Subscription Privacy Policy

This Policy explains how CookUnity Inc. collects, uses, discloses, retains, and protects personal information through the standalone DogUnity subscription. It also describes the privacy choices and rights that may be available to you.

DogUnity is a brand of CookUnity Inc. (collectively, “DogUnity,” “CookUnity,” “we,” “us,” or “our”), not a separate legal entity. This Privacy Policy applies to personal information we process when you visit dogunity.com or another DogUnity page that links to this Policy; create or use a DogUnity account; subscribe to, purchase, receive, or review DogUnity products; contact customer support; participate in a survey, promotion, or referral program; or otherwise interact with the standalone DogUnity subscription online or offline (collectively, the “Service”).

This Policy does not apply to websites, products, or services that link to a different privacy notice. Third-party sites and services are governed by their own notices. DogUnity is intended for use in the United States and the Service is available only to adults age 18 or older.

The personal information we collect depends on how you interact with the Service and may include:

• Identifiers and contact information. Name, email address, telephone number, mailing, billing, and delivery addresses, account or customer identifiers, and similar information.
• Account and authentication information. Username, password or other credentials, preferences, account status, and records used to maintain and secure your account.
• Order, subscription, and commercial information. Products considered or purchased, subscription selections, order frequency, delivery instructions, discounts, referrals, transaction history, returns, refunds, and customer-service history.
• Payment and transaction information. Payment method, billing details, transaction identifiers, payment status, and limited payment-card details such as card brand and last four digits. Our payment processor, currently Stripe, generally collects and processes full payment-card information on our behalf.
• Dog Profile information. Your dog’s name, age, weight, breed, sex, life stage, activity level, body condition, dietary preferences, food allergies or sensitivities, health conditions, medications, feeding goals, and other information you choose to provide about your dog. Dog Profile information concerns an animal, but it may be linked to your account and therefore treated as your personal information. The Service is not intended to collect consumer health data about a person. Please do not submit medical, health, genetic, biometric, or other health-related information about yourself or another person.
• Communications and content. Emails, chats, telephone communications, survey responses, support requests, reviews, ratings, photos, testimonials, and other content you submit. Calls may be monitored or recorded where disclosed and permitted by law.
• Device, network, and usage information. IP address, device identifiers, browser and operating-system information, language, approximate location derived from IP address, referring URLs, pages viewed, clicks, interactions, dates and times of access, cookie and similar-technology identifiers, and diagnostic data.
• Inferences and preferences. Information derived from the data above, such as likely product interests, delivery preferences, recommended portions or recipes, and interactions with marketing.
• Sensitive personal information. Account credentials and, where applicable, payment credentials. We do not intend to collect precise geolocation or sensitive information about a person’s health through the Dog Profile. If you voluntarily provide other sensitive information, we use it only as reasonably necessary for the disclosed purpose and as permitted by law.

We collect personal information from:

• You, including when you create an account, build a Dog Profile, place or manage an order, contact us, or submit content.
• Your devices and browsers through cookies, pixels, software development kits, logs, and similar technologies.
• CookUnity systems and accounts, if you request a CookUnity-linked benefit or otherwise direct us to connect your interactions.
• Service providers and business partners, including payment processors, fulfillment and delivery partners, communications providers, analytics providers, fraud-prevention services, and referral partners.
• Other people or publicly available sources, such as when someone sends you a referral or you post a public review.

We use personal information to:

• Provide, maintain, personalize, and improve the Service, including to create accounts and Dog Profiles and recommend products, recipes, portions, or delivery schedules.
• Process payments, fulfill and deliver orders, manage subscriptions, apply eligible discounts, and provide receipts and transaction notices.
• Respond to questions, provide customer support, troubleshoot, and communicate about accounts, orders, deliveries, product availability, recalls, safety, or changes to the Service.
• Send marketing communications, promotions, surveys, and referral offers in accordance with your choices and applicable law.
• Provide and measure targeted advertising, including by using or disclosing identifiers, device and internet activity, commercial information, approximate location, and related inferences to help select, deliver, personalize, and measure advertisements across websites, applications, and other services.
• Understand Service usage, measure performance, conduct research and analytics, test features, and develop new products and services.
• Protect accounts, detect or prevent fraud, abuse, security incidents, or unlawful activity, and debug or repair errors.
• Comply with law, enforce our terms, respond to legal process, establish or defend legal claims, and protect the rights, property, safety, and security of DogUnity, CookUnity, our customers, and others.
• Create aggregated or deidentified information. We do not attempt to reidentify information that we maintain as deidentified, except as permitted by law to test our deidentification processes.

We and providers acting for us use cookies and similar technologies for necessary functions, preferences and customer support, security, analytics, email and lifecycle messaging, campaign measurement, and targeted behavioral advertising. We and our marketing and advertising partners may use these technologies to collect information about your activities over time and across websites, applications, and other services and to provide personalized advertisements, communications, and other content. We may make identifiers available to these partners, including IP addresses, cookie or device identifiers, and hashed versions of email addresses. The providers and technologies we use may change as the Service develops.

You can manage non-essential technologies through the cookie-preference tool made available on the Service and through your browser settings. Where required by law, we treat a recognized opt-out preference signal, such as Global Privacy Control (“GPC”), as a request to opt out of sale or sharing and targeted advertising for the browser or device that sends the signal. Because these signals are browser- and device-specific, you may need to renew your choice on each browser or device. We do not currently respond to legacy “Do Not Track” signals that are not legally recognized opt-out preference signals.

Blocking cookies may affect Service features. Your selections may not affect technologies that are strictly necessary to provide the Service or disclosures that are not legally considered a sale, sharing, or targeted advertising.

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

• Service providers and contractors. Companies that provide hosting, authentication, payments, fulfillment, warehousing, delivery, communications, support, analytics, fraud prevention, security, professional advice, and other services for us, subject to appropriate contractual restrictions.
• CookUnity companies and teams. CookUnity Inc. and its affiliates and internal teams, including to operate shared systems, provide linked benefits, prevent fraud, and support DogUnity.
• Analytics advertising and marketing partners. Partners that help us measure use, understand campaigns, identify audiences, and select, deliver, personalize, or measure advertisements across websites, applications, and other services, subject to your choices and applicable law.
• Business transaction recipients. Actual or prospective buyers, investors, lenders, advisers, or counterparties in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.
• Authorities and others for legal, safety, and security purposes. Courts, regulators, law enforcement, government agencies, litigants, and other parties when we reasonably believe disclosure is required or appropriate to comply with law, protect rights or safety, investigate misuse, or prevent fraud or security incidents.
• Recipients you direct. Other people or services when you request, direct, authorize, or intentionally make the information public.

The following companies currently support the Service. When these companies act as our service providers or processors, they process personal information for the contracted services and subject to applicable restrictions. A provider may also process information under its own privacy notice when it acts independently, such as when Stripe provides a consumer-facing payment feature. The links below are provided for additional information and do not replace this Policy or change CookUnity’s responsibilities for DogUnity.

• Provider: Stripe. Service function: Payment processing. Provider notice: Stripe privacy policy
• Provider: Crisp. Service function: Customer support chat. Provider notice: Crisp privacy policy
• Provider: Amplitude. Service function: Product analytics. Provider notice: Amplitude privacy notice
• Provider: Smart Warehousing. Service function: Order fulfillment and logistics. Provider notice: Smart Warehousing privacy policy
• Provider: Google Maps. Service function: Address autocomplete and mapping. Provider notice: Google privacy policy
• Provider: Vercel. Service function: Website hosting and delivery. Provider notice: Vercel privacy notice
• Provider: Customer.io. Service function: Email and lifecycle messaging. Provider notice: Customer.io privacy policy
• Provider: Neon and Databricks. Service function: Application database hosting. Provider notice: Databricks privacy notice

We do not sell personal information for money. During the 12 months before the Last Updated date, DogUnity used personal information for targeted advertising and disclosed identifiers and customer records, commercial information, internet or network activity, approximate geolocation, audio electronic or visual information, and inferences to marketing and advertising partners. Some privacy laws define these disclosures as a “sale,” “sharing,” or “targeted advertising,” even when no money changes hands. We do not disclose account passwords or payment credentials to marketing or advertising partners for targeted advertising. You may opt out through the cookie-preference or “Do Not Sell or Share My Personal Information” tool on the Service, by sending a recognized opt-out preference signal such as GPC, or by contacting us as described under Contact Us.

We do not knowingly sell or share the personal information of anyone under 16. We do not sell or share mobile telephone numbers, text-message originator opt-in data, or consent information with unaffiliated third parties for their own marketing purposes.

We retain personal information under the CookUnity Data Retention Policy and Records Retention Schedule, considering the record category, documented business purpose, legal, accounting, contractual, and security obligations, and any litigation hold. Unless a different period applies, we do not retain personal information longer than seven years after the relevant business purpose ends.

The current schedule retains customer account, subscription, Dog Profile, and related customer records for the customer relationship plus seven years; sales and order records for ten years; electronic payment records and applicable invoices for seven years; and consumer privacy request records for 24 months. Sales and marketing reports are retained for three years, campaign materials for three years after the campaign, email for 12 months, instant messages for six months, and security-incident records for three years, unless another category, legal requirement, or litigation hold requires longer retention.

Cookie and analytics information follows documented operational need and provider settings, and backup copies may remain through standard backup cycles. When information is no longer required, we delete, deidentify, or securely destroy it, subject to legal exceptions and litigation holds.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and the risks involved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.

• Account information. You may update certain account and Dog Profile information through your account or by contacting us.
• Marketing email. You may unsubscribe using the link in a marketing email. We may still send transactional or service-related communications.
• Text messages. You may opt out of marketing texts by replying STOP. Message and data rates may apply. Consent to marketing texts is not a condition of purchase.
• Cookies and targeted advertising. Use the cookie-preference and opt-out tools on the Service or a recognized opt-out preference signal such as GPC, as described under Cookies Analytics and Similar Technologies and Sale Sharing and Targeted Advertising.

Depending on where you live and subject to applicable law, you may have the right to: confirm whether we process your personal information; access it; correct inaccuracies; delete it; obtain a portable copy; obtain information about the categories or specific third parties to whom we disclosed it; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses or disclosures of sensitive personal information; withdraw consent; and appeal a denial of a request. You may also have the right not to receive discriminatory treatment for exercising a privacy right. These rights are not absolute and may be subject to verification, exceptions, and limitations under applicable law.

To exercise a right, submit a request through the privacy-request form linked from the Service or email support@dogunity.com with the subject “Privacy Request.” Describe your request and the state in which you live. We will use information you provide only to verify and respond to your request. We may ask you to verify control of your email account or provide information that reasonably matches our records. If we deny your request and your law provides an appeal right, email support@dogunity.com with the subject “Privacy Appeal” within 60 days of our decision. We will respond within the period required by applicable law and, where required, explain how to contact your state attorney general or other regulator.

Where permitted, you may designate an authorized agent to submit a request. We may require proof of the agent’s authority and may ask you to verify your identity or confirm the request directly. We will not require identity verification for a sale, sharing, or targeted-advertising opt-out request except as permitted by law. For opt-out requests submitted through an opt-out preference signal, we will process the signal as required by applicable law.

This section supplements the rest of the Policy for California residents and serves as our California notice at collection. The table below describes the categories of personal information we collect or may collect, examples and principal purposes, the criteria used to determine retention, and whether we sold or shared each category during the 12 months before the Last Updated date. Sources and recipient categories are described above. We disclose each category to service providers and contractors as reasonably necessary for the business purposes described in this Policy.

• Category: Identifiers and customer records. Examples and principal purposes: Name, contact details, addresses, account ID, credentials, and limited payment details; used for accounts, orders, delivery, support, security, legal compliance, and targeted advertising. Account passwords and payment credentials are not used for targeted advertising. Retention criteria: Customer relationship plus seven years; privacy-request records for 24 months. Sold or shared: Yes - marketing and advertising partners
• Category: Commercial information. Examples and principal purposes: Orders, subscriptions, products, discounts, delivery instructions, support history, and Dog Profile preferences; used to provide and personalize the Service and targeted advertising. Retention criteria: Sales and order records for ten years; electronic payments and applicable invoices for seven years. Sold or shared: Yes - marketing and advertising partners
• Category: Internet or network activity. Examples and principal purposes: IP address, device and browser data, cookies, pages, clicks, interactions, and diagnostics; used for operations, analytics, security, campaign measurement, and targeted advertising. Retention criteria: Documented operational need, provider settings, and generally no longer than seven years unless another requirement applies. Sold or shared: Yes - marketing and advertising partners
• Category: Geolocation. Examples and principal purposes: Approximate location derived from IP and address or map information you provide; used for delivery, fraud prevention, localization, and targeted advertising. Retention criteria: Customer relationship plus seven years when maintained as a customer or transaction record. Sold or shared: Yes - marketing and advertising partners
• Category: Audio electronic or visual information. Examples and principal purposes: Chats, emails, reviews, photos, and recordings if disclosed; used for support, quality, safety, marketing with permission, targeted advertising, and legal purposes. Retention criteria: Email for 12 months and instant messages for six months; other content follows the applicable customer-record or documented-purpose schedule. Sold or shared: Yes - marketing and advertising partners
• Category: Inferences. Examples and principal purposes: Likely interests, recommendations, portions, recipes, and marketing interactions; used to personalize and improve the Service and targeted advertising. Retention criteria: While relevant to the customer relationship and up to seven years afterward, unless earlier deleted or deidentified. Sold or shared: Yes - marketing and advertising partners
• Category: Sensitive personal information. Examples and principal purposes: Account credentials and, where applicable, payment credentials; used only for service, security, transactions, or another permitted purpose. Retention criteria: Customer relationship plus seven years; applicable payment records for seven years. Sold or shared: No

Sale or sharing. We do not sell personal information for money. During the 12 months before the Last Updated date, we sold or shared, as those terms are broadly defined under California law, the categories marked Yes in the table above to marketing and advertising partners for cross-context behavioral advertising. California residents may opt out using the methods described under Sale Sharing and Targeted Advertising and United States State Privacy Rights. We use and disclose sensitive personal information only for purposes permitted without a right to limit, unless we provide a separate notice and right to limit.

California “Shine the Light.” California residents may request information about certain disclosures of personal information to third parties for their own direct-marketing purposes. To submit a request, use the information under Contact Us and identify the request as “California Shine the Light.”

Financial incentives. If we offer a loyalty, referral, discount, or similar program that constitutes a financial incentive or price or service difference under California law, we will provide a separate notice describing the material terms, how to opt in, how to withdraw, and our good-faith estimate of the value of the relevant personal information. Participation will be voluntary.

The Service is intended only for adults age 18 or older and is not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If we learn that we collected personal information from a child in circumstances where parental consent was required, we will take appropriate steps to delete it. A parent or guardian may contact us using the information under Contact Us.

We may use Dog Profile and account information to automate product, recipe, portion, delivery, support, or marketing recommendations. These recommendations are not intended to make decisions that produce legal or similarly significant effects about you. DogUnity, CookUnity, and service providers acting for DogUnity do not collect, use, or sell personal information submitted through the Service for the purpose of training a general-purpose large language model. If these practices materially change, we will update this Policy and provide any additional notice or choice required by law.

We may update this Policy from time to time. We will post the updated Policy and revise the “Last Updated” date. If a change is material, we will provide additional notice as required by law, such as by email, an in-account notice, or a prominent notice on the Service. Where required, we will obtain consent or provide an opportunity to withdraw consent before applying a materially different use of personal information previously collected.

For privacy questions, rights requests, or accessibility assistance, contact:

CookUnity Inc.

Attention: DogUnity Privacy, Legal Department

630 Flushing Avenue, 3rd Floor

Brooklyn, NY 11206

Email: support@dogunity.com

If you need this Policy in an alternative format because of a disability, contact us and describe the format you need.