page. We store nothing about who saw or clicked it: no cookie, no identifier and no IP address, and no third-party script runs.
• Emails to businesses. We write to cafés, shops and other businesses to invite them to list with ServDog as a partner. We use a business’s email address only if the business published it on its own web page, which we check before we write, or if someone from the business gave it to us in person and said yes to hearing from us. If a business replies, an automated system (an AI model from Anthropic, our provider) reads the reply first. It sorts the reply and may send one of our pre-written answers; anything it cannot sort goes to a person. We keep the words of a reply for 90 days, then delete them. To stop our emails, reply “stop” or use the one-click link at the foot of any of them. We then keep the address on a do-not-contact list, only so that we never write to it again.

We do not ask for your diagnosis or any medical detail, and no field on this site is for one. If you upload a document that contains medical information, it is stored privately like any other document and is never published.

One page is public: the profile a QR scan opens. It shows the registration number, the status and the registration date, plus whichever of the photo, call name, category, breed, your first name, city, province and emergency contact you have chosen to show.

That page answers for every number this registry has ever issued, including one whose account has since been closed. In that case it shows the number, that it was withdrawn by its holder, and the date — and nothing else at all. See deleting your account.

A field you switch off is not hidden by the page — it is never sent to the visitor’s browser at all. Your documents, your dog’s microchip number and date of birth, your email address and your phone number are never on that page under any setting.

The Taskbook is off the profile unless you put a task there yourself. It takes two switches, both off to begin with: “show tasks” on the dog, and “show on profile” on the individual task. With both on, a visitor sees that task’s name and its description — nothing else from the Taskbook. No dates, no hours, no trainer, no proficiency, no video, and nothing about the disability-related need you recorded. A task description can describe a disability, so leaving both switches off is the default and staying that way is a perfectly good choice.

The category shown publicly is deliberately coarse — service dog, emotional support animal, therapy dog, in training, or pet. A more specific type would say something about a disability, so it is kept to your own record and never published.

Two fields hold information about someone else: who refused you, and anyone who saw it. That person has not agreed to being in our records and may not know they are. Record what you would be willing to repeat in a letter, because a letter is what this becomes. A first name and a role is usually enough for the person who refused you. For a witness, ask them first, and record only what they agree to.

If someone you have named contacts us about it, write to contact@servdog.com and we will deal with it.

Scout is built on Anthropic’s Claude. When you are signed in and ask Scout a question, three things are sent to Anthropic to produce the answer: your question, the verified pages from this site that match it, and the fields from your dog’s record that are listed on the Scout page — call name, the category you recorded, the province on your profile, the registration number and status, and the name and one-line description of each Taskbook task. Nothing else from your account is sent: not your documents, not your emergency contact, not photos, not your dog’s date of birth or microchip number, not your name, email, phone or address, and not the disability-related need you may have recorded against a task.

One more thing is sent if you use Scan a sign, which comes with the card: the photo you take or choose. Your phone makes it smaller and removes its location and camera details before it leaves. It is sent to Anthropic once, to be read, and is not stored by us anywhere.

Anthropic’s commercial terms say: “Anthropic may not train models on Customer Content from Services.” Your question and your dog’s record are Customer Content under those terms. We have not been told anything further about how long they keep it, so we are not going to tell you that either — their terms are the thing to read, and they are public.

If you would rather nothing about your dog was sent anywhere, do not use Scout. The rest of the site works without it, and the record, the Taskbook and the card never go near it.

Data is held by Supabase, in a hosted Postgres database with row-level security, so a query can only return rows belonging to the signed-in account. Files go in two separate Supabase stores: dog photos in one that is readable by anyone with the link, and everything else in a private one that is not readable at all without a short-lived link generated for you at the moment you ask for it.

The site is hosted by Vercel; Supabase holds the database and the files. Both may store data outside Canada. Stripe handles card details under its own terms and we never receive them. Scout is built on Anthropic’s Claude, as set out above, and replies to our emails to businesses are read first by an AI model from Anthropic.

We do not send you marketing email. There is no mailing list to be on and nothing to unsubscribe from.

Two of the services above send you email on our behalf, and neither is given anything beyond the address they already hold. Supabase Auth sends the account emails — confirming your address when you sign up, confirming a change of address, and the password reset link. Stripe sends the receipt when you buy something, because your email address is passed to it at checkout so that the receipt reaches you.

That is the whole of the email this site sends you as a user. Emails to businesses are described under “Emails to businesses” above, and each one has a one-click unsubscribe.

You can delete your account from account settings. It removes your profile, your dogs, your tasks and training log, your orders, your refusal log including anyone you named in it and any photographs you attached, and every file you uploaded from both stores. It is immediate and cannot be undone.

Two things survive, and neither of them is about you.

Your registration numbers stay in the registry, marked withdrawn. A scan of an old tag says the number was withdrawn by its holder on the date you closed the account, and nothing else — not your dog’s name, not its photo, not its category, not your name or where you live. The number, a status and a date are already what that page shows to anyone who scans it. They stay because a number this registry issued must never read as a number it did not: “no record was found” is indistinguishable from a fake tag, and it would make someone who simply closed their account look like a fraud. A withdrawn number is never reissued to anyone else.

A security log recording that an action took place, with the account identifier and a one-way hash of the IP address it came from. It holds no name, email or content. It exists so that if something is misused we can tell what happened.

One cookie keeps you signed in. A second, called sd_src, is set only if you arrive from a link of ours that carries a campaign tag (for example from our profile on a social network): it remembers, for 30 days, which link brought you, so that we can tell which of our own pages leads to a sign-up or a card order. It holds a few campaign words such as “social” and nothing about you, it is ours alone, and when you sign up or buy it is copied onto your record and your order. There are no advertising cookies and no third-party scripts.

You can see everything we hold about you by signing in — that is the whole product. That includes your refusal log and the letters generated from it. Ask if you want any of it in another form.

How to reach us →