Privacy

The short version

• Leash holds what you, your provider or your customers put into the app. During the beta it is used only to run Leash for you and the people you connect with.
• The app has no advertising in it, and no tracking or analytics services.
• A pet owner pays their provider directly, outside Leash. Leash does not ask for card numbers or bank account numbers.
• Leash asks for a phone's location only while the app is in use, never in the background. A route is recorded only during a walk the provider starts.
• Nothing is removed automatically today, and the app has no button for deleting an account yet. How to ask us to delete your account

What Leash holds

For everyone with an account

• Your name, email address and mobile number.
• Your password. It is handled by the sign-in service of the company that hosts the database, and it is not kept in any record that other people using Leash can read.
• Whether your account is a provider's or a pet owner's, which alerts you chose, and where you stopped in setup.

For providers

• Your storefront: business name, neighborhood and the areas you serve, how far you travel, working hours, whether you are open, your photo, your introduction, your skills, and a rough position on the map. That position is rounded to about a kilometer and is never a street address.
• Your home base address, travel time between visits and daily visit limit.
• Your services and prices.
• Your invoice settings, your own charges and discounts, and how you like to be paid, for example a Zelle or Venmo name.
• Your client list: each client's name, mobile number and email, your private notes about them and any special prices. This includes people you typed in, picked from your phone's contacts or brought in from a spreadsheet who have not joined Leash, with an address and pet names if you gave them.
• Your time off, vacations and blocked hours.
• Your expenses, receipt photos and miles.
• Your free trial dates and the Leash fees counted for the services you complete.

For pet owners

• Your home address, an emergency contact's name and mobile number, and notes about your neighborhood.
• Each pet's profile: name, species, breed, birthday or age, weight, sex, whether they are spayed or neutered, and a photo.
• Each pet's health answers: health conditions, contagious illness, medications, allergies, vet clinic and phone number, microchip details and whether the pet is insured.
• Vaccine records you add, as photos or PDF files.
• Each pet's behavior and care answers, such as whether to approach with caution, bite history, how they are with children, strangers and other pets, and feeding.
• Entry notes and a door code, if you choose to add them.
• Care notes you leave for your provider, and concerns you raise about a walk.
• The name, business name and mobile number or email address you type for a provider you invite who is not on Leash yet.

Shared between a provider and their customer

• Visits and bookings: the service, price, day and time, which pets, notes, change requests and cancellations.
• Walk records: start and end times, the route, the distance, each pet's answers and the provider's note.
• Photos from walks, and photos in the pet's gallery.
• Messages: the words, the photos and when they were read.
• Invoices: each charge, the total, the dates, and how and when the customer says they paid.
• Reviews, with the provider's reply.
• Waitlist requests and offers of a spot.

Who can see what

• Only you. Your alert choices. For a provider, also the home base address, private notes about clients, special prices, expenses and group walk lists. A provider's invoice settings screen is seen only by them, but some of what is set there is shown to others: the ways they take payment, with the payment details they add, and their policies are put on every invoice they send, and their extra pet, after hours, holiday and free cancellation policies are shown on their storefront.
• You and the people you are connected with. A provider who is connected with a household can see that household's names and contact details, home address, emergency contact, pets, the pets' health and behavior answers and their vaccine records. Pet owners in the same household see the same household information. A customer can see their provider's name, contact details and storefront.
• The two sides of a visit. Visits, messages and invoices are seen by the provider and the household they are for. A household sees an invoice only once it has been sent, and sees a full walk report once the provider sends it.
• Pet owners signed in to Leash. A provider's storefront is shown on Leash Street only if the provider switches that listing on. A storefront shows the provider's name, business name, photo, introduction and skills, their neighborhood, the areas they serve and how far they travel, their working hours, whether they are open, on a waitlist, closed or on vacation, the day they are back from a vacation, how many households are on their waitlist, the month they joined Leash, the services and prices they chose to show, a few of their policies, their reviews, and numbers Leash works out from what happened in the app, such as services done and average ratings. On the Leash Street map it also shows a pin at the rough position described above, never a street address. A storefront does not show the provider's email address, mobile number or home base address.
• Connecting. Connecting does not need the provider's approval today. Once a pet owner connects, with the provider's code or from Leash Street, that pet owner's account can read the provider's email address and mobile number, and the provider can see the household's details listed above.
• Anyone who opens a provider's invite code or link. They see the provider's name, business name, neighborhood and photo, so they know whose code it is. When a pet owner sends an invite link to a provider who is not on Leash yet, anyone who opens that link sees the pet owner's first name.
• Reviews. A review is shown under the first pet's name followed by the word family, for example "Bella's family", and never under the person's name.
• A provider's waitlist. Before you are connected, the provider sees only a family name or first name, your pets' names and what you are looking for.
• The people who run Leash. Leash's own administrator access to the database can read the records in it. It is there to keep Leash running and to fix problems.

Private photos, such as pet, walk, gallery and message photos and receipts, are opened through links that stop working after one hour. A storefront photo is different: it can be opened by anyone who has its web link.

Leash is built so that when the connection between a provider and a household ends, the provider can no longer see that household's address, pets, files or door code. Past visits, walk reports, messages and invoices between the two stay visible to both. The app does not have a button for ending a connection yet. Until it does, write to us.

Entry notes and door codes

• They are not shared with any provider until you switch sharing on for that provider.
• That provider can open them only from one hour before a booked visit until twelve hours after it starts, and only while you are connected.
• The app shows the code for 30 seconds at a time, and every look is written down in a list that only your household can see.
• Access ends at once when you switch it off.

Leash saves the code in a scrambled form, and saves entry notes as plain words. The key that unscrambles the code is kept in the same database, so the people who run Leash could still read a code if they had to. This part of Leash has not had an outside security review yet, so the app asks you to use a made-up code until it has.

Location

• Leash asks for a phone's location only while the app is in use. It does not ask for location in the background.
• When a provider starts a walk, Leash records the route from the provider's phone until the walk is ended, and only while Leash is open on the screen.
• While a walk is under way the household is shown that their pet is out, and Leash's rules let their account read the route so far. The route is shown to them in the report once it is sent.
• On a group walk, every household in the group gets the same route for the whole walk, which can include the stops at the other homes.
• Outside a walk, Leash does not read where a phone is. Two screens still ask you to allow location, because some phones need that before they can look up an address: the provider's map of a client's home, and Leash Street when a pet owner types a ZIP code. You can say no to either.
• To place an address or ZIP code on a map, the app hands it to the phone's own address lookup, which sends it to Apple on an iPhone and to Google on most Android phones. This happens when a provider saves their home base, when a provider opens the map of a customer's home, and when a pet owner opens Leash Street.

What your phone will ask you

• Location. For walk routes and for placing addresses on a map, as described above. A provider can say "Not now", and a pet owner can say no.
• Camera. To scan a provider's QR code, and to take a photo for a walk report, a message or a receipt. Leash never asks for the microphone.
• Photos. When you choose a photo, Leash opens the phone's own photo picker and receives only the photo you pick.
• Contacts. Only when a provider chooses to add clients from their phone's contacts. The list is shown on the phone, and only the people the provider ticks are saved to Leash.
• Files. When a provider brings in a client spreadsheet or a pet owner adds a vaccine record, Leash opens the phone's own file picker for that one file.
• Notifications. Leash does not ask for this yet, and it does not send alerts to your phone yet.

Where it is kept, and who else is involved

• Supabase is the company that hosts Leash's database. Everything listed on this page is stored there, including accounts and sign-in, and the photos, vaccine records and receipts people add. Its sign-in service also sends account emails, such as the one for a forgotten password.
• Your phone's maps. The maps inside Leash are drawn by the phone's own map service, which is Apple Maps on an iPhone and Google Maps on an Android phone. When a provider taps for directions, the customer's home address is passed to the maps app on that phone. Addresses are also sent to the phone's address lookup, as described under Location.
• Your own Messages, email, share and print. Invitations are worded by Leash but sent by you from your own phone. Invoice PDFs are made on the phone and handed to whichever app or printer you pick. Leash itself sends nothing.
• Text codes. Signing in or confirming a mobile number with a code sent by text is not switched on yet. If it is switched on, your mobile number and the code will pass through a text message company, and this page will name it.

Nothing else is involved today. The app has no advertising, analytics, crash reporting or card payment service in it.

How long things are kept

Today nothing is removed automatically. Your account, pet profiles, messages, walk routes and invoices stay until they are deleted. The app has no button for removing any of these yet, apart from an invoice a provider has not sent. To have one removed, write to us.

A walk report that has been sent stays as it is. A sent invoice keeps its charges, but the provider can add one late fee to it if it stays unpaid for at least 30 days past its due date, and it is marked when the customer says they paid and when the provider confirms the payment.

How long photos, messages and other records are kept, and when they are removed, is still being settled. It goes here before Leash opens to the public.

What you can change or remove

You can change your own details in the app, and remove some things yourself, such as photos you added to your gallery, a vaccine record or your door code. The app does not have a button for deleting an account yet.

What you can remove today, and how to ask us to delete your account

This website

These public pages set no cookies and load nothing from other companies. The lettering and pictures come from this site itself. Like any website, the company that hosts it receives the technical details needed to send you a page, such as your internet address.

Still to come

The legal parts still have to be written with a lawyer: the company's legal name and address, how old you must be to use Leash, your rights where you live, and how changes to this page are announced.

Contact us

If you have a question about your information, write to us.

The address to write to goes here once the support email address is chosen.