Privacy Policy

Introduction

Welcome to Decrepit Sunflower Studio ("we," "our," or "us"). We develop mobile applications, including NoxTrainer, designed to help you manage your pets and household data efficiently.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our applications and services. We take your privacy seriously and are committed to transparency about our data practices.

Information We Collect

Information You Provide Directly

When you use our applications, you may provide us with the following information:

• Account Information: Email address, display name, password (encrypted), and profile photo
• Pet Information: Pet names, breeds, ages, behavioral data, training logs, and relationship mappings
• Household Data: Household member names, email addresses for invitations, and shared access permissions
• Training Logs: Timestamps, behavior types, notes, weather conditions, and location data (if enabled)
• User-Generated Content: Notes, comments, and any other content you create within the app

Information Collected Automatically

We automatically collect certain technical information when you use our services:

• Device Information: Device type, operating system version, unique device identifiers, mobile network information
• Usage Data: App features used, session duration, crash reports, performance metrics
• Location Data: Approximate location (for weather integration) only if you grant permission
• Analytics Data: Aggregated usage statistics to improve app functionality

Information from Third-Party Services

• Google Sign-In: If you authenticate with Google, we receive your email address, name, and profile picture
• Weather Services: We use your approximate location to fetch weather data for smart reminders

How We Use Your Information

We use the information we collect for the following purposes:

Core Service Functionality

• Create and manage your user account
• Store and sync your pet training data across devices
• Enable household sharing and collaboration features
• Generate reports and analytics about your pets' behavior
• Provide smart reminders based on weather and historical patterns

Communication

• Send transactional emails (account verification, password resets, invite notifications)
• Respond to your support requests and inquiries
• Send important service announcements and updates (you can opt out of non-essential communications)

Service Improvement

• Analyze usage patterns to improve app features and performance
• Debug technical issues and crashes
• Conduct research and development for new features
• Ensure security and prevent fraud or abuse

Legal Compliance

• Comply with applicable laws and regulations
• Enforce our Terms of Service
• Protect our rights, property, and safety, and that of our users

Data Storage & Security

Where We Store Your Data

Your data is stored using Google Firebase infrastructure, which includes:

• Firebase Authentication: Securely manages user accounts and authentication tokens
• Cloud Firestore: Stores your pet data, training logs, and household information
• Firebase Storage: Stores profile photos and any uploaded images

Firebase data centers are located in the United States and comply with industry-standard security practices.

Security Measures

We implement multiple layers of security to protect your information:

• Encryption in Transit: All data transmitted between your device and our servers uses TLS/SSL encryption
• Encryption at Rest: Data stored in Firebase is encrypted using AES-256 encryption
• Access Controls: Strict database security rules ensure users can only access their own household data
• Authentication: Passwords are hashed using industry-standard bcrypt algorithms
• Regular Audits: We conduct regular security reviews and updates

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Active Accounts: Data is retained indefinitely while your account is active
• Deleted Accounts: Upon account deletion, your data is permanently removed within 30 days
• Backup Data: Backup copies are purged within 90 days of account deletion
• Legal Requirements: We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention)

Third-Party Services

We use the following third-party services to operate our applications:

Firebase (Google Cloud)

Purpose: Backend infrastructure, authentication, database, storage, and analytics

Data Shared: All user data, device information, usage analytics

Privacy Policy: firebase.google.com/support/privacy

SendGrid (Twilio)

Purpose: Transactional email delivery (account verification, invitations, notifications)

Data Shared: Email addresses, display names, email content

Privacy Policy: twilio.com/legal/privacy

Weather Data Providers

Purpose: Fetch weather conditions for smart reminders

Data Shared: Approximate location coordinates (latitude/longitude)

Note: We do not share personally identifiable information with weather services

Google Play Services

Purpose: App distribution, in-app purchases, crash reporting

Data Shared: Device information, purchase history, crash logs

Privacy Policy: policies.google.com/privacy

Data Sharing & Disclosure

We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Period.

When We Share Data

We may share your information only in the following limited circumstances:

• Within Your Household: Data you create is shared with household members you explicitly invite
• Service Providers: We share data with third-party services (listed above) necessary to operate our applications
• Legal Obligations: We may disclose data if required by law, court order, or government request
• Business Transfers: If we are acquired or merged, your data may be transferred to the new entity (you will be notified)
• Protection of Rights: We may disclose data to protect our rights, property, safety, or that of our users
• With Your Consent: We may share data for other purposes with your explicit consent

Aggregated & Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or analytics purposes. For example: "NoxTrainer users logged 1 million potty breaks this month."

Your Privacy Rights

You have the following rights regarding your personal data:

Access & Portability

• Right to Access: You can view all your data within the app at any time
• Right to Export: You can export your data in machine-readable formats (CSV, JSON) from the app settings

Correction & Deletion

• Right to Rectify: You can edit your profile, pet information, and training logs directly in the app
• Right to Delete: You can delete your account and all associated data from the app settings. Deletion is permanent and cannot be undone.

Control & Consent

• Right to Opt-Out: You can opt out of non-essential emails and analytics tracking
• Right to Withdraw Consent: You can revoke permissions (e.g., location access) at any time through your device settings
• Right to Object: You can object to certain data processing activities by contacting us

GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to restriction of processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to deletion
• Right to non-discrimination for exercising your rights

Children's Privacy

Our services are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@decrepitsunflower.com. We will delete such information promptly.

Note: While NoxTrainer is designed for pet management (not child-related), we maintain strict age requirements for account creation.

International Data Transfers

Our services are operated from the United States, and our infrastructure (Firebase) is primarily located in U.S. data centers. If you access our services from outside the United States, your data will be transferred to, stored, and processed in the United States.

The United States may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your data to the United States.

For users in the EEA, we rely on the following legal mechanisms for data transfers:

• Standard Contractual Clauses approved by the European Commission
• Google's compliance with EU-U.S. Data Privacy Framework

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you via email or in-app notification
• Continued use of our services after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days. For urgent privacy concerns, please mark your email as "URGENT: Privacy Request."