Privacy policy

1. Who is responsible

The controller for the processing of personal data on this website and in the Naylo app is:

Talea Labs GbR Nelly-Sachs-Str. 24 73760 Ostfildern Germany

Email: [email protected] Telephone: +49 711 2551 9135

2. This website

Visiting the pages

The site is static and runs on Cloudflare Pages. When it is requested, the server processes technically necessary data — IP address, time, requested address, volume of data transferred, browser and operating system identifiers. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in secure and trouble-free operation.

Fonts and icons

All fonts and icons sit on our own server. No request goes to Google Fonts or any other third-party network. Your IP address is therefore not transmitted to anyone in the process.

Measurement

We measure the use of this site only if you explicitly agree in the notice at the bottom. Without your consent, no analytics script is loaded and no corresponding cookie is set. The legal basis is your consent under Art. 6 (1) (a) GDPR and section 25 (1) TDDDG. You can withdraw it at any time through the Cookie settings entry in the footer — withdrawal switches measurement off immediately and deletes the cookies that were set. It therefore costs exactly as little as giving consent. Independently of that, consent once given is valid for one year only; after that we ask again.

If you agree, we use Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Only when you click does your browser load the script from googletagmanager.com and set the cookies _ga and _ga_LHM1ZHHYQL with a lifetime of two years. What is collected is the pages visited, the approximate origin, the device type and the page you came from; your IP address is truncated in the process and not stored.

We evaluate this in order to see which pages get read — and nothing else. We use the data neither for advertising nor for profiles across other websites, and we do not combine it with the data from your Naylo account. Google may also process the data in the USA; the basis for this is the EU-US Data Privacy Framework, supplemented by the standard contractual clauses under Art. 46 GDPR.

Exactly which cookies are set is listed with name, purpose and lifetime in the cookie policy.

Forms

If you write to us through the contact form or the waiting list, we process the details you provide — at minimum your email address, plus your name and message if you choose. We use them solely to reply to you or to inform you once about the app’s launch.

Transmission runs through HubSpot (HubSpot Ireland Limited, EU data centre) as a processor. We deliberately do not embed HubSpot’s form script — it would set a tracking cookie. Instead the input goes straight to the forms API; no cookie is set and no third-party script is loaded.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (a) GDPR for the waiting list.

3. The Naylo app

Which data we collect

• Email address and display name on registration
• Profile picture, if you upload one
• Details about your dog: name, breed, sex, date of birth, weight, photo
• Activity logs: pees, poos, meals, walks, each with the time and the person who made the entry
• Health data about the dog, if you record it: medication, vet appointments, vaccinations, season cycles, weight history
• Technical log data from operating the service

All details about the animal are voluntary; without them the corresponding sections do not work.

What for

Solely to operate the app: to synchronise your household, to display histories and — once they exist — to remind you of what is due. The legal basis is Art. 6 (1) (b) GDPR (performance of the usage contract).

What others in the pack see

Anyone who belongs to your household via the invitation code sees all of that household’s entries — including your display name on the entries you made. That is precisely the purpose of the app. So only pass the invitation code to people you want to give that insight to.

Where the data is held

The data is held in Google’s Firebase infrastructure (Cloud Firestore, Firebase Authentication, Firebase Storage). Google Ireland Limited and Google LLC act as processors in this; for transfers to the USA the EU-US Data Privacy Framework applies.

Purchases

Naylo Premium is billed through the App Store or Google Play. The payment data is processed by Apple and Google, not by us — all we learn is whether an active Premium exists for your household. To manage purchase states we use RevenueCat (RevenueCat, Inc.) as a processor.

Advertising and disclosure

We do not sell data and we do not run advertising. Disclosure to third parties takes place solely within the scope of the processing arrangements named above.

4. How long we store data

For as long as your account exists. If you delete it, the associated data is deleted. Statutory retention periods — tax-related ones for purchase records, for instance — remain unaffected.

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent you have given at any time with effect for the future.

You can remove your account and the data associated with it directly in the app under Profile → Delete account. The deletion is irreversible.

For everything else, write to [email protected].

6. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

7. Changes

We adapt this statement when the processing changes. We will notify you of material changes to the app inside the app.