Feed the Pup

Data & Compliance

Last updated July 2026

This page summarizes how Feed the Pup handles data at a technical level, for anyone who wants more detail than the Privacy Policy covers.

Where Data Lives

Your data is stored in a managed Postgres database (Supabase), with access controlled by row-level security policies scoped to your household. Dog photos are stored in a separate cloud storage bucket. Push notification tokens and timezone are stored on your profile so alerts can be delivered and timed correctly.

Access Controls

Database policies enforce that a household member can only read or write data belonging to their own household — there is no way for one household to query another's data through the app. Sensitive operations (like sending push notifications) run through server-side functions using elevated credentials that never reach your device.

Encryption

Data is encrypted in transit (HTTPS/TLS) between your device and our servers, and at rest on our database provider's infrastructure. Passwords are hashed, not stored in plain text.

Sub-processors

Supabase (database, auth, storage, backend functions), Expo (push delivery, app updates), Apple and Google (app distribution, platform push services). We don't use analytics or advertising SDKs that track you across other apps or websites.

Data Retention & Deletion

Data is retained while your account is active. Deleting your account (Settings → Delete My Account) permanently removes your profile immediately; if you were the last member of a household, that household's data is removed too. This action can't be undone.

Breach Notification

If we become aware of a security incident affecting your personal data, we'll notify affected users without undue delay, consistent with applicable law.

Contact

Questions about this page? Contact us or email support@feedthepup.com.