Privacy policy

Lapka · Molverine Corp · Version of 15 October 2026

This policy explains what data Lapka uses, what for, who we share it with and what you can do about it. It covers the iPhone and Android app and the site lapka.molverine.com. Some features below are opt-in or reach you later than others; the policy describes them all so it does not change every time one is switched on.

Who is responsible for your data

Molverine Corp is the controller. For any question or request about your data, write to privacy@molverine.com.

What data we use

• Account. You can use Lapka without an account: the app creates an anonymous one tied to your phone. If you sign in, we keep your email address and, when you sign in with Apple or Google, the identifier that provider gives us (and your name, if it shares it). With Apple you may hide your real address behind a relay address. There are no passwords.
• Your dog. What you tell us in onboarding and in the dog's profile: name, photo, breed, age or birth date, size, sex, weight, what you want to work on, how many minutes a day you have and the commands it already knows.
• Training. The lessons you do, when, and how they went; the progress, levels, badges, streaks and bones that follow from them.
• Mascot. If you create a cartoon mascot of your dog, the photo you choose and the images drawn from it.
• Care. Care events (vaccinations, treatments, vet visits) and the observation diary, with any photos you add to it.
• Questions to a dog trainer. The text of your questions, the details about your dog sent with them, and the trainer's answers.
• Family. If you share a dog with your family, who belongs to it and their role (owner or member).
• Subscription. Which plan is active, until when, its trial and renewal state, and the promo codes you redeemed. We do not receive your card details: payments are processed by Apple or Google.
• Device. An identifier of the installation, the token used to send you notifications, platform and app version, language, time zone and the country derived from your connection (two letters; we do not keep your IP address).
• Consents. Which version of these documents you accepted and when, your choices about analytics, news and the use of your mascot in our social media, and the confirmation that you are 13 or older.
• Usage analytics, only if you allow it. Events such as "lesson completed" or "screen opened", linked to your account identifier, never to your email. Without your consent we keep only what is strictly necessary for the app to work and for purchases.
• Crash reports. When the app or our server fails: the technical error, device model and system version. They contain no email and no details about your dog.

What we use it for

• To make the app work: choosing today's lessons for your dog, keeping your progress, syncing between devices and family members, and signing in.
• To draw your dog's mascot, and to check that an uploaded photo shows a dog and nothing inappropriate.
• To send the reminders and notifications you turned on, and emails about your account.
• To provide paid plans: knowing whether you or your family have an active subscription, and answering your questions to a dog trainer.
• With your consent: news and offers by email or notification, product analytics, and showing your dog's mascot in our social media.
• To fix errors (crash reports), and for security: preventing abuse and making backups.

We do not use your data for advertising or profiling, we do not sell it, and we use no advertising, attribution or cross-app tracking tools. Analytics is stored on our own server, not with an analytics company. Your dog's photos are used only to provide the features you asked for, never to train AI models.

Why we are allowed to use it

Most of it is necessary to provide the service you asked for. Analytics, news and the use of your mascot in our social media depend on your consent, which you can withdraw at any time in the app (Account screen).

Who we share it with

Only with providers who process it on our behalf and for the stated purpose:

• Apple and Google: sign-in with their accounts, payments for subscriptions, and delivery of notifications (Apple Push Notification service, Google Firebase Cloud Messaging).
• RevenueCat, to manage subscriptions (receives your account identifier and the state of your purchases).
• Brevo, to send emails: sign-in codes, the trainer's answers and, if you agreed, news (receives your email address and the text of the email).
• An image generation service (fal.ai, with OpenAI as a backup) and an image moderation service, to draw the mascot and check photos (receive the photo, without your name or email).
• Cloudflare, to store photos, mascot images and encrypted backups.
• Sentry, to collect crash reports.
• Our server provider in the United States, where the data is stored.

The people in your family see the shared dog's profile, progress and streak, and each other's names or email addresses. The dog trainer who answers a question sees the question, the details about your dog sent with it and your email address. What you share from the app (a level card, your mascot) goes where you send it. We may hand over data if a competent authority requires it in accordance with the law.

Where it is stored

On a server in the United States that we administer ourselves, over encrypted connections. Some of the providers listed above also process data outside your country. By using the app, your data is transferred to those countries with the safeguards those providers offer.

For how long

• For as long as you have an account. When you delete it, your account, dogs, photos, mascot images, training history, care records, questions, family memberships, consents and analytics events are erased right away; we ask RevenueCat to erase its records within 30 days.
• The original photo used for a mascot is deleted within 30 days after the mascot is made, unless it is also your dog's profile photo.
• Analytics events are deleted after 400 days at the latest.
• Backups are kept for 14 days, so deleted data disappears from them within that time.
• Crash reports are kept for 90 days at most.
• Apple and Google keep their own purchase records under their own policies.

Your rights

You can access your data, correct it, receive a copy, object to its use and erase it. Most of it is done in the app: the dog's profile is editable, consents are changed and the account is deleted on the Account screen (Pet → Account). You can also delete your account as described at lapka.molverine.com/delete-account, or write to privacy@molverine.com for anything else, including a copy of your data. We answer within 30 days at most. If you disagree with our answer, you can turn to the data protection authority of your country.

Children

The app is for people aged 13 and over. We do not knowingly collect data from children under 13; if we learn that one created an account, we delete it.

Security

We use encrypted connections, sign-in without passwords, limits against repeated attempts and restricted access to the server. No system is perfect: if an incident affects your data, we will tell you.

Changes to this policy

If we change it, we publish the new version on this page with its date, and we tell you in the app when the change is important.