The short version: we collect what the app needs to work, store it in the EU, show each piece only to the people it's for, never sell it or show ads, and you can delete your account yourself, at once, from inside the app.
Who we are
Dogweek is run by Mikael Laestander, enskild firma (a Swedish sole proprietorship), which is the controller of your personal data under the GDPR. Questions about your data: hej@dogweek.app.
What we collect
- Your account — email address, name, password (stored only as a hash) and, if you add one, a profile photo.
- Your family — who is in the household and who is an admin, and your dogs' profiles: name, breed, birth date, weight, sex, photo and notes, plus microchip number, insurance and vet details if you add them.
- Walks — the walk times your family sets, who took which walk, and each walk logged: start and end time, duration, distance, which dogs went, and the GPS route if the walk was tracked.
- Location — only while a walk you started is being tracked. See Location.
- If you become a sitter — display name, a short bio, photo, postcode and municipality, the hours you're usually free, and your date of birth. Your date of birth is used only to check that you're at least 15 and is never shown to anyone.
- If you take paid walks as a sitter — your name, home address and personnummer (or samordningsnummer), and the agreed price of each finished paid walk. Swedish law (the EU rules known as DAC7) requires us to report what sitters earn through Dogweek to Skatteverket once a year. Your personnummer is stored encrypted and is never shown to anyone in the app.
- Sitter bookings — walks families post (area, time, offered price and the dogs), applications, bookings, weekly or date-range arrangements, cancellations and missed walks.
- Messages — what you write in a conversation. Every conversation belongs to one booking, arrangement or daycare link, and only the people in it can read it.
- Reviews — after a completed walk, the family can rate and review the sitter. Reviews are shown on the sitter's profile.
- Reports and blocks — if you report someone we receive who reported whom, the reason and what you wrote. If you block someone we store the block.
- Daycare — for a daycare and families linked to it: attendance (in, out, on a walk), group walks, daily reports with mood, energy, appetite, a note and photos, and the staff's internal notes, which are never shown to the family.
- Notifications — a push token for your device, and the notifications we've sent you.
We don't collect your contacts, your browsing, your advertising identifier or anything else from your device.
Who can see what
- Your family sees the family's walks, dogs and members.
- A sitter, before you choose them, sees the area (the first three digits of your postcode) and municipality, the time, the price you offered, and your dog's breed and weight. Not your dog's name, not your notes, not your full postcode.
- The sitter you choose also sees your full postcode, your dog's name and notes, and — while the booking is active — the vet's name and number.
- Families see a sitter's display name, photo, bio, municipality, rating, reviews and how many walks they've completed or missed. Never their date of birth, postcode or account.
- A daycare sees only the dogs whose family approved a link, and only a safe profile: name, breed, age, weight, care notes and an emergency contact. Never the microchip number or insurance.
- Nobody sees your email address except you.
Location
Dogweek uses your location only while a walk you started is being tracked, to draw the route and measure distance and pace. Tracking keeps going if you lock the phone or switch apps during that walk — your phone shows that it's in use — and stops when you end the walk. Dogweek never reads your location when no walk is running.
The route is shown to your family and, for a walk a sitter or daycare takes, to the dog's family. You can say no to location access: the schedule, reminders and logging walks all work without it; you just won't get a route map.
Why we use it
To run the service you signed up for (the GDPR's "contract" basis): the family schedule, walks and stats, the sitter board and bookings, messages, and daycare reports. To keep people safe (our "legitimate interest"): the age check for sitters, reports and blocks, and the captcha that keeps automated sign-ups out. Because the law requires it (our "legal obligation"): a sitter's tax details and earnings, reported once a year to Skatteverket. Location, push notifications and photos are used only after you allow them on your phone, and you can turn them off at any time.
We don't use your data for advertising, profiling or marketing lists, and we never sell it.
Where it is stored
Everything is stored with Supabase, in the EU (Frankfurt, Germany), and encrypted on its way between your phone and our servers. Photos are kept in private storage and opened only through links that expire after an hour.
Services that handle data for us
We use a small number of providers, each only for its own job:
- Supabase (EU) — database, sign-in and photo storage.
- Expo, with Apple and Google — delivers push notifications; receives your device's push token and the text of the notification.
- Mapbox — draws the maps; receives the map area being shown and your IP address, not your account.
- Cloudflare Turnstile — the captcha at sign-up and sign-in; checks that a real person is using the app.
- Resend — sends our emails (sign-in links, password resets) and delivers reports to us.
Some of these providers are based in the US. Where data leaves the EU, these providers state that they use the safeguards the GDPR requires. We use no analytics or tracking SDKs, and no payment provider handles any of your data — Dogweek doesn't process payments.
How long we keep it
For as long as you have an account. When you delete it, it goes at once (see below). The one exception is a sitter's tax details and the record of what they earned: the law requires us to keep these for seven years after the end of the year they were reported for, even if you delete your account, and then they are deleted. A report is also delivered to our inbox by email, and that copy is kept for as long as we need to handle it.
Deleting your account
You can delete your account yourself, at any time: Settings → Delete account. It happens immediately and can't be undone. We remove:
- your profile, photo, family memberships and push tokens;
- your sitter profile, its applications and the reviews it received;
- the messages you sent and the reviews you wrote;
- a family or daycare that nobody is left in, with its dogs and photos.
What stays: walks you logged stay in your family's history without your name, because they are the family's record too; daily reports a daycare sent stay with the dog's family; a report you filed, or one about you, stays with your account removed from it — the reason and what was written are kept, so a reported person can't erase a report by deleting their account; and a sitter's tax details and earnings stay for the seven years the law requires (see above).
Your rights
You can ask to see the data we hold about you, have it corrected, get a copy to take elsewhere, restrict or object to how we use it, or have it deleted. Most of this you can do in the app; for the rest, email hej@dogweek.app. If you think we're getting it wrong, you can complain to the Swedish data protection authority, IMY.
Age
Becoming a sitter requires being 15 or older.
Changes
If we change this policy in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect.