PupStep ("we", "our", "us") is operated by Melroy Joanes, Juhu, Mumbai, Maharashtra, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit pupstep.in or use our mobile web application. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.
This policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
1. Information We Collect
a. Information you provide directly
- Name, email address, and phone/WhatsApp number when you register or sign in
- Your dog's name, breed, date of birth, and health notes when you create a dog profile
- Business information (name, address, working hours, pricing) if you register as a service provider
- Walk session data including GPS coordinates, distance, and events (pee/poop logs and photos) captured during walks
- Walker information: when a dog walker connects via a QR code, we collect the walker's name, phone number, and role as provided during connection. This information is shared with the dog owner they are connected to, and is used to identify the walker in walk reports. Walkers do not create accounts; they may request correction or deletion of their data by contacting us at the address below.
- Payment information — processed exclusively by Razorpay. PupStep does not store your card number or banking credentials.
- Messages, requests, and feedback submitted through our platform
b. Information collected automatically
- Device type, browser, and operating system
- IP address and approximate location (city level)
- Pages visited, time spent, and interaction patterns (via Google Analytics 4)
- GPS coordinates during active walk sessions (precise location, collected only while a walk is in progress)
c. Sensitive Personal Data or Information (SPDI)
Under SPDI Rules, location data and health information (including dog health notes) may qualify as sensitive. We collect this only with your explicit consent and for the purpose of delivering our core service: GPS-verified walk reports and pet health records.
2. How We Use Your Information
- To provide GPS walk tracking, health diaries, and grooming records
- To connect dog parents with local service providers
- To process payments via Razorpay for PupStep Pro subscriptions
- To send walk reports and health summaries via WhatsApp (with your consent)
- To send transactional emails (booking confirmations, receipts, security alerts)
- To improve the platform and diagnose technical issues
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for targeted advertising beyond our own platform.
3. Sharing of Information
We share your data only in these limited circumstances:
- Service providers: Supabase (database and authentication), Razorpay (payments), Resend (email), Vercel (hosting). Each is bound by data processing agreements.
- Other users: When you connect with a service provider, your name, dog's name, and WhatsApp number are visible to that provider. Walk report links are shareable only by the provider.
- Legal requirements: If required by law, court order, or governmental authority in India.
- Business transfer: In the event of a merger or acquisition, your data may be transferred. You will be notified via email before any such transfer.
4. Location Data
PupStep collects precise GPS location data during active walk sessions. This data is:
- Collected only when a walk session is explicitly started by a provider
- Used to compute walk distance, track routes, and generate walk reports for dog parents
- Stored in our Supabase database (Mumbai region, hosted on AWS)
- Accessible only to the provider who conducted the walk and the linked dog parent
- Not used for advertising or sold to third parties
You can revoke location permission at any time through your browser or device settings. Revoking permission will disable GPS walk tracking features.
5. Data Retention
- Account data: retained until you delete your account
- Walk session data and photos: retained for 3 years from session date, then permanently deleted
- Payment records: retained for 7 years as required under Indian tax law (Income Tax Act, 1961)
- Deleted accounts: personal data purged within 30 days of account deletion request; anonymised analytics data may be retained
6. Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- Row-level security policies on our database (Supabase)
- Passwords are never stored — we use Google OAuth exclusively
- Payment data handled entirely by PCI-DSS compliant Razorpay
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Cookies
We use essential cookies for authentication (Supabase session management) and analytics cookies via Google Analytics 4. You can disable non-essential cookies through your browser settings. Essential cookies are required for the site to function.
8. Your Rights
Under applicable Indian law and as a matter of policy, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated personal data
- Withdrawal of consent: Withdraw consent for location data or marketing communications at any time
- Portability: Request your walk history and health records in a machine-readable format (JSON/CSV)
To exercise any of these rights, email us at melroy@verfolia.comwith the subject line "Data Request — [your request type]". We will respond within 7 days.
9. Children's Privacy
PupStep is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately at melroy@verfolia.com and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify you via email or a prominent notice on the website at least 7 days before the change takes effect.
11. Grievance Officer
Designated Grievance Officer
Name: Melroy Joanes
Designation: Founder & Grievance Officer
Email: melroy@verfolia.com
Address: PupStep, Juhu, Mumbai, Maharashtra — 400049, India
Response time: Within 30 days of receiving a complaint
Published in compliance with Rule 5(9) of the SPDI Rules, 2011 and Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
12. Contact Us
For any questions about this Privacy Policy, contact us at: melroy@verfolia.com or through our Contact page.