CollarIQ, Inc. ("CollarIQ", "we", "us") builds AI-powered smart collars and the connected software that powers them. We believe great products come from great trust — so this Privacy Policy explains, in plain language, what data we collect, why we collect it, who we share it with, and the rights you have. This policy applies to collariq.pet, the CollarIQ mobile and web apps, the CollarIQ collar device, and any related services (together, the "Services").
1. Information We Collect
1.1 Information you give us
- Account: name, email address, password (stored as a salted hash), phone number, and optional emergency contacts.
- Pet profile: your dog's name, breed, sex, date of birth, weight, photo, and any health notes you choose to add.
- Billing: billing address and the last four digits of your payment card. Full card numbers are processed by our PCI-DSS Level 1 payment processors (Shopify Payments, Stripe) and never touch our servers.
- Communications: support tickets, chat transcripts, survey responses, and reviews.
1.2 Information from the collar and app
- Location: GPS, GLONASS, Galileo, and BeiDou positions, Wi-Fi access point identifiers used for indoor positioning, and approximate cell-tower location.
- Sensor data: accelerometer, gyroscope, ambient temperature, skin temperature, heart-rate-variability proxies, and short on-device audio snippets used by our bark-detection model. Raw audio is processed on-device; only event labels and timestamps leave the collar.
- Device telemetry: battery level, firmware version, signal strength, and diagnostic events.
- App usage: screens viewed, features used, crash logs, and performance metrics (anonymized and aggregated where possible).
1.3 Information from third parties
- Authentication providers (Apple, Google) if you choose social sign-in.
- Shipping carriers for order tracking.
- Veterinary partners, only when you explicitly link your account.
2. How We Use Your Data
- Operate the Services: show live location, deliver health insights, send alerts, and recover lost dogs.
- Improve our AI models for behavior, activity, and health detection. Where possible we train on de-identified and aggregated data; you can opt out in Settings → Privacy → ML training.
- Customer support and warranty service.
- Safety and fraud prevention, including detecting account takeovers.
- Communications: transactional emails are required; marketing emails are opt-in and you can unsubscribe at any time.
- Legal compliance, including responding to lawful requests from authorities.
3. Legal Bases (EEA / UK Users)
We process personal data under the following legal bases of the GDPR: (a) performance of a contract to operate the Services you bought; (b) legitimate interests to improve our products and prevent fraud; (c) consent for marketing and certain analytics; and (d) legal obligation when required by law.
4. How We Share Data
We do not sell your personal information and we do not share it with advertisers for cross-context behavioral advertising. We share limited data with:
- Sub-processors who run our infrastructure: cloud hosting (AWS, Cloudflare), analytics (PostHog), email (Postmark), payments (Shopify, Stripe), and shipping carriers. Each is bound by a Data Processing Agreement.
- Family members you invite to your dog's profile.
- Veterinarians or trainers you explicitly share data with.
- Authorities in response to valid legal process, or to protect rights, safety, and property.
- Acquirers in the event of a merger, acquisition, or asset sale, with notice to you.
5. International Transfers
We store data primarily in the United States and the European Union. Transfers out of the EEA/UK rely on the European Commission's Standard Contractual Clauses and, where applicable, supplementary measures.
6. Data Retention
We retain account data while your account is active and for up to 24 months after deactivation for legal and accounting reasons. Location history is retained for 12 months by default and can be reduced in Settings. Anonymized, aggregated data may be retained indefinitely for product analytics.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Export your data in a portable format.
- Restrict or object to certain processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data-protection authority.
Exercise any of these rights from Settings → Privacy, or email privacy@collariq.pet. We respond within 30 days.
8. Security
We use TLS 1.3 in transit, AES-256 encryption at rest, hardware-backed key storage, role-based access controls, mandatory MFA for employees, quarterly third-party penetration testing, and a 24/7 on-call security team. We maintain a SOC 2 Type II report, available under NDA on request. No system is 100% secure; we'll notify affected users of a material breach as required by law.
9. Children
CollarIQ is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA). If you believe a child has provided us data, contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in-app and by email at least 30 days before they take effect.
11. Contact
CollarIQ, Inc.
548 Market St #71234, San Francisco, CA 94104, USA
Email: privacy@collariq.pet
EU representative: CollarIQ Europe B.V., Herengracht 282, 1016 BX Amsterdam.