Privacy Policy

Company & Controller

Amazing Animal Minds Sweden AB (“AAM”), reg. no. 559500-5736, fanstavägen 23, 75550 Uppsala, Sweden, is the data controller responsible for the processing of personal data described in this Privacy Notice. [confirm operating entity for the HPA app.]

Contact (support): info@amazinganimalminds.com

Contact (privacy): info@amazinganimalminds.com

Data Protection Officer: Not appointed. Contact info@amazinganimalminds.com for privacy matters.

In-App Data Sharing Notice

When you connect a trainer, your dog's assessment data — questionnaire answers, the computed behavioural profile (scores, driver indications, attachment-style indication and signal flags), any professional notes, and the dog details you enter — will be shared so the trainer can provide coaching. Your trainer acts as an independent controller and is responsible for their own privacy notice, lawful basis, retention, and security. In addition, the controller of the app (Amazing Animal Minds Sweden AB) can view your account and assessment data as described below. You can disconnect a trainer at any time in Settings → Data sharing.

What we collect

Account: name, email, password hash, and role (owner, trainer, or admin).

Dog profile: dog name, birth year, breed type, sex, neutered status, weight class, and any medical history you choose to provide.

Assessment data: your answers to the behavioural questionnaires (responses on 1–5 scales), follow-up answers (for example, indicated body area of discomfort and whether it has been examined by a vet), assessment status and dates.

Computed profile data: per-dimension raw scores, standardised (z-)scores and categories, identified behavioural drivers, signal flags (for example pain-suspected or elevated-risk indicators), attachment-style indication, and generated explanatory text.

Professional notes: notes and feedback added by a connected trainer or by admin in relation to the dog.

Device/usage: IP address, device information, diagnostics.

Payments (if applicable): transaction metadata processed by our payment provider.

Why we process your data & legal bases

Provide the app and core features (create account, run questionnaires, store responses, show your dog's profile and progress): Contract (Art. 6(1)(b)).

Generate the automated behavioural profile (calculate scores, driver indications, attachment-style indication and signal flags): Contract (Art. 6(1)(b)) — this processing is necessary to deliver the assessment service you signed up for. See “Automated behavioural analysis” below.

Share your data with a trainer you connect: Consent (Art. 6(1)(a)). Optional and can be withdrawn any time in Settings → Data sharing. The trainer then acts as an independent controller and must inform you about their processing.

Access by the controller (admin): Authorised staff of AAM may access account and assessment data solely where necessary for defined purposes — technical support, system maintenance, quality assurance, safeguarding platform integrity, and compliance with legal obligations. Such access is role-based, limited to what is necessary, and subject to confidentiality and security measures. Legal bases: Legitimate interests (Art. 6(1)(f)) and, where relevant, Legal obligation (Art. 6(1)(c)).

Service communications, security, fraud prevention and support: Legitimate interests (Art. 6(1)(f)). A balancing test is available on request.

Analytics (non-essential) and product improvement: Consent. Non-essential cookies/SDKs are off by default until you opt in.

Marketing emails (optional): Consent; unsubscribe any time.

Automated behavioural analysis & profiling

The Service automatically analyses your questionnaire answers to produce your dog's behavioural profile: per-dimension scores, an indication of likely underlying drivers, an attachment-style indication, and signal flags (which may include indications of possible pain or of elevated aggression or bite risk). This is a form of automated processing (profiling) relating to your dog.

This analysis is decision-support: results are presented to you and, where you have connected a trainer, to that trainer, for human interpretation. It does not produce legal or similarly significant effects on you as a person, and we do not make solely automated decisions of that kind about you.

Important: the profile and any signal flags are indicative only and are not a veterinary or clinical diagnosis. If the Service indicates possible pain or a health concern, please consult a veterinarian.

Recipients

Your chosen trainer (independent controller): we disclose your dog's assessment data after you opt in, so the trainer can view it and communicate with you in the app.

Vendors (processors): hosting, email delivery, analytics (opt-in), and payments. A current list with locations and safeguards is maintained in Appendix A.

Trainer data processing

When you connect a trainer, that trainer processes your personal data as an independent data controller for the purpose of providing coaching services. Amazing Animal Minds Sweden AB is not responsible for the trainer's data-processing activities, privacy notice, or legal compliance beyond the technical sharing initiated at your request.

International transfers

We prefer EEA hosting. Where personal data is transferred outside the EU/EEA (for example to US payment or infrastructure providers), we ensure appropriate safeguards under Chapter V of the GDPR, including the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions such as the EU–US Data Privacy Framework. We assess and document transfer-related risks and apply supplementary technical and organisational measures where required.

Retention

Account and assessment data are stored while your account is active and for 24 months after last activity, unless you delete earlier or the law requires longer. Support and security logs are kept for 12–24 months. You can delete assessments and your account at any time; on account deletion, personal data is deleted as described here. [confirm exact deletion windows and any statutory retention with your lawyer.]

Your rights

You can request access, correction, deletion, restriction, portability, and object (where applicable). Where we rely on consent, you can withdraw it in Settings; withdrawal does not affect the lawfulness of processing carried out before withdrawal. You can complain to the Swedish Authority for Privacy Protection (IMY). We provide a link in Settings → Privacy.

Third-party services

We use Supabase for authentication and data storage and Lovable for application hosting and email delivery.

Cookies

We use essential cookies to provide our Service. Non-essential cookies/SDKs (for example analytics) are off by default until you opt in. For more information, see our Cookie Policy.

Personal data breaches

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with Article 34 of the GDPR.

Children

The Service is intended for adults (minimum 18 years). Where a user is under the applicable age, a parent or legal guardian must consent to account creation and to any sharing of data with a trainer. Parents or guardians are responsible for supervising the child's use of the Service and for the accuracy of the information provided.

Automated decision-making

We do not use solely automated decisions that produce legal or similarly significant effects on you as a person. The automated behavioural analysis of your dog is described above under “Automated behavioural analysis & profiling” and is used as decision-support.

Changes

We will notify you of material changes in advance in-app and by email (where appropriate).

Appendix A – Processors (to be maintained in product)

• Hosting / database: Supabase (EU region) [confirm]
• Application hosting & email delivery: Lovable (notify.amazinganimalminds.com) [confirm region]
• Analytics (opt-in): [provider, if used]
• Payments (if applicable): Stripe & ThriveCart (USA) [confirm]