RoxyCare Privacy Policy
Last updated: 06 Oct 2026
1. Who we are
This policy explains what personal information the RoxyCare app collects, why, who we share it with, and the rights you have over it.
RoxyCare is a dog-care app. It lets you keep profiles for your dogs, run photo-based care checks, record vaccinations, notes and care events, set reminders, and sync your Mud Daddy products.
The app is run by MUD BRAND LIMITED, a company registered in England and Wales (company number 14754217), whose registered office is at Mud Daddy House, Unit 3 Fisher Street, Fisher Industrial Estate, Newcastle Upon Tyne, Tyne & Wear, United Kingdom, NE6 4LT ("we", "us"). We are the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy covers the RoxyCare app for iOS and Android and the services behind it.
2. Information we collect
Most of what we hold is information you give us in the app.
|
Category |
What it includes |
Where it comes from |
|
Account details |
Full name, email address, phone number (optional), password (stored only as a secure hash), email verification status, optional profile photo |
You, when you register or edit your profile; time zone from your device |
|
Dog profiles |
Name, breed, date of birth, sex, neutered status, microchip number, weight, vet name and phone number, known conditions, allergies, medications, profile photo |
You, typed in or read from a photo of a vaccination card |
|
Care checks |
Photos of your dog, the body area chosen, your note, recent notes you choose to include, and the results we generate |
You, and our AI processing (section 4) |
|
Notes and observations |
Date, text, tags and optional photo |
You |
|
Vaccinations |
Vaccine name, date given, next due date, vet name, and any photo of a vaccination card you scan |
You |
|
Calendar events and reminders |
Event titles, descriptions, dates, times, recurrence and reminder settings |
You |
|
Mud Daddy products and orders |
Order numbers, products, purchase dates; products you add yourself; an email address you verify to link orders |
Mud Daddy's Shopify store, matched to your email, and you |
|
Login and security |
Sign-in session tokens (stored as hashes), one-time codes for verification and password reset (stored as hashes) |
Generated by us |
|
Device and notifications |
A push notification token and your device platform (iOS or Android) |
Your device, if you allow notifications |
|
Usage analytics |
A small set of in-app events (for example "care check completed", "vaccinations saved"), linked to your account ID, plus app version and platform |
Your device, only while you are signed in |
|
Crash and error reports |
Technical details of errors and crashes, device model and operating system |
Your device |
We do not collect your precise location, contacts, or payment card details. Payments for Mud Daddy products happen on the Mud Daddy shop, not in the app.
3. How we use your information
We use your information only to run RoxyCare and keep it working well. Under UK GDPR we must have a lawful basis for each use; these are listed below.
|
Purpose |
Lawful basis |
|
Create and secure your account, sign you in, verify your email and reset your password |
Contract: we need it to provide the app you signed up for |
|
Store your dogs' profiles, notes, vaccinations, calendar events and reports |
Contract |
|
Run photo care checks and read vaccination cards (section 4) |
Contract |
|
Send reminders and "your report is ready" notifications |
Contract; you can turn notifications off at any time |
|
Find your Mud Daddy orders and show your products and warranty status |
Contract, where you ask us to link your orders |
|
Send service emails such as verification codes and password resets |
Contract |
|
Understand which features are used and where people get stuck, using a limited set of analytics events |
Legitimate interests: improving the app. We keep the events to a minimum and never send them while you are signed out |
|
Find and fix crashes and errors |
Legitimate interests: keeping the app reliable |
|
Prevent abuse, such as limiting care checks to one per day and blocking repeated failed code attempts |
Legitimate interests: security and fair use |
|
Comply with the law and respond to lawful requests |
Legal obligation |
We do not sell your personal information. We do not use it for advertising, and we do not send you marketing from the app. If we ever want to, we will ask for your consent first.
4. Care checks and AI
RoxyCare uses AI to read photos and generate care check results. This happens only when you start a care check or scan a card.
-
Care checks: we send the photo, the body area, your note, any recent notes you leave ticked, and relevant details from your dog's profile (such as age, breed, conditions and medications). AI returns an assessment, which we store as your report.
-
Card scans: when you scan a vaccination card, we send the photo so AI can read the vaccine names, dates and your dog's details. You review the result before anything is saved.
-
What we do not send: your name, email address or phone number.
We use AI through API, under terms that do not allow AI to use this content to train its models.
Care check results are generated automatically and are not veterinary advice. They cannot diagnose your dog. Always contact your vet if you are worried about your dog's wellbeing. No decision with legal or similarly significant effects on you is made by automated means.
5. Who we share it with
We share personal information only with trusted service providers that help us operate RoxyCare, such as providers of hosting, data storage, Al processing, communications, analytics and technical support. They process information on our instructions and under appropriate contractual protections.
Sharing you choose. If you share a care report as a PDF, it goes wherever you send it, for example to your vet. That recipient's use is then governed by their own policies.
Other cases. We may disclose information where the law requires it, to protect the rights and safety of our users or others, or to a buyer or successor if our business is sold or reorganised. A successor would remain bound by this policy.
6. International transfers
Our main database and servers are in the UK. Some providers in section 5 process information in the European Economic Area, the USA or elsewhere.
When information leaves the UK, it is protected in one of these ways:
-
European Economic Area and Canada: UK law recognises these countries as protecting personal information to the UK standard, so no extra safeguard is needed.
-
USA: the provider is certified under the UK–US Data Bridge, or our contract with them includes the UK's approved transfer terms (the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses).
-
Other countries: our contract with the provider includes those same UK-approved transfer terms.
7. How long we keep it
We keep your account information and your dogs' records for as long as you have a RoxyCare account. When you delete your account, we delete them.
|
Information |
How long we keep it |
|
Account, dog profiles, care checks, notes, vaccinations, events, products and photos |
Until you delete them or your account, then removed within 30 days, and from backups within 90 days |
|
A dog and its records |
Deleted when you delete that dog in the app |
|
Sign-in sessions |
Up to 30 days after your last use, or until you sign out |
|
Verification and password-reset codes |
Until they expire (minutes to hours) or are used |
|
Push tokens |
Until you sign out, turn off notifications, or the token stops working |
|
Analytics events |
12 months |
|
Crash and error reports |
90 days |
We may keep a limited amount of information for longer if the law requires it or to resolve a dispute.
Deleting your account. You can ask us to delete your account at any time by emailing hello@muddaddy.com. We will confirm once it is done.
8. Your rights
Under UK data protection law you have the right to:
-
Access the personal information we hold about you and get a copy.
-
Correct information that is wrong or incomplete. You can edit most of it yourself in the app.
-
Delete your information.
-
Restrict how we use your information in some circumstances.
-
Object to uses based on our legitimate interests, such as analytics.
-
Data portability: receive information you gave us in a machine-readable format, or have it sent to another organisation.
-
Withdraw consent where we rely on it, for example by turning off notifications in your device settings.
To use any of these rights, email hello@muddaddy.com. We may need to confirm your identity first. We will respond within one month, and there is normally no charge.
If you are unhappy with how we handle your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Device permissions and storage
The app asks for permission only when you use the feature that needs it. You can change any of them later in your device settings.
|
Permission |
Why we ask |
|
Camera |
To take photos of your dog, for care checks, and of vaccination cards |
|
Photos |
To choose an existing photo. Only the photos you pick are uploaded |
|
Notifications |
To tell you when a dog care report is ready and to remind you of events and vaccinations |
|
Alarms and reminders (Android) |
To deliver reminders at the exact time you set |
On your device. We store your sign-in tokens in your device's secure storage (Keychain on iOS, Keystore on Android). Reminders are scheduled on your device. The app also keeps a temporary cache so it loads quickly. Cached data is cleared when you sign out; cached images stay until your device clears them or you uninstall the app.
We do not use cookies or advertising identifiers in the app.
10. Security
We protect your information with encryption in transit (HTTPS) and at rest, passwords stored only as salted hashes (Argon2), short-lived sign-in tokens, and access limited to the staff and systems that need it. Photos are stored privately and can only be opened through short-lived links. No system is completely secure, so please use a strong password that you do not use elsewhere.
11. Changes to this policy
We may update this policy when the app or the law changes. We will show the new date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.
12. Contact us
For any question about this policy or your information, contact us at:
-
Email: hello@muddaddy.com
-
Post: MUD BRAND LIMITED, Unit 3 Fisher Street, Fisher Industrial Estate, Newcastle Upon Tyne, Tyne & Wear, United Kingdom, NE6 4LT.