RoxyCare Privacy Policy

Last updated: 06 Oct 2026

1. Who we are

This policy explains what personal information the RoxyCare app collects, why, who we share it with, and the rights you have over it.

RoxyCare is a dog-care app. It lets you keep profiles for your dogs, run photo-based care checks, record vaccinations, notes and care events, set reminders, and sync your Mud Daddy products.

The app is run by MUD BRAND LIMITED, a company registered in England and Wales (company number 14754217), whose registered office is at Mud Daddy House, Unit 3 Fisher Street, Fisher Industrial Estate, Newcastle Upon Tyne, Tyne & Wear, United Kingdom, NE6 4LT ("we", "us"). We are the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy covers the RoxyCare app for iOS and Android and the services behind it.

2. Information we collect

Most of what we hold is information you give us in the app.

Category	What it includes	Where it comes from
Account details	Full name, email address, phone number (optional), password (stored only as a secure hash), email verification status, optional profile photo	You, when you register or edit your profile; time zone from your device
Dog profiles	Name, breed, date of birth, sex, neutered status, microchip number, weight, vet name and phone number, known conditions, allergies, medications, profile photo	You, typed in or read from a photo of a vaccination card
Care checks	Photos of your dog, the body area chosen, your note, recent notes you choose to include, and the results we generate	You, and our AI processing (section 4)
Notes and observations	Date, text, tags and optional photo	You
Vaccinations	Vaccine name, date given, next due date, vet name, and any photo of a vaccination card you scan	You
Calendar events and reminders	Event titles, descriptions, dates, times, recurrence and reminder settings	You
Mud Daddy products and orders	Order numbers, products, purchase dates; products you add yourself; an email address you verify to link orders	Mud Daddy's Shopify store, matched to your email, and you
Login and security	Sign-in session tokens (stored as hashes), one-time codes for verification and password reset (stored as hashes)	Generated by us
Device and notifications	A push notification token and your device platform (iOS or Android)	Your device, if you allow notifications
Usage analytics	A small set of in-app events (for example "care check completed", "vaccinations saved"), linked to your account ID, plus app version and platform	Your device, only while you are signed in
Crash and error reports	Technical details of errors and crashes, device model and operating system	Your device

We do not collect your precise location, contacts, or payment card details. Payments for Mud Daddy products happen on the Mud Daddy shop, not in the app.

3. How we use your information

We use your information only to run RoxyCare and keep it working well. Under UK GDPR we must have a lawful basis for each use; these are listed below.

Purpose	Lawful basis
Create and secure your account, sign you in, verify your email and reset your password	Contract: we need it to provide the app you signed up for
Store your dogs' profiles, notes, vaccinations, calendar events and reports	Contract
Run photo care checks and read vaccination cards (section 4)	Contract
Send reminders and "your report is ready" notifications	Contract; you can turn notifications off at any time
Find your Mud Daddy orders and show your products and warranty status	Contract, where you ask us to link your orders
Send service emails such as verification codes and password resets	Contract
Understand which features are used and where people get stuck, using a limited set of analytics events	Legitimate interests: improving the app. We keep the events to a minimum and never send them while you are signed out
Find and fix crashes and errors	Legitimate interests: keeping the app reliable
Prevent abuse, such as limiting care checks to one per day and blocking repeated failed code attempts	Legitimate interests: security and fair use
Comply with the law and respond to lawful requests	Legal obligation

We do not sell your personal information. We do not use it for advertising, and we do not send you marketing from the app. If we ever want to, we will ask for your consent first.

4. Care checks and AI

RoxyCare uses AI to read photos and generate care check results. This happens only when you start a care check or scan a card.

Care checks: we send the photo, the body area, your note, any recent notes you leave ticked, and relevant details from your dog's profile (such as age, breed, conditions and medications). AI returns an assessment, which we store as your report.
Card scans: when you scan a vaccination card, we send the photo so AI can read the vaccine names, dates and your dog's details. You review the result before anything is saved.
What we do not send: your name, email address or phone number.

We use AI through API, under terms that do not allow AI to use this content to train its models.

Care check results are generated automatically and are not veterinary advice. They cannot diagnose your dog. Always contact your vet if you are worried about your dog's wellbeing. No decision with legal or similarly significant effects on you is made by automated means.

5. Who we share it with

We share personal information only with trusted service providers that help us operate RoxyCare, such as providers of hosting, data storage, Al processing, communications, analytics and technical support. They process information on our instructions and under appropriate contractual protections.

Sharing you choose. If you share a care report as a PDF, it goes wherever you send it, for example to your vet. That recipient's use is then governed by their own policies.

Other cases. We may disclose information where the law requires it, to protect the rights and safety of our users or others, or to a buyer or successor if our business is sold or reorganised. A successor would remain bound by this policy.

6. International transfers

Our main database and servers are in the UK. Some providers in section 5 process information in the European Economic Area, the USA or elsewhere.

When information leaves the UK, it is protected in one of these ways:

European Economic Area and Canada: UK law recognises these countries as protecting personal information to the UK standard, so no extra safeguard is needed.
USA: the provider is certified under the UK–US Data Bridge, or our contract with them includes the UK's approved transfer terms (the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses).
Other countries: our contract with the provider includes those same UK-approved transfer terms.

7. How long we keep it

We keep your account information and your dogs' records for as long as you have a RoxyCare account. When you delete your account, we delete them.

Information	How long we keep it
Account, dog profiles, care checks, notes, vaccinations, events, products and photos	Until you delete them or your account, then removed within 30 days, and from backups within 90 days
A dog and its records	Deleted when you delete that dog in the app
Sign-in sessions	Up to 30 days after your last use, or until you sign out
Verification and password-reset codes	Until they expire (minutes to hours) or are used
Push tokens	Until you sign out, turn off notifications, or the token stops working
Analytics events	12 months
Crash and error reports	90 days

We may keep a limited amount of information for longer if the law requires it or to resolve a dispute.

Deleting your account. You can ask us to delete your account at any time by emailing hello@muddaddy.com. We will confirm once it is done.

8. Your rights

Under UK data protection law you have the right to:

Access the personal information we hold about you and get a copy.
Correct information that is wrong or incomplete. You can edit most of it yourself in the app.
Delete your information.
Restrict how we use your information in some circumstances.
Object to uses based on our legitimate interests, such as analytics.
Data portability: receive information you gave us in a machine-readable format, or have it sent to another organisation.
Withdraw consent where we rely on it, for example by turning off notifications in your device settings.

To use any of these rights, email hello@muddaddy.com. We may need to confirm your identity first. We will respond within one month, and there is normally no charge.

If you are unhappy with how we handle your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Device permissions and storage

The app asks for permission only when you use the feature that needs it. You can change any of them later in your device settings.

Permission	Why we ask
Camera	To take photos of your dog, for care checks, and of vaccination cards
Photos	To choose an existing photo. Only the photos you pick are uploaded
Notifications	To tell you when a dog care report is ready and to remind you of events and vaccinations
Alarms and reminders (Android)	To deliver reminders at the exact time you set

On your device. We store your sign-in tokens in your device's secure storage (Keychain on iOS, Keystore on Android). Reminders are scheduled on your device. The app also keeps a temporary cache so it loads quickly. Cached data is cleared when you sign out; cached images stay until your device clears them or you uninstall the app.

We do not use cookies or advertising identifiers in the app.

10. Security

We protect your information with encryption in transit (HTTPS) and at rest, passwords stored only as salted hashes (Argon2), short-lived sign-in tokens, and access limited to the staff and systems that need it. Photos are stored privately and can only be opened through short-lived links. No system is completely secure, so please use a strong password that you do not use elsewhere.

11. Changes to this policy

We may update this policy when the app or the law changes. We will show the new date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

12. Contact us

For any question about this policy or your information, contact us at:

Email: hello@muddaddy.com
Post: MUD BRAND LIMITED, Unit 3 Fisher Street, Fisher Industrial Estate, Newcastle Upon Tyne, Tyne & Wear, United Kingdom, NE6 4LT.

Currency