Privacy Policy

Lucky Dog Software, LLC — effective October 9, 2026

1. Who we are

Lucky Dog Log is made by Lucky Dog Software, LLC (“we,” “us”). This policy describes what information we collect when you use the Lucky Dog Log apps and website (the “Service”), how we use it, and the choices you have.

2. Information we collect

Account information. Your email address and sign-in credentials, if you create an account. You do not need one to use the app: logging, reminders and the dog’s profile all work with no account at all.
Content you save. Your dogs’ profiles and photos, and the events you log — meals, walks, medicine, weights and the rest — with their times and notes.
Pictures and clips of your dog. A picture, or a clip of up to a minute with its sound, that you keep as a moment — taken with the Moment tile, or brought in from your phone’s library or, on luckydoglog.com, from a file — with its caption and the date it was taken. A moment’s picture is kept at full size beside smaller copies; a clip is kept as a compressed copy made on your phone — or, added on luckydoglog.com, as the file you chose with the location taken out of its metadata — with a still from its first frame.
Vet papers you keep in Records. The pages of a document — photos, or a PDF, which is kept whole — that you add to a dog’s Records, with the kind, date, provider and notes you give it, or that the receipt reader files there when Keep the pages in Records is on, which it is unless you switch it off. When you save an entry the label reader filled, its label is filed there too, as the product’s label.
How much your family keeps. The total size of the moments’ pictures and clips and the Records pages stored for your family’s dogs, counted on our server from what is stored, so the app can show it in Settings and offer the Family plan when the family needs more room.
Your name. The name you set in Settings › Account › Your name — what your family calls you. It is shown to everyone in your family, and to anybody you share one of your dogs with, on everything you log. It is optional and you can clear it: with no name set the app calls you Owner or Member on those screens rather than inventing a name out of your email address.
Who is in a family with whom. If you start or join a family, we keep that membership — which family, what you can do in it, when you joined, and who invited you — because that is what lets everyone in it see the same dogs, and what lets the log say who logged something.
An address an invitation went to. When somebody is invited to a family, we keep the email address the invitation was sent to for as long as it is unanswered, so the family can see the invitation it has out and cancel it. Once it is accepted or declined the address is deleted — see section 6.
Documents you ask us to read. A vet’s invoice, discharge summary or vaccination record you photograph or pick for the ✨ receipt reader. The reader keeps it only for as long as it takes to read it. If you save what it read with Keep the pages in Records on, the pages you gave it are kept in the dog’s Records, as the bullet above says.
Photos of a label you ask us to read. Up to four pictures of the bag, box or bottle — a food, a treat, a medicine, a vaccine or a supplement — that you take or pick for the ✨ label reader. The reader keeps them only for as long as it takes to read them. If you go on to save the entry, they are saved with it, as that entry’s own photos, and filed in the dog’s Records as the product’s label; you can remove any of them before you save.
The Family plan. If somebody in your family buys the Family plan, we keep which family it is for, who bought it, and when it renews or ends — that is what gives everyone in the family the larger storage. The payment itself is made to Apple or Google.
AI feature usage. When you run a ✨ feature, we record that it ran — which action, and how large and costly the request was — so we can apply the monthly allowance and understand what the Service costs to operate.
Service logs. The providers that host the Service keep standard operational logs, such as an IP address and the time of a request, as a normal part of running it securely and reliably.

We collect what the product needs to work — and nothing more.

3. What leaves your phone, and when

Lucky Dog Log is built to work in a back yard at six in the morning with no signal, so the honest thing to say first is what never leaves the device — and what does, the moment you sign in.

Signed out, your dogs and their log stay on your phone. Nothing is uploaded. Reminders are computed on the device; no server sees your log to decide when to speak.
Signing in stores your dogs with us. An account is what lets your other phone and luckydoglog.com show the same log, so from the moment you sign in, every dog on that phone — its profile, its log, its pictures and clips, and its Records — is stored with us under your account. The sign-in screen says so. It is still only yours until somebody is in a family with you, or you share a dog; the next two points are what each of those adds.
Your family, and every dog in it. Everyone in a family sees every dog in it and can log for them. One invitation covers the lot — the dogs in the family now, and any dog added to it later — and the log says who logged what, by the name each person set. Anyone in the family can invite somebody else to it.
One dog, outside the family. You can also share a single dog with somebody who is not in your family — a walker, a sitter, the other house. They see that dog’s record and can add to it, and they see no other dog, which is what the app says before you send: “They see Rosie and no other dog.”
Reading a document sends that document. The ✨ receipt reader sends the photos or PDF you chose to our server, which asks an AI model to read them. Nothing is sent until you tap the sparkle, and nothing the reader proposes is saved until you tick it and tap Save. The reader keeps nothing once it has read the document. If you save with Keep the pages in Records on — and it is on unless you switch it off — the app keeps the pages you gave it in the dog’s Records: on your phone and, because the reader needs you signed in, with us like the rest of her record.
Reading a label sends those pictures. The ✨ label reader sends the pictures of a product’s label you chose — up to four of the same package — to our server, which asks an AI model to read back the product’s name and what the label prints about it: the brand, the variety, the package size, the calorie or ingredient statement, the feeding chart. Like the receipt reader it runs only when you tap the sparkle — never on taking a photo, never on picking one, never in the background — and what it reads fills the entry sheet for you to check rather than writing anything, so nothing reaches your log until you tap Save. The reader keeps nothing once it has read them; if you save the entry, the app keeps them with it and in the dog’s Records, as section 2 says.
Signed in, the app checks the Family plan with RevenueCat. The Family plan is bought through Apple’s App Store or Google Play, and RevenueCat is the service we use to read those purchases. Once you sign in — never before — the app gives RevenueCat your account’s ID, a random identifier and not your email address or name, so it can say whether the plan is yours; like any service an app talks to, it also sees the device’s IP address, country and app version. If you buy the plan, RevenueCat receives the store’s record of the purchase — which plan, the price, and when it started, renews or ends — and the app tells it which family the plan is for. RevenueCat passes that on to our server, which gives the family its plan. Your card and billing details stay with Apple or Google; neither we nor RevenueCat see them.
Walks imported from Health Connect on Android are read on the device with your permission and written to your log as walk entries. On Android the app reads only exercise sessions and their distance from Health Connect, only when you tap Import, and never writes to it. The health data itself is not sent to us; a walk entry leaves the device only if you sign in and sync your dog’s log, and once it has synced the dog’s family sees it like any other entry. You can withdraw access at any time in Health Connect’s app permissions.
We take the location out of every picture and clip we keep — from the file’s metadata, on your device, before it’s saved — though a place some drones and dashcams write inside the video itself can stay in a clip added on Android or the web. A full-size picture — a moment, or a page in Records — may keep other details, such as the date it was taken. A picture attached to an entry, every smaller copy, and a clip’s still frame are redrawn and carry no metadata at all.

4. How we use your information

To provide the Service: syncing a dog’s log to everyone in their family and to anybody that dog is shared with, sending the emails below, reading the documents and labels you ask us to read, fixing problems, and improving the product.

Some of those emails you ask for as you send them — an invitation, a confirmation, a password reset. Four are sent because something happened that the person at the other end needs to know, and we send those without being asked at that moment:

Your invitation was answered. Whoever sent an invitation is told when it is accepted or declined, and who by.
You are no longer in a family. Somebody the owner removes is told, so a log does not simply vanish off their phone unexplained.
A family was handed on. When its owner makes somebody else the owner, both of them are told.
A family is yours now. If the owner of a family you are in deletes their account, the family passes to the longest-standing adult in it, and that person is told that it did.

5. What we never do

We never sell your personal information, and we never use your content for third-party advertising. We do not use your dog’s log, or the documents and labels you ask us to read, to train anything.

6. When information is shared

Your content is shared with other people when somebody chooses to share it, and there are two kinds of invitation. An invitation to the family covers every dog in it, now and later: everyone who accepts sees the whole log and can add to it. Sharing one dog reaches somebody outside the family, and reaches that one dog. Both go by email, both carry a code that lasts two weeks and can be used once, and both can be cancelled before they are answered.

Anyone in the family can do either — invite somebody to the family, or share one of its dogs out — not only the person who added the dog. You can see everyone who has access, and every invitation still waiting for an answer, from the dog’s profile or from Settings › Family. Anyone in the family can stop a dog being shared; the family’s owner can remove a member.

The list of people reads both ways, and this is the half worth being precise about. Somebody a dog is shared with can see who is in that dog’s family, by name, just as the family can see them — it is a list of people and nothing else. It shows them no other dog, and it never shows them an invitation nobody has answered or anybody’s email address. The address a family invitation was sent to is kept only while that invitation is unanswered: the moment it is accepted or declined a database trigger deletes it, because nothing needs it after that.

We use trusted service providers to operate the Service (such as cloud hosting, email delivery, the AI model behind the receipt and label readers, and RevenueCat, which checks App Store and Google Play purchases of the Family plan), who process data on our behalf and under our instructions. We may disclose information if required by law.

7. Data storage & security

Data that reaches us is stored with reputable cloud infrastructure providers. It is encrypted in transit, access is restricted by row-level security tied to your account, to the family a dog belongs to, and to the dogs shared with you, and passwords are stored using industry-standard hashing.

Pictures, clips and vet papers are kept in private storage. Nothing in it is public: a file can be fetched only by somebody signed in who can see that dog — her family, and anybody she is shared with. On luckydoglog.com the browser is given a private link to each file it shows, made for that person and good for an hour.

8. Data retention & deletion

We keep the content on your account for as long as the account is active. Deleting an entry or a dog marks it deleted and syncs that to everyone who could see it. Deleting a moment, or a document in Records, also deletes its pictures, clip or pages from our storage. When a family is deleted, the moments’ pictures and clips and the Records pages stored for its dogs are deleted with it. Reaching your family’s storage never deletes anything.

What you logged on a family’s dog stays with that family, under your name. That is true whether you leave the family, are removed from it, or delete your account altogether — and it is deliberate. The family’s log is a record of the dog’s life that other people are relying on, and a walk or a dose disappearing from it, or losing the name of whoever wrote it, would make the rest of it untrustworthy. It is possible because your membership of that family keeps your name and your account’s id after the account itself is gone — which is all the log needs to go on saying who.

Leaving a family, or being removed from one

The family’s dogs leave your phones the next time each one syncs, and the family keeps all of them — including any dog you added to it. What you logged stays in their log, with your name on it, and nothing you logged is deleted by your going. Your own dogs, in families you are still in, are untouched. Somebody in the family can invite you back.

Deleting your Lucky Dog Log account

You can delete your account yourself, from inside the app — you don’t need to ask us:

Open Lucky Dog Log on the phone where you’re signed in.
Go to Settings › Account.
Choose Delete Account.
Type DELETE to confirm. We ask you to type it so the account can’t be destroyed by a stray tap.

If you would rather we did it for you, email [email protected] from the address on the account and we will delete it.

What is deleted, and what is kept

Deleting your account is immediate and permanent — there is no waiting period and no way for us to undo it. What happens to a dog depends on the family she is in, and the Delete-account screen names each of your families and says which of these applies to it before you type DELETE.

A family with other people in it keeps its dogs and its log. Nothing in it is deleted, including any dog you added to it and everything you logged. If you were its owner, the family passes to the longest-standing adult in it, who is told by email.
A family you were alone in is erased from our servers, with its dogs, their profiles, pictures, clips and vet papers, and everything logged.
Deleted right away. Your account and sign-in credentials, your settings, your AI allowance, and the families and dogs in the point above.
Removed from other people. A dog you had shared out from a family you were alone in disappears from the apps of the people you shared it with the next time they sync. Your access to dogs other people shared with you ends.
An invitation to a family that stays, stays. If you invited somebody to a family that carries on without you and they have not answered yet, the code in their email still works, and accepting it puts them in that family. An invitation to a family you were alone in goes with the family.
Kept on this phone. The phone you delete the account from keeps the dogs of a family you were alone in, as a log with no account — they were erased from our servers and this is the only copy, and the app goes on working with them offline, as it does before anyone signs in. Every other dog leaves that phone then and there: a dog that stayed with a family, and a dog that was shared with you. A browser keeps nothing.
Kept, with nobody attached to it. Our record that an AI feature ran — which action, how large the request was and what it cost — is kept as cost history with your account’s id removed from it, so it no longer points at anybody.
Kept, briefly. Routine encrypted backups and the standard operational logs described in section 2 may still contain a copy for a short time until they rotate out on our hosting providers’ normal schedule. We do not use those backups to restore a deleted account.
Kept, where the law says so. We may retain the minimum records we are required to keep, such as records of a purchase for tax purposes.

9. Your rights

You can access and edit your content in the app at any time, set or clear the name your family sees, and stop sharing a dog. You can leave a family you are in; its owner can remove you from it, and either way section 8 says what the family keeps. If you own a family you can hand it on to another adult in it, or delete it, which deletes its dogs and their logs for everyone in it. And you can delete your whole account yourself, using the steps in section 8. You can also ask us for a copy of the data we hold, or for help deleting some of it, by contacting us. Depending on where you live, you may have additional rights under local law, which we honor.

10. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

If we make material changes, we will update this page and adjust the effective date above. Continued use of the Service after a change means you accept the updated policy.

October 8, 2026: names RevenueCat, the service that reads App Store and Google Play purchases of the Family plan, and says what it receives and when (sections 2, 3 and 6).

October 9, 2026: covers the album and Records — the pictures, clips and vet papers kept for a dog, how much a family keeps, and that the location is taken out of the metadata of every picture and clip we keep — and corrects section 3, which said a document the receipt reader read is not kept: with Keep the pages in Records on, its pages are kept in the dog’s Records (sections 2, 3, 7 and 8).

12. Contact

Questions? Reach us any time through our contact page.