Privacy policy
Last updated: July 2026
1. Who processes your data
The data controller is Tomáš Štorc, Company ID (IČO) 09058729, registered at Breitfeldova 709/13, 186 00 Prague 8 – Karlín, Czech Republic, operator of the PsíKruh project. Contact: tomas.storc@psikruh.cz.
2. What this policy covers
This policy covers both the psikruh.cz website and the PsíKruh mobile app, currently in beta testing via TestFlight.
3. What we process on the website
Waitlist: your email address and, optionally, your Prague district and your dog's age bracket. The purpose is to let you know when the app launches in your district and to plan the district-by-district rollout. The legal basis is your consent, given by ticking the checkbox in the form and confirmed by clicking the link in the confirmation email (double opt-in).
Dog-life survey: responses are anonymous. We only process your email address if you volunteer it so we can contact you — the legal basis is your consent.
Trainer form: your email address and city, so we can reach out when we start onboarding trainers. The legal basis is your consent.
This website is cookieless: we use no cookies or other tracking technologies requiring consent.
4. What we process in the app
Account: your email address, display name, optional profile photo and language. Passwords are stored only as a cryptographic hash; with Sign in with Apple we hold no password at all.
Location: your home area is stored deliberately blurred to a roughly 500-metre grid — we never store your exact location. We also store the radius you want to search for dog buddies in.
Dog profiles: name, breed, birthdate, sex, weight, photos, temperament traits, training goals and the health records you keep yourself (e.g. vaccinations).
Matching and meetups: buddy requests, meetup proposals and history, and your post-meetup evaluations including any safety incident reports.
Communication: chat messages with users you are matched with.
Notifications: your device push token, if you enable notifications. You can turn them off anytime in the app settings.
The legal bases are performance of a contract (providing the service under the terms of use), our legitimate interest in community safety and moderation (blocking users, handling incidents), and consent where you give it (e.g. notifications).
5. Who helps us (processors)
Microsoft Azure, EU region (Sweden): backend, database and photo storage. The website runs on Azure Static Web Apps.
Azure Communication Services, EU region (Germany): sending emails from noreply@psikruh.cz (confirmations, address verification).
Azure AI Foundry (Microsoft, EU): generating training programs, meetup scripts and compatibility overviews. AI services receive only dog data (temperament, age, size, training goals) — never your contact details or chat messages. The one exception is feature-request texts you send us yourself: their wording is processed by AI for summarisation.
Apple: Sign in with Apple, push notification delivery (APNs) and app distribution (TestFlight / App Store).
We use no analytics — neither on the website nor in the app. If we ever add any, it will be a cookieless, EU-hosted solution and we will update this policy.
6. How long we keep your data
Waitlist: until the app launches in your district, at most 24 months from signup, or until you withdraw consent. Unconfirmed signups (no click on the confirmation link) are deleted within 30 days.
Account and app data: for as long as your account exists. You can delete your account anytime directly in the app (Settings), and we then delete your data.
7. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability, object to processing, and withdraw consent at any time. You can download a copy of your data directly in the app (Settings → data export) and delete your account there too. For anything else, write to tomas.storc@psikruh.cz or click the unsubscribe link in any of our emails. You can also contact the Czech Office for Personal Data Protection (uoou.gov.cz).
8. Transfers outside the EU
We process data primarily in the EU. Apple services (Sign in with Apple, push notifications) may process data in the US — this happens under the EU-U.S. Data Privacy Framework and standard contractual clauses.
