Privacy Notice
Effective October 24, 2026
Bayly Hardware LTD, operating as Good Harbor Pet (“Good Harbor Pet,” “we,” “us”), operates pupID. This notice explains what information we handle, why we use it, and the choices available to you.
Information we handle
- Account and breeder profile information, such as your name, email, kennel name, phone number, and business address when provided.
- Branding content you provide, including logos, your story, design choices, optional AI instructions, and the suggestions or artwork generated for your account.
- Support communications, including the contact information and message or call details you choose to provide when asking for help.
- Animal and litter records, including identity, breeding, weight, treatment, vaccination, microchip, health-event, and care information you choose to enter.
- Optional contact information you enter for another breeder who owns an outside stud, such as a contact name, kennel or business, email, and phone number.
- Private documents and images you photograph or upload, and the records you create.
- Spoken or typed care instructions you choose to submit through conversational care entry.
- Purchase and transaction records. Payment card details are handled by Stripe and are not stored by pupID.
- Technical, security, diagnostic, and usage information, including device or browser information, log events, and referral information. Our first-party monitoring counts public-page visits, printable-tool use, account and first-use milestones, and limited application-error categories. Acquisition counts use broad source categories, such as search or social referrals, with a 30-day browser attribution window. These events exclude names, record identifiers, page addresses, raw referral addresses, form contents, error messages, and session recordings. The added acquisition measurement honors browser Do Not Track and Global Privacy Control signals when available. Additional analytics and error-monitoring tools operate only when configured.
How we use information
We use information to provide and secure pupID; organize private breeder records; create the public or transferable puppy materials you direct us to create; process purchases; send service communications; prevent abuse; troubleshoot; measure product use; and comply with legal obligations.
Optional usage analytics
When enabled and you turn it on, we use PostHog in the United States to understand how people find pupID, reach their first useful actions, purchase credits and return to use the product. This optional measurement uses a random browser identifier and, after sign-in, a pseudonymous account identifier to connect activity across your devices. It includes broad page categories, non-personal campaign labels, public article identifiers, the web or iOS platform, completed product actions and confirmed purchase amounts and credit quantities.
Optional analytics excludes names, email addresses, puppy and litter identifiers, health values, documents, photos, family contacts, conversation text, raw page or referral addresses, and payment card details. Session recordings, automatic click and form capture, console and network capture, advertising identifiers and cross-company advertising tracking are disabled. Browser Do Not Track and Global Privacy Control signals suppress this optional measurement.
You can decline optional analytics and continue using pupID. Change your choice here or in Account → Privacy & data. Declining stops new optional collection on this browser and, when you are signed in and the preference is saved, for your account’s server-side actions. Analytics already received may remain until its retention period expires; contact support for a deletion request.
AI help and your permission
AI help is one choice that covers the two pupID features that use outside AI companies: AID, the care assistant, which uses OpenAI and Google (including AID photo reading), and Brand Studio's optional writing and artwork help, which uses Google. pupID asks before either feature shares anything: once when you start using pupID, and again when you open AID or ask Brand Studio for writing or artwork help while AI help is off. Nothing is sent to OpenAI or Google for these features until you choose Turn on AI help. If you choose Not now, nothing is sent, and the rest of pupID, including the ordinary care forms, works the same.
We keep your choice with your account, together with the date and the version of the notice you saw, so it applies on every device where you sign in. You can turn AI help off at any time in Account → Privacy & data. pupID then stops sending new requests to OpenAI and Google right away and asks again before sending anything. Information already sent remains subject to the provider retention described below. If what AI help shares changes in a material way, we ask again.
AID photo reading
When you ask the AID assistant to read a photo or document you saved, pupID sends that selected photo or page to Google Vertex AI in the United States so AID can suggest details for you to check, such as a product name, lot number, or expiration date. Suggestions are not saved until you choose to save them. Saving or uploading a photo or document does not, by itself, send it to an AI provider.
Google states that data sent through Vertex AI is not used to train or fine-tune its models. Under Google Cloud's standard abuse-monitoring terms, prompts flagged as suspicious may be retained for up to 90 days and may be reviewed by authorized Google personnel.
AID, the care assistant
AID works only after you turn on AI help, as described above. Saved care records and the ordinary care forms never depend on it.
Supported iPhone builds recognize speech on your device. Live unfinished words are provisional; only completed recognized text is sent to the care-understanding services described below. This native path does not upload microphone recordings. If on-device recognition is unavailable or permission is denied, you can type instead.
Web clip-based voice entry sends completed recordings and puppy reference labels to Google Vertex AI in the United States for transcription. Depending on the enabled interpretation mode, Google may also interpret spoken or typed care instructions. Reference labels can include puppy names, working labels, collars, issued pupID codes, litter labels, dam names and litter birth dates. Care details may include measurements, products, dates, administrator names and notes. The microphone starts when you deliberately open the voice-first pupID conversation or choose Start talking. You can stop it or type instead. Clear, complete instructions save automatically through your signed-in account; incomplete or uncertain details remain pending until you resolve them. The conversation shows the recognized words and the care records or reminders actually saved.
pupID does not save recordings or conversation transcripts to its database or file storage. They remain in this tab's memory while the conversation is open. Normalized pending care entries, exact retry requests, and references to records saved in the conversation may be kept in account-bound browser session storage so a page reload can resume safely. Completed care records and planned reminders follow their ordinary visibility and deletion controls; this feature does not publish recordings or transcripts.
Google states that it will not use this data to train or fine-tune its models without our permission or instruction. Google may cache request data in memory for up to 24 hours. Under its standard abuse-monitoring terms, suspicious prompts may be retained for up to 90 days and reviewed by authorized Google personnel. See Google's data-use and retention guidance and abuse-monitoring guidance.
When OpenAI care understanding is enabled, pupID sends recognized or typed text, up to six short prior user messages, the current task and calendar context, and owned puppy reference labels to OpenAI's standard global API to propose care actions and allowed lookups. A Decisions check evaluates proposed facts against the supplied text. The older optional decision-check mode sends text and proposed categories for review. pupID checks access, validates authored facts and saves through its ordinary record tools. It formats lookup replies from your saved records; those results and assistant replies are not sent to OpenAI. OpenAI may process supplied text outside the United States. These features receive text rather than recordings and cannot supply missing care facts or directly save a record. OpenAI states that API data is not used for model training unless the customer opts in; its standard abuse-monitoring retention is up to 30 days. We do not claim that Zero Data Retention is enabled for this feature. See OpenAI's data controls.
Optional AI branding
Brand Studio's writing and artwork help works only after you turn on AI help, as described above. You can always edit your profile and design without it.
When you request help writing your breeder story, pupID sends the business name, section headings, section text, and extra notes you enter to Google Vertex AI. Separate contact fields, resource links, logos, and private animal records are not included in story requests. When you request AI design suggestions or companion artwork, we send a display copy of your selected logo, your design settings and instructions, and, for design suggestions, your entered business name. These requests do not automatically read your animal records or other private account content.
Branding AI uses Google's global endpoint, so requests may be processed in any Google Cloud location rather than being limited to the United States. Google states that it will not use this data to train or fine-tune its models without our permission or instruction. Google may cache request data in memory for up to 24 hours. Under its standard abuse-monitoring terms, suspicious prompts may be retained for up to 90 days and reviewed by authorized Google personnel. See Google's data-location guidance, data-use and retention guidance, and abuse-monitoring guidance.
Drafts, pending suggestions, and generation history remain private to your account. Only accepted profile content and artwork you deliberately publish are shared. You review suggestions before using them; AI does not verify your business claims or publish for you. You can edit your profile and use the color, layout, type, and text-logo tools without AI. Text-logo options are rendered in your browser and are not sent to an AI provider.
Service providers and disclosure
We use service providers to run pupID, including Google Cloud and Firebase for hosting, authentication, databases, file storage, optional conversational care entry, AID photo reading, and optional AI branding assistance; OpenAI when optional care understanding, interpretation checks or conversational record lookups are enabled; Stripe for payment processing; Shopify for store information; Resend for application email delivery; Purelymail for customer-support email; Telnyx for the customer-support phone line; and, when configured, PostHog and Sentry for product analytics and error monitoring. These providers process information for the services they supply under their own contractual and legal obligations.
We do not sell personal information. We may disclose information when you direct us to share it, to service providers, to protect pupID or others, in connection with a business transaction, or when required by law.
Visibility and your choices
Uploaded documents, images and PDFs remain private to the signed-in breeder account. Optional outside-stud contact information is also private to that account and is not included in the Dams & sires directory, puppy records, passports, family pages, exports, analytics, or AI features. Public puppy passports and transfers use separate product controls. Review what a passport or handoff will show before sharing it, and do not upload or enter information you are not authorized to use.
Retention and deletion
Unfinished uploads are kept for recovery for up to 48 hours and are then scheduled for deletion. Saved documents remain with the breeder account until deleted; breeder-deleted documents can remain in Trash for up to 30 days before permanent deletion. After account deletion, active application data is removed immediately. Firestore recovery copies expire within 14 weeks and deleted Storage object versions within 30 days. Those protected copies are access-restricted and used only for disaster recovery; limited processor security, payment, tax, or fraud-prevention records may remain where legally required.
Security, children, and international processing
We use access controls, authenticated private routes, server-side authorization, encryption provided by our infrastructure, and operational safeguards designed to protect records. No system can promise absolute security. pupID is intended for adults and is not directed to children under 13. Information may be processed in the United States and other places where our service providers operate.
Your requests
Signed-in breeders can permanently delete their account and associated active data from Account inside pupID. You may ask to access, correct, or export information associated with your account, subject to applicable law and records we must retain. If someone entered your contact information as an outside-stud owner, you may also ask us to locate, correct, or delete it. Contact pupID support. We may need to verify your identity before completing a request.
Changes to this notice
We may update this notice as pupID changes. We will post the updated effective date and explain material changes in the product before they apply.