Privacy Policy
Last Updated: January 10, 2025
Effective Date: January 10, 2025
Data Controller:
Jan & Mark Solutions s.r.o.
Kouřimská 2242/21, Vinohrady
130 00 Praha, Czech Republic
IČO: 21285969
Email: support@doggyq.com
Data Box: ke9hczs
YOUR PRIVACY RIGHTS
This Privacy Policy explains how we collect, use, share, and protect your personal information. We are committed to GDPR compliance and protecting your privacy rights. You have the right to access, correct, delete, and export your data at any time.
1. Introduction
Jan & Mark Solutions s.r.o. ("we", "us", "our") operates the DoggyQ website and service ("Service"). This Privacy Policy describes how we collect, use, store, and protect your personal data in compliance with:
• EU General Data Protection Regulation (GDPR)
• Czech Act No. 110/2019 Coll. on Personal Data Processing
• ePrivacy Directive (Cookie Law)
• Other applicable data protection laws
2. Personal Data We Collect
2.1 Information You Provide
The breed you were matched to and the written reasoning, plus a random id for your browser and a checksum of the file you uploaded
So returning shows you the same breed instead of a new one, and to count your free match
The photo you choose for the breed match
Produce one breed resemblance, then discarded
Customer support, service improvement
2.2 Information Collected Automatically
Usage Data: Pages visited, features used, time spent
Device Data: IP address, browser type, device type, OS
Cookies: Session cookies, analytics cookies (see Cookie Policy)
Location Data: Country/region (inferred from IP for tax purposes)
2.3 Your Photograph — In Detail
A photograph of a face is personal data, so this is set out precisely rather than in general terms:
It is not stored. Your photo is never written to a database, never saved to file storage, and never written to our logs. It is held in server memory for the few seconds the match takes and then discarded. We cannot retrieve it afterwards, and neither can anyone else. What we do keep is the answer — the breed and the write-up — together with a random id for your browser and a checksum of the uploaded file. The checksum identifies a file, not a face: re-crop or re-save the same photo and it changes completely, and nothing about you can be recovered from it. It exists so that sending the same photo again returns the same breed rather than charging us for a second opinion.
It is sent to one processor. To produce the match, the photo is transmitted to Anthropic PBC (United States), which operates the AI model that reads it. That transfer is covered in section 5.
It is not used for training. Neither we nor Anthropic use your photo to train AI models.
No face recognition. We do not and cannot tell that two different photos are of the same person. The model is not asked, and is not able, to identify who you are. It compares visual features — hair, build, face shape, expression — against dog breeds. We do not generate or keep a biometric template, so we do not process biometric data for the purpose of unique identification within the meaning of GDPR Article 9.
Your legal basis is consent. Nothing is sent until you choose a photo and submit it. You can simply not use the matcher; the breed guides, comparisons and lists work without it.
Only your own photo, or an adult who agreed. Do not upload a photo of someone who has not agreed to it. The matcher refuses images where the subject appears to be a child.
IMPORTANT:
We take no payments and collect no payment data at all. There is nothing to buy on DoggyQ, so we never ask for card details and never see them. There are no user accounts either — no email address, name or password is required or collected to use any part of the service.
3. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
3.1 Consent (Art. 6(1)(a))
Your photograph is processed on the basis of your consent, given by choosing a photo and submitting it for a match. You can withhold that consent simply by not using the matcher, and because the photo is discarded immediately there is nothing left to withdraw consent over afterwards.
Consent is also the basis for non-essential analytics cookies (opt-in via the cookie banner) and for marketing email, if you ever ask us for it.
3.2 Legitimate Interest (Art. 6(1)(f))
Processing necessary for our legitimate business interests:
• Service improvement and development
• Fraud prevention and security
• Analytics and performance monitoring
• Business operations and administration
3.3 Contract Performance (Art. 6(1)(b))
If you email us for support, we process that correspondence in order to answer you.
3.4 Legal Obligation (Art. 6(1)(c))
Processing required to comply with legal obligations:
• Statutory accounting and record-keeping
• Court orders or regulatory requests
4. How We Use Your Personal Data
4.1 Service Provision
• Read your submitted photo once, to produce one breed resemblance, and then discard it
• Serve the breed guides, comparisons and lists
• Provide customer support
4.2 Service Improvement
• Analyze usage patterns (anonymized data)
• Improve and correct the published breed data
• Fix bugs and technical issues
• Develop new features
4.3 Security and Fraud Prevention
• Rate-limit the matcher to prevent abuse of it
• Monitor for security threats
• Enforce Terms of Service
• Prevent abuse and spam
4.4 Legal and Compliance
• Comply with legal obligations
• Respond to legal requests
• Protect our legal rights
• Keep statutory company records
4.5 Marketing (Opt-In Only)
IMPORTANT:
We will NEVER send you marketing emails without your explicit opt-in consent. You can unsubscribe at any time. Replies to your own support emails are not affected by marketing preferences.
5. How We Share Your Personal Data
We do NOT sell your personal data. We only share data with trusted third parties as described below:
5.1 Service Providers
Operates the AI model that reads your photo
Your photo, for the duration of the request only. Not stored by us. Not used to train AI models.
Hosts the public breed catalogue we publish
No personal data. It holds breed information only.
Anonymized usage data, demographics
5.2 International Data Transfers
Some of our service providers are located in the United States. We ensure adequate protection through:
• Standard Contractual Clauses (SCCs) approved by EU Commission
• Each provider's own published security and compliance programme
• Encryption in transit
• For your photo, the shortest possible exposure: it is transmitted for a single request and never written to disk by us
5.3 Legal Requirements
We may disclose your data if required by law, court order, or to:
• Comply with legal obligations
• Protect our legal rights
• Prevent fraud or illegal activity
• Protect safety of users or public
5.4 Business Transfers
If we are acquired or merge with another company, your data may be transferred to the new entity, subject to this Privacy Policy.
6. Data Retention
Not retained. Held in memory for the few seconds of the request, then discarded.
There is no reason to keep it once the match is returned
Not retained. It exists in your browser until you close the page.
We keep no record of individual results
After retention periods expire, we securely delete or anonymize your data.
7. Your Rights Under GDPR
YOU HAVE THE FOLLOWING RIGHTS:
These rights are free of charge and can be exercised at any time by contacting support@doggyq.com. We will respond within 30 days.
7.1 Right to Access (Art. 15)
You have the right to request a copy of all personal data we hold about you. We will provide it in a commonly used electronic format (JSON).
How to exercise: email support@doggyq.com. In practice there is very little to send: we hold no account for you, and your photo and your match were discarded at the time.
7.2 Right to Rectification (Art. 16)
You have the right to correct inaccurate or incomplete personal data.
How to exercise: email support@doggyq.com
7.3 Right to Erasure / "Right to be Forgotten" (Art. 17)
You have the right to request deletion of your personal data when:
• Data no longer necessary for original purpose
• You withdraw consent (for consent-based processing)
• You object to processing (legitimate interest basis)
• Data processed unlawfully
Exceptions: We may retain data if required by law or to defend legal claims.
How to exercise: email support@doggyq.com. There is no account to delete, and your photo was already discarded.
7.4 Right to Data Portability (Art. 20)
You have the right to receive your data in a structured, commonly used format and transmit it to another service.
How to exercise: email support@doggyq.com. We hold no stored profile to export.
7.5 Right to Object (Art. 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
How to exercise: Email support@doggyq.com or unsubscribe from marketing emails
7.6 Right to Restrict Processing (Art. 18)
You have the right to request restriction of processing in certain circumstances (e.g., while we verify accuracy of data you contested).
7.7 Right to Withdraw Consent
For consent-based processing (marketing, cookies), you can withdraw consent at any time without affecting lawfulness of prior processing.
7.8 Right to Lodge a Complaint
If you believe we violate GDPR, you have the right to lodge a complaint with your local data protection authority:
Czech Republic:
Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27
170 00 Praha 7
Website: www.uoou.cz
Email: posta@uoou.cz
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
8.1 Technical Measures
Encryption: TLS/SSL for data in transit, AES-256 for data at rest
Authentication: Secure password hashing (bcrypt), optional 2FA
Access Controls: Role-based access, principle of least privilege
Monitoring: Security logs, intrusion detection
Backups: Encrypted, geographically distributed
8.2 Organizational Measures
• Regular security audits and updates
• Data processing agreements with third parties
• Employee training on data protection
• Incident response procedures
8.3 Data Breach Notification
In case of a data breach likely to result in high risk to your rights, we will:
• Notify the supervisory authority within 72 hours
• Notify affected users without undue delay
• Provide information on measures taken
IMPORTANT:
No security is 100% guaranteed. While we implement industry best practices, you are responsible for keeping your password secure and logging out of shared devices.
9. Cookies and Tracking
We use cookies and similar technologies. See our Cookie Policy for detailed information. Key points:
9.1 Essential Cookies (No Consent Required)
• Authentication and session management
• Security and fraud prevention
• Load balancing
9.2 Analytics Cookies (Consent Required)
• Google Analytics (anonymized IP)
• Usage statistics and performance monitoring
You can manage cookie preferences in our cookie banner or browser settings.
10. Children's Privacy
DoggyQ is NOT intended for children under 16 years old. We do not knowingly collect personal data from children. If we discover we have collected data from a child, we will delete it immediately.
Parents/guardians who believe we may have collected data from a child should contact support@doggyq.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified via:
• Email to registered users
• Prominent notice on the website
• Update to "Last Updated" date
Continued use after changes constitutes acceptance. If you don't agree, stop using the Service and contact us to delete your data.
12. Contact Information
For questions about this Privacy Policy or to exercise your rights:
Data Controller:
Jan & Mark Solutions s.r.o.
Kouřimská 2242/21, Vinohrady
130 00 Praha, Czech Republic
IČO: 21285969
Privacy Contact:
Email: support@doggyq.com
Data Box: ke9hczs
Response Time: Within 30 days