Mooki App ("Mooki", "we", "us") is operated by Lilit Arutyunyan, a sole trader based in Lisbon, Portugal. We are the data controller for personal data processed through this app.
Contact: hello@mookiapp.com
We collect only what is needed to provide the service.
Account data
Email address and password (hashed — we never see your plain-text password).
Legal basis: contract (Article 6(1)(b) GDPR) — you need an account to use the app.
Dog profile data
Dog name, breed, sex, birthdate, weight, country, microchip number, acquisition type, adoption date, photo.
Legal basis: contract — the core features of the app depend on this data.
Life event and health data
Health events you log (vaccines, vet visits, treatments), life moments, notes, dates, photos attached to events.
Legal basis: contract.
Weight logs
Weight entries you record over time.
Legal basis: contract.
Push notification tokens
FCM (Android) or APNs (iOS) device token, stored alongside your user ID and platform type. Used only to send you reminders you have requested (vaccine due dates, medicine dose reminders).
Legal basis: consent — you grant notification permission through your device OS.
Technical data
We do not collect IP addresses, device fingerprints, or behavioural analytics data beyond what Supabase logs at the infrastructure level for security purposes.
All data is stored in Supabase (supabase.com), our database and storage provider. Supabase acts as a data processor on our behalf under a Data Processing Agreement.
Dog photos and life event photos are stored in Supabase Storage in a public-access bucket. This means photo URLs, if shared or guessed, are accessible without authentication. We recommend not uploading photos you consider sensitive.
We do not use any advertising networks, marketing trackers, or analytics SDKs that receive your personal data.
We do not sell your data. We do not share your data with third parties for advertising or marketing purposes.
Sub-processors we use:
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | EU (AWS eu-west) |
| Google Firebase | Push notification delivery (FCM) | Google Cloud |
| Vercel, Inc. | App hosting and delivery | Global CDN |
We may disclose data if required by law or to comply with a valid legal request.
| Data type | Retention |
|---|---|
| Account and all associated data | Deleted on account deletion |
| Dog profile, health events, photos | Deleted on account deletion |
| Push notification tokens | Deleted on account deletion |
| Inactive accounts (no login for 2 years) | Warning email sent; account deleted 30 days later if no response |
When you delete your account (Settings → Delete Account), we permanently delete your dog's profile, all records, all attached photos, your authentication record, and your push notification tokens. Deletion is irreversible.
Under the GDPR you have the right to:
To exercise any of these rights, email hello@mookiapp.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD: www.cnpd.pt
Mooki App is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact us at hello@mookiapp.com and we will delete the account promptly.
We use HTTPS/TLS for all data in transit. Supabase uses row-level security policies so users can only access their own data. Passwords are hashed by Supabase Auth and never stored in plain text.
If you become aware of a security issue, please contact hello@mookiapp.com.
We will notify registered users by email if we make material changes to this policy. The "last updated" date at the top of this page will always reflect the most recent version.
Lilit Arutyunyan
hello@mookiapp.com
Lisbon, Portugal