Privacy Policy

Who we are

Controller: Barış Durmaz. Address: 9165/2 Sok. No:16 D:4 Doğanay Mh. Karabağlar/İzmir/Türkiye. Privacy requests: privacy@vuff.app.

What we collect

• Account: your email, name, username, profile photo, bio and city. If you sign in with Apple or Google, they share your name and email with us (Apple can hide your real email).
• At sign-up we ask for your date of birth to confirm you are 18 or older. It isn't shown on your profile or to other members, and you can't change it yourself. We don't verify your age with a document. Accounts opened before 25 October 2026 gave an 18+ self-declaration instead, which we keep with its wording version and time.
• Your dogs: name, breed, age, sex, weight, photos and the care details you add.
• What you share: stories and highlights, routes, events, map alerts, lost pet listings and sightings, adoption and mating listings, care and training listings, reviews, messages, group chats, support requests, reports and appeals.
• Location: see the next section.
• We don’t collect identity documents, selfies or criminal-record information. Organization accounts can send a registry number or an official letter, and training and mating listings can upload a certificate; our team reviews these.
• Purchases: if you subscribe to Vuff Plus or Vuff Pro, Apple tells us your plan, renewal date and status. We never see your card details.
• Device: a push notification token, your notification settings and the app version. When you sign up, sign in or reset your password, Cloudflare Turnstile checks that you are a person (Cloudflare’s Turnstile Privacy Addendum: cloudflare.com/turnstile-privacy-policy).

Your location

Your current exact location is not shown on a public people map. A route you publish shows its path to your chosen audience, and a dog’s owner can follow an active care walk. Other members only ever see a city, place, chosen pin or approximate area, as described below.

• Walking Mode: while a walk is running, your phone sends its exact location to Vuff about once a minute, also with the screen locked (iOS shows the location indicator). We use these points only to confirm who really walked together and how far you went; no one else sees them, and they are deleted when the walk ends. Your walk history keeps who you walked with, for how long, your distance and the city. If you open your walk to invitations, people about 5 km around you see it in Nearby & Ready; for this we compare areas of about 2 km, never exact points, and no distance is shown.
• Lost pet alerts: while they are on, we keep only your most recent location, rounded to about 100 m, for at most 24 hours, so we can tell you about a lost pet near you. Turning lost pet alerts off deletes it.
• Routes: your path is recorded on your phone only while you record a route, also with the screen locked, and reaches Vuff when you save the route. A route you publish shows its path to the audience you choose; you can keep any route to yourself.
• Care walks: during a care booking, the walk’s path is shared with the dog’s owner.
• Events, lost pet listings and map alerts use a point you pick on the map, not your phone’s location.
• Photos and videos: location and camera details are removed on your phone and again on our servers before anything is shared.

Caregivers and trainers

• Vuff does not collect identity documents, selfies or criminal-record information, and does not check caregivers or trainers. The orange badge on a profile shows an active Vuff Plus or Vuff Pro subscription only; it does not confirm anyone’s identity.
• Training and mating health certificates are reviewed by our team. The file is deleted after the decision; the result and its dates stay on your listing.

Messages

Messages are not end-to-end encrypted. We don’t read private messages on our own. Our safety team reviews a conversation when someone reports it, or when an automatic check flags words often used in scams, such as payment requests in lost pet chats.

• When something is reported, we keep a copy of it as it was at that moment for one year.
• If you delete a message for everyone, we keep a hidden copy for 30 days so the other person can still report it.
• Messages in closed event group chats are deleted 90 days after the chat closes.

Why we use it

• To run Vuff for you: your profile, walks, stories, chats, listings, care bookings and notifications (to perform our contract with you).
• To keep people and dogs safe: moderation, reports, scam warnings, bot checks and preventing abuse (our legitimate interest and legal obligations).
• To answer support requests and send account emails, such as confirmation, password reset, deletion and data export.
• We don’t show ads, we don’t sell your data and we don’t use third-party tracking or analytics.

Who we share it with

• Other Vuff members see what you choose to share, with the audience you choose. A private account is visible only to your followers.
• Supabase processes account, content, location and message data for Vuff. Resend delivers account emails. Cloudflare hosts the website, routes contact email and provides bot protection; it also acts as a controller for signals used to improve Turnstile. Apple provides sign-in, push delivery, subscriptions and maps; Google provides optional sign-in, Maps links and the Gmail inbox receiving website contact messages. GIF search (KLIPY) is off in this version. Provider roles and processing countries depend on the service.
• Authorities, when the law requires it, or to protect someone’s safety.

Transfers outside Türkiye

Supabase hosts our database, authentication and files in Frankfurt, Germany. Its contracting entity is in Singapore; support, CDN and other processing may occur in further countries. Resend, Cloudflare, Apple and Google also process data outside Türkiye. We are putting in place the Turkish standard contracts and Authority notifications that KVKK Article 9 requires for these transfers. You can ask privacy@vuff.app about their status at any time.

How long we keep it

• Stories are visible for 24 hours, then move to your archive, which only you can see.
• Your account data stays until you delete your account. After you ask, you have 30 days to change your mind; then your account is deleted for good. If you use Sign in with Apple, deleting your account also revokes Vuff’s access to your Apple ID.
• Some things stay without your name after deletion, shown as “Deleted user”: messages you sent, lost pet sightings and reviews. Your username stays reserved so no one can impersonate you.
• If the date of birth you give shows you are under 18, your account is deleted straight away and we don't keep your date of birth. Until your 18th birthday we keep only a one-way scrambled (hashed) form of your email address, so the same address can't be used to sign up before then.
• You can appeal an eligible moderation decision within 180 days. Evidence in a reported case may be retained for up to one year after that case closes.

Your choices and rights

• In the app you can make your account private, block people, turn notifications off, keep routes to yourself, download a copy of your data (Settings → Download your data) and delete your account.
• Under KVKK (Article 11) and the GDPR you can ask what we hold about you, correct it, have it deleted, object to its use and receive a copy. Write to privacy@vuff.app; we answer within 30 days.
• You can complain to the Turkish Personal Data Protection Authority (KVKK) or, in the EU, to your local data protection authority.

Age

Vuff is for people aged 18 and over.

vuff.app

The contact form sends your name, email and message to our team. The site remembers your language choice in your browser and uses your country only to pick a language. Cloudflare Turnstile checks the contact form for bots. We use no tracking cookies.

Website contact form messages (name, email and message) are sent by our Cloudflare Worker to vuffapp@gmail.com, a Google Gmail inbox. Email sent to info@vuff.app or privacy@vuff.app is separately forwarded there by Cloudflare Email Routing. Cloudflare processes the form request IP for rate limiting and bot verification.

Changes

If we change this policy in a meaningful way, we will tell you in the app before the change takes effect.