Privacy Policy

Effective date: July 16, 2026

Plain-English summary: BoneArrow helps dog owners find playdate partners for their dogs. To do that, we collect profile information, location data, photos, and chat messages. We do not sell your personal data to third parties. You can delete your account and all associated data at any time from within the app.

Table of Contents

Who We Are
Information We Collect
How We Use Your Information
How We Share Your Information
Third-Party Services
Data Retention
Your Rights and Choices
Children's Privacy
Security
Local Storage and Cookies
International Data Transfers
Changes to This Policy
Contact Us

1. Who We Are

BoneArrow ("BoneArrow," "we," "us," or "our") is a dog-owner social and matchmaking platform operated as a personal project. The app is accessible at our web address and as a Progressive Web App (PWA). Questions about this Privacy Policy can be directed to joeperl81@gmail.com.

2. Information We Collect

2.1 Information You Provide Directly

Category	Examples	Required?
Account credentials	Email address, password (hashed — never stored in plain text)	Yes
Owner profile	Your name, owner photo, contact preferences	Yes
Dog profile	Dog name, breed, age, bio, personality traits, up to 6 photos	Yes
Location	City and state you enter manually; GPS coordinates when you use the "Dogs Near Me" or park check-in features	Partial
Messages	Text messages you send to other matched users	No
Playdate information	Dates, times, locations, and notes for scheduled playdates	No
Reports	Content of reports you submit about other users	No

2.2 Information We Collect Automatically

Usage data — which screens you visit, swipes (woof/pass), matches, messages sent, XP earned, streaks, and league participation.
Push notification token — a device-specific token issued by your browser or OS so we can send you match alerts, playdate reminders, and birthday notifications.
Device information — browser type, operating system, approximate screen resolution, and time zone, collected automatically when you use the app.
Server logs — IP address, request timestamps, and response codes retained for up to 30 days for security and debugging purposes.

2.3 Information From Third Parties

Photo moderation scores — when you upload a photo, it is sent to Sightengine (see Section 5) for automated content analysis. We receive a safety score but do not store Sightengine's raw API response.
Park and location data — when you search for nearby dog parks, queries are forwarded through our server to OpenStreetMap's Overpass API and to Google Places. No personal data is sent to these services.

3. How We Use Your Information

We use the information we collect to:

Provide the service — create and display your dog's profile, generate the discovery feed, enable swiping and matching, and facilitate chat between matched users.
Safety and moderation — automatically screen uploaded photos for inappropriate content, review reported profiles, and enforce our Community Guidelines.
Notifications — send push notifications for new matches, incoming messages, accepted playdates, birthday reminders for matched dogs, and league updates. You can opt out of notifications in your device settings.
League and XP features — track activity points, maintain streaks, and populate city-specific leaderboards with your dog's name and photo.
Improve the app — analyze aggregate usage patterns (not individual behavior) to identify bugs, prioritize features, and improve performance.
Security — detect and prevent fraud, spam, abuse, and unauthorized access. Enforce our Terms of Service, including automatic suspension of profiles that receive multiple reports.
Legal compliance — respond to lawful requests from law enforcement or regulatory authorities.

    We do not use your data for advertising profiling. BoneArrow does not serve ads, does not build advertising profiles, and does not share your personal data with advertising networks.
  

4.1 With Other Users

When your profile is approved, the following information is visible to other BoneArrow users in the discovery feed and match chat:

Your dog's name, breed, age, bio, photos, traits, and city
Your owner name and owner photo
Your dog's XP level and league ranking (city leaderboard)
Playdate count (shown on profile as an aggregate number only)

Your exact GPS coordinates, email address, push notification token, and password are never visible to other users.

If you enable the Public Profile feature, your dog's profile becomes accessible via a shareable link at bonearrow.app/dog/<your-dog-id> and may be indexed by search engines.

4.2 With Service Providers

We share data with the following categories of service providers who process it on our behalf under appropriate data-protection agreements:

Database and authentication — Supabase (database hosting, authentication, storage)
App hosting — Railway (web server hosting)
Photo moderation — Sightengine (receives photo data for content analysis)
Location/park search — Google Places API, OpenStreetMap Overpass API (receive location search queries, no personal data)

4.3 Legal and Safety Disclosures

We may disclose your information if we believe in good faith that doing so is necessary to: (a) comply with applicable law, court order, or legal process; (b) protect the rights, property, or safety of BoneArrow, its users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

4.4 Business Transfers

If BoneArrow is acquired, merged, or sold, user data may be transferred as part of that transaction. We will notify affected users via in-app notification or email before any such transfer takes effect.

4.5 What We Do Not Do

We do not sell your personal data to any third party.
We do not share your data with advertisers or ad networks.
We do not use automated decision-making that produces legal or similarly significant effects on you.

5. Third-Party Services

Service	Purpose	Data Sent	Privacy Policy
Supabase	Database, auth, file storage	All app data	supabase.com/privacy
Railway	Server hosting	All web traffic (IP, requests)	railway.app/legal/privacy
Sightengine	Photo content moderation	Uploaded photos	sightengine.com/privacy-policy
Google Places API	Dog park search autocomplete	Search query text and approximate location	policies.google.com/privacy
OpenStreetMap / Overpass	Nearby park discovery	GPS coordinates (when you use the map)	osmfoundation.org

6. Data Retention

Active accounts — we retain your data for as long as your account is active.
Deleted accounts — when you delete your account via the app, your dog profile, photos, matches, messages, and XP data are permanently deleted within 30 days. Your email address is retained for 90 days solely to prevent abuse (re-registration to evade a ban), then deleted.
Server logs — retained for up to 30 days, then automatically purged.
Reports — reports you submitted or that were filed against you are retained for 12 months for safety purposes, even after account deletion.
Backups — data may persist in encrypted database backups for up to 90 days after deletion, after which it is permanently removed.

7. Your Rights and Choices

7.1 Access and Correction

You can view and edit your dog's profile, photos, and bio at any time within the app. To request a copy of all personal data we hold about you, email joeperl81@gmail.com.

7.2 Deletion ("Right to Be Forgotten")

You can delete your account and all associated data at any time from the Profile → Settings → Delete Account section of the app. This action is irreversible. See Section 6 for retention timelines.

7.3 Push Notifications

You can disable push notifications at any time through your device's notification settings (iOS: Settings → Notifications → BoneArrow; Android: Settings → Apps → BoneArrow → Notifications).

7.4 Location Data

GPS access is requested only when you use the "Dogs Near Me" or park check-in features. You can deny location permission at any time in your device settings. Your manually entered city remains visible on your profile unless you change it.

7.5 Public Profile

If you have enabled the Public Profile feature, you can disable it at any time from Profile → Settings. This will remove your public shareable link within 24 hours.

7.6 California Residents (CCPA)

California residents have the right to know what personal information is collected, disclosed, or sold; to request deletion; and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at joeperl81@gmail.com. We will not discriminate against you for exercising these rights.

7.7 EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the right to access, rectify, erase, restrict, and object to processing of your personal data, and to data portability. Our legal basis for processing is (a) performance of the contract (providing the service), (b) legitimate interests (safety, fraud prevention, app improvement), and (c) consent (push notifications, GPS). To exercise your rights, contact us at joeperl81@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.

8. Children's Privacy

BoneArrow is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has created an account, please contact us at joeperl81@gmail.com.

9. Security

We implement reasonable technical and organizational measures to protect your information, including:

All data transmitted between your device and our server is encrypted in transit using TLS (HTTPS).
Passwords are hashed using industry-standard algorithms before storage; we never store passwords in plain text.
API keys and secrets are stored as server-side environment variables and are never embedded in client-side code.
Photo uploads are screened for inappropriate content before being made visible.
Database access is protected by row-level security policies.
Profiles receiving three or more reports from distinct users are automatically suspended pending admin review.

No method of transmission over the internet is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

10. Local Storage and Cookies

BoneArrow uses your browser's localStorage (not cookies) to store your session token, app preferences (dark mode, filters), and cached profile data. This data remains on your device and is not transmitted except as part of authenticated API requests. You can clear localStorage at any time by clearing your browser's site data, which will log you out of the app.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

11. International Data Transfers

BoneArrow's servers are hosted in the United States (Railway, us-east-1) and our primary database is hosted by Supabase (us-east-1). If you access the app from outside the United States, your data will be transferred to and processed in the United States. By using BoneArrow, you acknowledge and consent to this transfer. We rely on standard contractual mechanisms where required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify active users via an in-app notice at least 14 days before the changes take effect. Your continued use of BoneArrow after the effective date constitutes acceptance of the updated policy.

13. Contact Us

Questions? We're here.

For privacy questions, data requests, or to report a concern:

joeperl81@gmail.com

We aim to respond to all requests within 30 days.

Terms of Service

Effective date: July 16, 2026

Quick summary: BoneArrow is a platform for dog owners to connect and arrange playdates. You must be 18 or older to use it. Be respectful, post real photos of your own dog, and never use the platform to harass or harm anyone. We reserve the right to suspend or remove accounts that violate these terms.

Table of Contents

Acceptance of Terms
Eligibility
Account Registration
Acceptable Use
Content and Licenses
Safety Guidelines
Moderation and Enforcement
Intellectual Property
Third-Party Services
Disclaimers
Limitation of Liability
Indemnification
Termination
Governing Law and Disputes
Changes to These Terms
Contact Us

1. Acceptance of Terms

By creating an account, accessing, or using BoneArrow (the "Service"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree, you must not use the Service.

These Terms constitute a binding legal agreement between you and BoneArrow. "You" refers to the individual using the Service. "We," "us," and "our" refers to BoneArrow.

2. Eligibility

You must be at least 18 years of age to use BoneArrow.
You must be a human acting on behalf of yourself (not a bot, script, or automated agent).
You must not have been previously suspended or permanently banned from BoneArrow.
Use of the Service must not violate any applicable laws in your jurisdiction.

By using the Service, you represent and warrant that you meet all of the above eligibility requirements. If you are using the Service on behalf of a minor dog owner (e.g., you are a parent registering on behalf of your child who is under 18), you must be at least 18 years old and take full responsibility for your child's use of the Service.

3. Account Registration

Accuracy. You agree to provide accurate, current, and complete information during registration and to keep your account information updated.

Security. You are responsible for maintaining the confidentiality of your password and for all activity that occurs under your account. You agree to notify us immediately at joeperl81@gmail.com if you suspect unauthorized access to your account.

One account per person. You may not create more than one personal account. Creating multiple accounts to evade moderation actions is grounds for permanent ban.

No account transfer. You may not sell, transfer, or assign your account to another person.

4. Acceptable Use

You agree that you will not:

Post content that is illegal, abusive, harassing, threatening, defamatory, obscene, or otherwise objectionable.
Upload photos that contain nudity, graphic violence, hate symbols, or content that sexualizes minors under any circumstances.
Impersonate another person, dog, or entity, or misrepresent your identity or affiliation.
Post photos of a dog that is not your own dog, without explicit permission from the dog's owner.
Use the Service to solicit money, goods, or personal information from other users.
Send spam, chain messages, or unsolicited commercial communications.
Attempt to gain unauthorized access to any part of the Service, another user's account, or our database.
Reverse-engineer, decompile, scrape, or otherwise extract data from the Service.
Use automated bots, scripts, or other automated means to interact with the Service.
Transmit viruses, malware, or other harmful code.
Use the Service in any manner that could disable, overburden, damage, or impair our systems.
Circumvent, disable, or interfere with any security features of the Service.
Use the Service for any commercial purpose without our prior written consent.
Coordinate group harassment or mass-report campaigns against other users.

5. Content and Licenses

5.1 Your Content

You retain ownership of any photos, text, and other content you upload to BoneArrow ("User Content"). By uploading User Content, you grant BoneArrow a worldwide, non-exclusive, royalty-free license to store, display, reproduce, and distribute that content solely for the purpose of operating and providing the Service. This license terminates when you delete the content or close your account.

You represent and warrant that: (a) you own or have the right to use all User Content you post; (b) your User Content does not infringe any third-party intellectual property, privacy, or publicity rights; and (c) your User Content complies with these Terms.

5.2 Content Moderation

All uploaded photos are automatically analyzed for inappropriate content using Sightengine's image recognition API. New dog profiles are held for human review before appearing in the discovery feed. We reserve the right to remove any User Content that violates these Terms or our Community Guidelines, with or without notice.

5.3 BoneArrow Content

All content provided by BoneArrow, including the app design, logo, graphics, text, and underlying code, is owned by or licensed to BoneArrow. You may not reproduce, modify, or distribute our content without our written permission.

6. Safety Guidelines

Your physical safety is important to us. When meeting another user in person, please follow these guidelines:

Meet in public first. For initial meetups, always choose a public location such as a dog park, pet-friendly café, or open outdoor area. Avoid private residences until you have established trust.
Tell someone where you are going. Before any in-person meetup arranged through BoneArrow, share the details — date, time, location, and who you are meeting — with a trusted friend or family member.
Keep your phone charged and accessible. Bring a fully charged phone so you can contact someone or call for help if needed.
Trust your instincts. If at any point you feel uncomfortable, it is always appropriate to leave or cancel the meeting. Your safety takes priority.
Do not share sensitive personal information (home address, financial information, social security number) with other users.
Report concerning behavior. Use the in-app report function if another user makes you feel unsafe, harassed, or threatened.

    BoneArrow is a platform for connecting dog owners, not a personal safety guarantee. We provide tools to help you stay safe (photo moderation, reporting, automatic suspension) but we cannot verify the identity of every user or guarantee the behavior of people you meet through the Service.
  

7. Moderation and Enforcement

Automated enforcement. Profiles that receive 3 or more reports from distinct users are automatically suspended pending human review. Uploaded photos that fail automated content screening are rejected before they are displayed.

Human review. All new profiles are reviewed by our team before being approved. Reported profiles, flagged messages, and other escalations are reviewed on a best-effort basis.

Actions we may take. Depending on the severity and frequency of a violation, we may: issue a warning; remove specific content; temporarily suspend your account; or permanently ban your account and email address. We may act without prior notice in cases of serious violations.

Appeals. If you believe your account was suspended or content was removed in error, you may appeal by emailing joeperl81@gmail.com with the subject line "Appeal — [your registered email]." We will review appeals within 14 days.

No obligation to monitor. We are not obligated to monitor User Content or user behavior, but we reserve the right to do so.

8. Intellectual Property

The BoneArrow name, logo, and all associated trademarks are the property of BoneArrow. All other trademarks are the property of their respective owners. Nothing in these Terms grants you any right to use our trademarks.

If you believe any content on BoneArrow infringes your copyright, please contact us at joeperl81@gmail.com with a description of the allegedly infringing material and your ownership basis.

9. Third-Party Services

The Service integrates with third-party services including Supabase, Railway, Sightengine, Google Places, and OpenStreetMap. These services have their own terms and privacy policies. We are not responsible for the practices of these third-party providers. Your use of third-party services through BoneArrow is governed by those providers' respective agreements.

Links to external websites may appear in user-generated content or app features. We do not endorse and are not responsible for the content, accuracy, or practices of any external website.

10. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, BONEARROW EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

WE DO NOT WARRANT THAT: (a) THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; (b) ANY RESULTS OBTAINED FROM USE OF THE SERVICE WILL BE ACCURATE OR RELIABLE; (c) ANY ERRORS IN THE SERVICE WILL BE CORRECTED; OR (d) THE SERVICE OR ANY SERVER THAT MAKES IT AVAILABLE IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

No guarantee of matches or safety. BoneArrow does not guarantee that you will find suitable playdate partners, that matches will lead to successful meetups, or that users you meet are who they claim to be. BoneArrow does not conduct background checks on users.

No veterinary or pet-care advice. Nothing in the Service constitutes veterinary, medical, legal, or professional advice of any kind.

11. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL BONEARROW OR ITS OPERATORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS OPPORTUNITIES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ANY CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR YOUR USE OF THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU HAVE PAID US (IF ANY) IN THE 12 MONTHS PRECEDING THE CLAIM.

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities, so some of the above limitations may not apply to you.

12. Indemnification

You agree to indemnify, defend, and hold harmless BoneArrow and its operators from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your use of the Service; (b) your User Content; (c) your violation of these Terms; or (d) your violation of any rights of another person or entity.

13. Termination

By you. You may terminate your account at any time by selecting "Delete Account" in the app's settings. Deleting your account will permanently remove your profile, dogs, photos, matches, messages, and XP data (subject to the retention timelines in our Privacy Policy).

By us. We reserve the right to suspend or permanently terminate your access to the Service at any time, for any reason, including violation of these Terms, with or without notice. Upon termination, your license to use the Service ends immediately. Sections 5 (Content licenses granted to us), 8 (IP), 10 (Disclaimers), 11 (Liability), 12 (Indemnification), and 14 (Governing Law) survive termination.

14. Governing Law and Disputes

These Terms are governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict-of-law principles.

Informal resolution. Before filing any legal claim, you agree to first contact us at joeperl81@gmail.com and attempt to resolve the dispute informally. We will try to resolve the dispute within 30 days.

Binding arbitration. If informal resolution fails, any dispute arising from these Terms or your use of the Service shall be resolved by binding individual arbitration under the JAMS rules, rather than in court, except that either party may bring an individual action in small-claims court. You agree to waive your right to a jury trial and to participate in a class-action lawsuit.

If any provision of this arbitration clause is found unenforceable, only that provision will be removed and the rest of the clause will remain in force.

Venue. Any disputes not subject to arbitration (such as emergency injunctive relief) shall be resolved in the state or federal courts located in San Francisco County, California, and you consent to personal jurisdiction in those courts.

15. Changes to These Terms

We may revise these Terms at any time. When we make material changes, we will update the "Effective date" at the top of this page and provide at least 14 days' notice to active users via in-app notification or email. Your continued use of BoneArrow after the effective date of the revised Terms constitutes your acceptance of the changes. If you do not agree to the revised Terms, you must stop using the Service and may delete your account.

16. Contact Us

Questions about these Terms?

Email us — we are a small team and we read everything.