Privacy Policy

Lucky Dog Software, LLC — effective October 25, 2026

1. Who we are

Lucky Dog Log is made by Lucky Dog Software, LLC (“we,” “us”). This policy describes what information we collect when you use the Lucky Dog Log apps and website (the “Service”), how we use it, and the choices you have.

2. Information we collect

Account information. Your email address and sign-in credentials, if you create an account. You do not need one to use the app: logging, reminders and the dog’s profile all work with no account at all. An account is made in the app — or, when you accept an invitation to follow a dog’s book, on luckydoglog.com.
Content you save. Your dogs’ profiles and photos, and the events you log — meals, walks, medicine, weights and the rest — with their times and notes.
Pictures and clips of your dog. A picture, or a clip of up to a minute with its sound, that you keep as a moment — taken with the Moment tile, or brought in from your phone’s library or, on luckydoglog.com, from a file — with its caption and the date it was taken. A moment’s picture is kept at full size beside smaller copies; a clip is kept as a compressed copy made on your phone — or, added on luckydoglog.com, as the file you chose with the location taken out of its metadata — with a still from its first frame.
Vet papers you keep in Records. The pages of a document — photos, or a PDF, which is kept whole — that you add to a dog’s Records, with the kind, date, provider and notes you give it, or that the receipt reader files there when Keep the pages in Records is on, which it is unless you switch it off. When you save an entry the label reader filled, its label is filed there too, as the product’s label.
What your family writes in a dog’s book. The book reads a dog’s album as the story of her life, and the people around her write in it: a page about a day or a month, a letter to the dog, a first somebody names (“First swim”), the book’s dedication, and “How she came to us.” Somebody who follows her book can write her a letter too. Each is kept with the day it is about, who wrote it, and who last changed it. We also keep the book’s own settings — its title, how its chapters are counted, the picture on its cover, and anybody from outside the family whom the family’s owner has added to Her people. A picture or clip added for the book — with the camera, from your library, or uploaded from a file on luckydoglog.com — is kept as a moment, like any other, so the bullets above apply to it.
Which of the book’s notes you have put away. The book leaves you notes — “Pages waiting for you” — asking for what only you could add. They are worked out on your own device from what you can already see, and nobody else is shown yours. If you put one away, we keep that with your settings, so it stays put away on your other devices.
How much your family keeps. The total size of the moments’ pictures and clips and the Records pages stored for your family’s dogs, counted on our server from what is stored, so the app can show it in Settings and offer the Family plan when the family needs more room.
Your name. The name you set in Settings › Account › Your name — what your family calls you. It is shown to everyone in your family, and to anybody you share one of your dogs with, on everything you log. Anybody who follows one of your family’s books sees it on what you wrote or added there, and on Her people; if you follow a book, the family sees your name with your letters and reactions, and in its list of people. It is optional and you can clear it: with no name set the app calls you Owner or Member on those screens rather than inventing a name out of your email address.
Your photo. If you add a photo of yourself in Settings › Account › Your photo, we keep it on your account: one square picture of the part you framed, made on your device, with no location or any other metadata in it. It is optional — nothing asks you for one — and you can change or remove it there at any time.
A push token for each phone. If you are signed in on a phone and allow notifications, the app gives us that phone’s push token — an identifier Apple or Google issues so a server can reach that copy of the app — with the app’s version and, for the next two days, how many of its reminders will be due at each point: a number at a time, with no dog, no subject and no reminder rule. It is what lets the count on the app icon change while the app is closed, as section 3 says. Signing out on that phone stops it being used.
Who is in a family with whom. If you start or join a family, we keep that membership — which family, what you can do in it, when you joined, and who invited you — because that is what lets everyone in it see the same dogs, and what lets the log say who logged something.
Which books you follow. If somebody in a family invites you to follow one or more of its dogs’ books and you accept, we keep that — which books, who invited you, and the address the invitation went to — because that is what lets you read them, and what lets the family see who is reading.
An address an invitation went to. When somebody is invited to a family, we keep the email address the invitation was sent to for as long as it is unanswered, so the family can see the invitation it has out and cancel it. Once it is accepted or declined the address is deleted — see section 6.
Documents you ask us to read. A vet’s invoice, discharge summary or vaccination record you photograph or pick for the ✨ receipt reader. The reader keeps it only for as long as it takes to read it. If you save what it read with Keep the pages in Records on, the pages you gave it are kept in the dog’s Records, as the bullet above says.
Photos of a label you ask us to read. Up to four pictures of the bag, box or bottle — a food, a treat, a medicine, a vaccine or a supplement — that you take or pick for the ✨ label reader. The reader keeps them only for as long as it takes to read them. If you go on to save the entry, they are saved with it, as that entry’s own photos, and filed in the dog’s Records as the product’s label; you can remove any of them before you save.
The Family plan. If somebody in your family buys the Family plan, we keep which family it is for, who bought it, and when it renews or ends — that is what gives everyone in the family the larger storage. The payment itself is made to Apple or Google.
AI feature usage. When you run a ✨ feature, we record that it ran — which action, and how large and costly the request was — so we can apply the monthly allowance and understand what the Service costs to operate.
Service logs. The providers that host the Service keep standard operational logs, such as an IP address and the time of a request, as a normal part of running it securely and reliably.

We collect what the product needs to work — and nothing more.

3. What leaves your phone, and when

Lucky Dog Log is built to work in a back yard at six in the morning with no signal, so the honest thing to say first is what never leaves the device — and what does, the moment you sign in.

Signed out, your dogs and their log stay on your phone. Nothing is uploaded. Reminders are computed on the device; no server sees your log to decide when to speak.
Signing in stores your dogs with us. An account is what lets your other phone and luckydoglog.com show the same log, so from the moment you sign in, every dog on that phone — its profile, its log, its pictures and clips, its Records and its book — is stored with us under your account. The sign-in screen says so. It is still only yours until somebody is in a family with you, or you share a dog; the next two points are what each of those adds.
Your family, and every dog in it. Everyone in a family sees every dog in it and can log for them. One invitation covers the lot — the dogs in the family now, and any dog added to it later — and the log says who logged what, by the name each person set. Anyone in the family can invite somebody else to it.
One dog, outside the family. You can also share a single dog with somebody who is not in your family — a walker, a sitter, the other house. They see that dog’s record and can add to it, and they see no other dog, which is what the app says before you send: “They see Rosie and no other dog.”
A sitter, for the days you choose. The family can also give somebody its dogs for a set run of days — a sitter for a week away, from one day to thirty. From the moment she accepts until the end of the last day she sees, for the dogs it names, what somebody a dog is shared with sees — the log, the profile, the album, Records and the people around them — and can log for them, changing or deleting only what she logged herself. She never sees the family’s other dogs or anybody’s address, and she cannot change a dog’s profile or reminders, add to Records, or share the dogs on. It ends by itself: from the end of the last day our servers refuse her reads and writes, whatever her app asks for, and the dogs leave her devices the next time they sync. What she logged stays in the log, under her name.
A dog’s book, for the people who follow it. Anyone in a family can also invite somebody to follow one or more of its dogs’ books — a grandparent, a sister far away, the breeder. A follower sees the book and nothing else: its pictures and clips, its pages and letters, the dog’s name, age, breed and cover, and the names and photos of the people on Her people. Never the log, the rest of the profile, Records, the vet report, anybody’s address, or an invitation nobody has answered — our servers do not give those to a follower at all, whatever her app asks for. She can write the dog a letter and react to what others posted, and the family sees her name in its list of people, her letters and her reactions. People a dog is shared with, and other followers, do not see her in that list. When the follow ends — the family stops sharing the book, or she leaves — the book stops reaching her and leaves her devices the next time they sync.
A dog’s book is read by everyone who can see her, by the people who follow it, and nobody else. What anybody writes in it — a page, a letter, a first, the dedication, “How she came to us” — is seen, signed with the writer’s name, by everyone in the dog’s family and by anybody she is shared with, just as her log is, and by anybody who follows her book. Her people names each person in the family, and anybody from outside it the family’s owner adds, with a line the log writes about what each has done for her — walks, pictures, pages — from entries everyone around her can already see; a follower’s copy of that line is made from the book alone. The book reaches nobody the family did not invite: it uses no AI and spends none of the allowance, it sends no email and no notification says what was added — only the count on the app icon moves, as below — and nobody but the people around the dog and those who follow her book is shown anything in it. Your notes are the one part that is yours alone.
Your photo is shown beside your name on Her people, and in the list of your family’s people in Settings. Everyone in your families sees it, and so does anyone one of your dogs is shared with — and you see theirs, and the photos of the people around a dog shared with you. If a family’s owner puts you on a dog’s Her people, everyone who can open her book sees it there too — and, if you are in her family, so does anybody who follows her book. It follows those people as they are now: when you leave a family, or a share ends, they stop seeing it, unless an owner has kept you on a dog’s Her people. It is shown nowhere else — not on the log, a notification, an email or the vet report — and only you can set, change or remove it.
Signed in, something new in a book you read puts a number on the app icon. When somebody adds a picture, a page, a letter or a first, our server asks Apple’s or Google’s push service to set the count on the icon of each phone you are signed in on — that phone’s reminders due now, which it worked out itself, plus the posts you haven’t looked at. The push carries that number and nothing else: no name, no words, no picture. On Android the number is carried by one quiet notification, New in the book, that makes no sound and says only how many. Settings › Notifications › Count new posts in the book turns it off. Signed out, nothing is sent and the count is your reminders’ alone.
Reading a document sends that document. The ✨ receipt reader sends the photos or PDF you chose to our server, which asks an AI model to read them. Nothing is sent until you tap the sparkle, and nothing the reader proposes is saved until you tick it and tap Save. The reader keeps nothing once it has read the document. If you save with Keep the pages in Records on — and it is on unless you switch it off — the app keeps the pages you gave it in the dog’s Records: on your phone and, because the reader needs you signed in, with us like the rest of her record.
Reading a label sends those pictures. The ✨ label reader sends the pictures of a product’s label you chose — up to four of the same package — to our server, which asks an AI model to read back the product’s name and what the label prints about it: the brand, the variety, the package size, the calorie or ingredient statement, the feeding chart. Like the receipt reader it runs only when you tap the sparkle — never on taking a photo, never on picking one, never in the background — and what it reads fills the entry sheet for you to check rather than writing anything, so nothing reaches your log until you tap Save. The reader keeps nothing once it has read them; if you save the entry, the app keeps them with it and in the dog’s Records, as section 2 says.
Signed in, the app checks the Family plan with RevenueCat. The Family plan is bought through Apple’s App Store or Google Play, and RevenueCat is the service we use to read those purchases. Once you sign in — never before — the app gives RevenueCat your account’s ID, a random identifier and not your email address or name, so it can say whether the plan is yours; like any service an app talks to, it also sees the device’s IP address, country and app version. If you buy the plan, RevenueCat receives the store’s record of the purchase — which plan, the price, and when it started, renews or ends — and the app tells it which family the plan is for. RevenueCat passes that on to our server, which gives the family its plan. Your card and billing details stay with Apple or Google; neither we nor RevenueCat see them.
Walks imported from Health Connect on Android are read on the device with your permission and written to your log as walk entries. On Android the app reads only exercise sessions and their distance from Health Connect, only when you tap Import, and never writes to it. The health data itself is not sent to us; a walk entry leaves the device only if you sign in and sync your dog’s log, and once it has synced the dog’s family sees it like any other entry. You can withdraw access at any time in Health Connect’s app permissions.
We take the location out of every picture and clip we keep — from the file’s metadata, on your device, before it’s saved — though a place some drones and dashcams write inside the video itself can stay in a clip added on Android or the web. A full-size picture — a moment, or a page in Records — may keep other details, such as the date it was taken. A picture attached to an entry, every smaller copy, and a clip’s still frame are redrawn and carry no metadata at all.

4. How we use your information

To provide the Service: syncing a dog’s log and her book to everyone in their family and to anybody that dog is shared with, and her book alone to the people who follow it, sending the emails below, reading the documents and labels you ask us to read, fixing problems, and improving the product.

Some of those emails you ask for as you send them — an invitation, a confirmation, a password reset. Four are sent because something happened that the person at the other end needs to know, and we send those without being asked at that moment:

Your invitation was answered. Whoever sent an invitation is told when it is accepted or declined, and who by.
You are no longer in a family. Somebody the owner removes is told, so a log does not simply vanish off their phone unexplained.
A family was handed on. When its owner makes somebody else the owner, both of them are told.
A family is yours now. If the owner of a family you are in deletes their account, the family passes to the longest-standing adult in it, and that person is told that it did.

5. What we never do

We never sell your personal information, and we never use your content for third-party advertising. We do not use your dog’s log, what your family writes in her book, your photo, or the documents and labels you ask us to read, to train anything.

6. When information is shared

Your content is shared with other people when somebody chooses to share it, and there are four kinds of invitation. An invitation to the family covers every dog in it, now and later: everyone who accepts sees the whole log and can add to it. Sharing one dog reaches somebody outside the family, and reaches that one dog. An invitation to look after one or more dogs reaches a sitter outside the family, reaches the dogs it names for the days it names, and ends by itself at the end of the last one. An invitation to follow a book reaches somebody outside the family, and reaches the books it names and nothing else about those dogs. All four go by email, carry a code that lasts two weeks — a sitter’s, until her last day if that comes sooner — and can be used once, and can be cancelled before they are answered.

Anyone in the family can do any of them — invite somebody to the family, share one of its dogs out, or invite somebody to follow its books — not only the person who added the dog. You can see everyone who has access, and every invitation still waiting for an answer, from the dog’s profile or from Settings › Family. Anyone in the family can stop a dog being shared, or stop sharing a book with somebody who follows it; the family can change a sitter’s days before they end, or end them early, and a sitter can leave; the family’s owner can remove a member.

The list of people reads both ways, and this is the half worth being precise about. Somebody a dog is shared with can see who is in that dog’s family, by name, just as the family can see them — it is a list of people and nothing else. It shows them no other dog, and it never shows them an invitation nobody has answered or anybody’s email address. The family alone sees who follows its books: the people a dog is shared with don’t see a follower, and she sees nobody but the people on Her people. The address a family invitation was sent to is kept only while that invitation is unanswered: the moment it is accepted or declined a database trigger deletes it, because nothing needs it after that.

We use trusted service providers to operate the Service (such as cloud hosting, email delivery, the AI model behind the receipt and label readers, Apple’s and Google’s push services, which carry the count to the app icon, and RevenueCat, which checks App Store and Google Play purchases of the Family plan), who process data on our behalf and under our instructions. We may disclose information if required by law.

7. Data storage & security

Data that reaches us is stored with reputable cloud infrastructure providers. It is encrypted in transit, access is restricted by row-level security tied to your account, to the family a dog belongs to, to the dogs shared with you, and — for a book you follow — to that book alone, and passwords are stored using industry-standard hashing.

Pictures, clips and vet papers are kept in private storage. Nothing in it is public: a file can be fetched only by somebody signed in who can see that dog — her family, and anybody she is shared with. On luckydoglog.com the browser is given a private link to each file it shows, made for that person and good for an hour. Somebody who follows her book is given the same kind of link, good for an hour, to each picture and clip in the book and to the photos on Her people — and to nothing else in our storage.

Your photo is kept in private storage of its own. It can be fetched only by somebody signed in who can see it, as section 3 says, and only you can put one there or take it out.

8. Data retention & deletion

We keep the content on your account for as long as the account is active. Deleting an entry or a dog marks it deleted and syncs that to everyone who could see it. Deleting a moment, or a document in Records, also deletes its pictures, clip or pages from our storage. When a family is deleted, the moments’ pictures and clips and the Records pages stored for its dogs are deleted with it. Reaching your family’s storage never deletes anything. Removing your photo in Settings deletes it from our storage.

What you logged on a family’s dog stays with that family, under your name. That is true whether you leave the family, are removed from it, or delete your account altogether — and it is deliberate. The family’s log is a record of the dog’s life that other people are relying on, and a walk or a dose disappearing from it, or losing the name of whoever wrote it, would make the rest of it untrustworthy. It is possible because your membership of that family keeps your name and your account’s id after the account itself is gone — which is all the log needs to go on saying who.

Leaving a family, or being removed from one

The family’s dogs leave your phones the next time each one syncs, and the family keeps all of them — including any dog you added to it. What you logged stays in their log, with your name on it, and nothing you logged is deleted by your going. Your own dogs, in families you are still in, are untouched. Somebody in the family can invite you back.

The same is true when a sitter’s days end, early or on the last day: the dogs leave her phones, and what she logged stays in the log, under her name.

What you wrote in a dog’s book

A page, a letter or a first you wrote is yours to change or take out, and the family’s owner can take it out too — the way a family tidies its own book. The dedication and “How she came to us” belong to the whole family: anyone in it can write them, add a part to “How she came to us,” and change or take out any of it, and when somebody changes words another person wrote, the signature says so (“— Lisa, edited by Emily”). Taking something out of the book marks it deleted and syncs that to everyone who could see it, as deleting an entry does; a picture it was written under stays in the album.

The book belongs to the dog, so it goes where she goes. What you wrote in a family’s book stays in it, signed with your name, when you leave the family, are removed from it, or delete your account while other people are still in it — for the same reason what you logged stays in the log. When a dog stops being shared with you, she and her book leave your phone, and what you wrote stays in it. When you stop following a book, or the family stops sharing it with you, it leaves your phone the same way, and a letter you wrote in it stays there, signed with your name. If a dog moves to another family, her book moves with her. Deleting a family deletes its dogs’ books, and a family you were alone in is erased from our servers with your account, its books included.

Deleting your Lucky Dog Log account

You can delete your account yourself, from inside the app — you don’t need to ask us:

Open Lucky Dog Log on the phone where you’re signed in.
Go to Settings › Account.
Choose Delete Account.
Type DELETE to confirm. We ask you to type it so the account can’t be destroyed by a stray tap.

On luckydoglog.com it is the same: Delete account… in Settings, then type DELETE — so an account made there to follow a book can be deleted there. If you would rather we did it for you, email [email protected] from the address on the account and we will delete it.

What is deleted, and what is kept

Deleting your account is immediate and permanent — there is no waiting period and no way for us to undo it. What happens to a dog depends on the family she is in, and the Delete-account screen names each of your families and says which of these applies to it before you type DELETE.

A family with other people in it keeps its dogs and its log. Nothing in it is deleted, including any dog you added to it and everything you logged. If you were its owner, the family passes to the longest-standing adult in it, who is told by email.
A family you were alone in is erased from our servers, with its dogs, their profiles, pictures, clips and vet papers, and everything logged.
Deleted right away. Your account and sign-in credentials, your photo, your settings, your phones’ push tokens, your AI allowance, and the families and dogs in the point above.
Removed from other people. A dog you had shared out from a family you were alone in disappears from the apps of the people you shared it with the next time they sync. Your access to dogs other people shared with you, and to the books you follow, ends.
Kept, as a name on what you did. If a dog was shared with you — to help with her, to look after her, or to follow her book — what you logged and wrote for her stays with her family, signed with the name you had when you accepted. The email address the invitation went to is deleted with your account.
An invitation to a family that stays, stays. If you invited somebody to a family that carries on without you and they have not answered yet, the code in their email still works, and accepting it puts them in that family. An invitation to a family you were alone in goes with the family.
Kept on this phone. The phone you delete the account from keeps the dogs of a family you were alone in, as a log with no account — they were erased from our servers and this is the only copy, and the app goes on working with them offline, as it does before anyone signs in. Every other dog leaves that phone then and there: a dog that stayed with a family, and a dog that was shared with you. A browser keeps nothing.
Kept, with nobody attached to it. Our record that an AI feature ran — which action, how large the request was and what it cost — is kept as cost history with your account’s id removed from it, so it no longer points at anybody.
Kept, briefly. Routine encrypted backups and the standard operational logs described in section 2 may still contain a copy for a short time until they rotate out on our hosting providers’ normal schedule. We do not use those backups to restore a deleted account.
Kept, where the law says so. We may retain the minimum records we are required to keep, such as records of a purchase for tax purposes.

9. Your rights

You can access and edit your content in the app at any time, set or clear the name your family sees, stop sharing a dog, and stop following a book. You can leave a family you are in; its owner can remove you from it, and either way section 8 says what the family keeps. If you own a family you can hand it on to another adult in it, or delete it, which deletes its dogs and their logs for everyone in it. And you can delete your whole account yourself, using the steps in section 8. You can also ask us for a copy of the data we hold, or for help deleting some of it, by contacting us. Depending on where you live, you may have additional rights under local law, which we honor.

10. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

If we make material changes, we will update this page and adjust the effective date above. Continued use of the Service after a change means you accept the updated policy.

October 8, 2026: names RevenueCat, the service that reads App Store and Google Play purchases of the Family plan, and says what it receives and when (sections 2, 3 and 6).

October 9, 2026: covers the album and Records — the pictures, clips and vet papers kept for a dog, how much a family keeps, and that the location is taken out of the metadata of every picture and clip we keep — and corrects section 3, which said a document the receipt reader read is not kept: with Keep the pages in Records on, its pages are kept in the dog’s Records (sections 2, 3, 7 and 8).

October 15, 2026: covers a dog’s book — the pages, letters, firsts, dedication and “How she came to us” her family writes, who sees them, who can change or take them out, and what happens to them when somebody leaves; and the book’s notes, which each person sees only for themselves (sections 2, 3, 4, 5 and 8).

October 16, 2026: covers your photo — the picture of yourself you can add in Settings: what is kept, who sees it, that only you can change it, that it is never used to train anything, and that removing it or deleting your account deletes it (sections 2, 3, 5, 7 and 8).

October 21, 2026: covers followers — somebody a family invites to follow a dog’s book, who sees the book and nothing else, can write the dog a letter and react, and whom the family alone sees: what we keep, what reaches them and what never does, the account they can make on luckydoglog.com, and that the book leaves their devices when the follow ends (sections 2, 3, 4, 6, 7, 8 and 9).

October 23, 2026: covers the count on the app icon — the push token each phone you are signed in on gives us, the reminder counts that go with it, that a push carries a number and nothing else, the switch that turns it off, and that deleting your account deletes the tokens (sections 2, 3, 6 and 8).

October 25, 2026: covers giving a sitter the dogs for a set run of days — what she sees and can do, that it ends by itself at the end of the last day, and that what she logged stays with the family under her name (sections 3, 6 and 8); and that anyone a dog was shared with stays a name on what they logged and wrote for her after their account is deleted, while the address their invitation went to is deleted with it (section 8).

12. Contact

Questions? Reach us any time through our contact page.