PRIVACY POLICY

The Wolfery Company (“The Wolfery”, “we”, “us”, “our”) operates the website at thewolferycompany.com and the Wolfery FIE mobile app, and provides fresh dog food subscription services (together, the “Services”).

This policy explains what we collect, where it goes, how long we keep it, and what we do not do. It covers both the website and the app. Where the two differ, it says so.

The Wolfery Company LLC
2108 N St Ste N, Sacramento, CA 95816

By using our Services you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.

2.1 Through the website

When you complete our intake form, create an account, subscribe or contact us:

• Your full name and contact details — email address, phone number, postal address.
• Your dog’s profile — name, breed, birthday, sex, weight, activity level, health conditions, dietary restrictions, allergies, medications and food preferences.
• Your subscription preferences — meal selections, delivery frequency, plan tier.
• Your payment details. These are entered in our store’s checkout and handled by its payment processor — see section 6. They never reach our systems: we never see or store a card number.
• Anything you send us — emails, messages and support enquiries.

When you visit the website we also automatically collect your IP address and approximate location from it, your browser and device type, the pages you visit, and cookie data (see section 8).

2.2 Through the app

Everything in this section is something you enter, something you choose to allow, or something we work out from what you entered. The app collects no analytics, no advertising identifier and no contacts.

Your account. Your email address and the password you set.

Signing in for the first time works like this: you enter the email address from your order, and we check whether it has a subscription. An address with no subscription is refused, and nothing is sent to it. For an eligible address we email a six-digit code; entering it confirms the address and signs you in. You then set a password. Every later sign-in uses your email and that password.

The six-digit code is a short-lived one-time credential. We do not store it, and we keep no copy of the email that carried it.

Your dog’s health information.

• Allergies you record — the allergen, how severe, and an optional note about the reaction.
• Medications you record — the medication chosen from a known library, the dose, the frequency, the start date and your notes.

The weekly check-in. It asks four things and every one is optional; you can save with only one answered.

• Your dog’s weekly step total, if you read it off a collar app and type it in. If you would rather not, you can pick an activity band from five named levels instead.
• Appetite — on how many days out of seven your dog finished its food, from 0 to 7. Zero is a real answer, not a blank.
• Stool — a number from 1 to 7 on a seven-point chart, where 1 is hard and dry and 7 is watery. From that number we also work out and store a plain-word summary: firm, normal or loose.
• A weigh-in, if you have one.

Body condition. Once a month the check-in asks how your dog looks and feels. You pick one of five words — very thin, lean, ideal, rounded, overweight — and we store that word with the date. We store the word, not a number, deliberately: a judgement recorded as a score reads as a measurement it is not. It does not change your dog’s portion. Skipping a month simply leaves no entry.

A free-text note, if you add one to a check-in. We store it exactly as you wrote it. It is not inspected or edited.

A target weight, if you set one — an optional figure on your dog’s profile. It does change the portion we suggest.

Other food — what you tell us your dog eats besides Wolfery. You can record, in your own words, the food’s name, how much a day and in what unit, the calorie figure printed on the bag and which line of the bag you read it from, and whether a vet prescribed it. We record only that yes or no; we never ask what it was prescribed for. Declaring or removing an entry immediately recalculates your dog’s portion and writes a new portion record. Removing an entry marks it inactive rather than deleting it, so a record that it existed remains.

What we work out from what you enter.

• An activity band. From your weekly step total — or from the band you picked instead — we derive a band and store it on your dog’s record, together with a note that you were the one who set it. That band is read by the portion calculation.
• A Vitality score. Each time you save a check-in we calculate a score for that entry and store it, together with the three parts it is built from: an activity figure, a weight figure and a steadiness figure, and how complete the entry was.
• A reading of your dog’s recent movement. On a day when walking conditions are good, the app may tell you that your dog has been covering less ground than its own usual over the past month. This is worked out on your phone from the activity figures already described. It is shown to you and nothing else: it is not sent anywhere, it does not change the portion, and it is not a diagnosis.

Your location, only if you allow it. While the app is open, we use your phone’s location to show walking conditions — air temperature and pavement heat — where you are, and to name the place on the card. The app asks only for “while using the app” permission. We do not store these coordinates in our database. If a conditions lookup fails, they are recorded in our server log (see section 7.3).

Weather readings for your delivery area. Separately from the above, when a portion is recalculated we look up conditions for your delivery area and keep the result: the temperature, the condition, the humidity, and the latitude and longitude your delivery address resolved to, stored against your account. These are deleted outright when you delete your account.

Photographs of your dog, if you add one. See section 4.

Identifiers. An account identifier and an identifier for each dog, used to connect your records to your account. A session token is stored encrypted on your device.

2.3 What we are told by others

Our store, our subscription system and our website platform tell us about your order, your subscription and your intake form. Your order details belong to them first.

Each of these was verified in the shipped build, not assumed.

• No analytics, crash-reporting, advertising or tracking service. Nothing is shared with data brokers or ad networks.
• No tracking across other companies’ apps or websites. The app does not ask for App Tracking Transparency permission.
• No push notifications from a server, and no identifier for your installation. The weekly check-in reminder is scheduled by your own phone and never leaves it. Nothing about it reaches any server.
• No code updates after installation. The facility is switched off in the shipped build and no update address is configured.
• No AI service. No customer data goes to any model provider.
• No collar connects. The app has a Connect a collar screen listing Fi, Whistle and Apple Watch. It is a shell. Choosing a collar shows “Looking for the collar”, then “We couldn’t reach it.” No request leaves your phone, nothing is written to your dog’s record, and there is no sign-in to any collar maker’s service. We hold no collar data for any customer.

If you add a photograph, we store it privately on our database platform. It is not public. It can only be fetched through a link we create on request, and that link stops working after five minutes.

The link carries no account and no session — anyone holding it could fetch the image until it expires. The five-minute limit is what protects it, which is why it is so short.

Photographs taken on a phone often record where they were taken. We re-encode the image on our own servers and keep nothing from the original file, then read the result back to confirm no location information survived. If any did, the upload is refused rather than stored.

You can remove a photograph at any time from your dog’s profile, without deleting your account. Removing it deletes the stored files — both the full photograph and the small version used for the avatar — not just the link to them.

• To process and fulfil your subscription and deliver your orders.
• To calculate a suggested feeding portion through our Feeding Intelligence Engine.
• To show your dog’s profile, history and health summaries.
• To communicate with you about your account, orders and subscription.
• To answer your questions and support requests.
• To send transactional and, where permitted, marketing messages.
• To improve our Services.
• To detect and prevent fraud and abuse, and to comply with the law.

5.1 What actually changes your dog’s portion

We think this is worth stating plainly, because the app shows a number and you are entitled to know what moves it.

The portion is calculated from your dog’s weight, life stage, neuter status, body size and breed, the activity band described above, your feeding goal, any other food you have declared, and a target weight if you have set one.

Daily weather does move it. When a portion is calculated we look up conditions for your delivery area, and a cold day or a hot day can shift the figure.

Your dog’s climate does not. We previously held a permanent adjustment based on whether you live somewhere cool, temperate or warm. That adjustment is now zero for every climate, because the evidence for it did not hold up.

The month-to-month adjustment engine is switched off. Some screens in the app describe a portion that sharpens over time as we learn your dog. That describes intended behaviour, not present behaviour. The engine is off: it is disabled by default in our software, and the setting that would switch it on is not set on our production system.

5.2 What we do not claim

The Vitality score, weight readings and other figures in the app are informational summaries of what you record. They are not clinical assessments. The app does not diagnose, treat, cure or prevent any condition. Whether your dog needs care is for a licensed veterinarian to decide.

The following is every outside party your information reaches, and what each one gets. We do not sell your personal information and we do not share it for cross-context behavioural advertising.

From the app on your phone

Our database platform (Supabase). Signing you in, and every record described in this policy — it is our database of record, not only our sign-in service. It also stores your dog’s photograph.

Our own API. Everything in section 2.2, on its way to the database above.

Apple. If you allow location, your coordinates — so the phone’s operating system can turn them into a place name for the walking card. That lookup happens under Apple’s terms and we only display the result.

From our servers, on your behalf

OpenWeatherMap. The coordinates your phone sent, to fetch walking conditions. And, for the delivery-area lookup, a shortened form of your delivery address — the ZIP where there is one, otherwise the city and state. An address written without commas may be sent with the street still in it, so we cannot say the street is never sent. This lookup is made both by our own server and by a scheduled job on our database platform.

Resend. Your email address and your dog’s name, to send you the message confirming a portion has been updated. Our own internal alert emails also pass through Resend, and when a weather lookup fails for a household those alerts contain that household’s account reference and its delivery address.

Our store (Shopify). When a subscription is activated we create a referral discount code, which sends your name to the store — the discount rule is titled with your full name and the code contains your first name. This happens automatically.

Our subscription system (Recharge) and our website platform (Webflow). These send information to us about your order and your intake form. We send nothing back to them.

Our hosting providers. Our server runs on a third party’s hosting platform and our internal staff panel on another. Everything our server processes passes through the first, including its running log — see section 7.3.

Stripe, and how your card data reaches it

Our store runs on Shopify, and Shopify’s own payment processing, Shopify Payments, is powered by Stripe. So when you pay, your card details go from Shopify’s checkout to Stripe.

They do not pass through us. Nothing in our app, our servers or our database ever receives, handles or stores a card number — the checkout is Shopify’s, and we are told only that an order was paid. We are disclosing Stripe because your card data reaches it through our checkout, not because our systems contact it.

One more host, for completeness. Our scheduled jobs download the software library they run on from a public code distribution service when they start. No customer data is sent there — it is our own software being fetched.

7.1 Deleting your account

You can delete your account in the app, under Pack → Account → Delete account, behind a confirmation where you type DELETE. This cannot be undone.

Deleting your account:

• Deletes every photograph of your dogs, both stored sizes, from storage.
• Deletes outright the weather readings stored for your location, your in-app message inbox, your relationship events, your concern flags, and the log of notifications we sent you.
• Deletes your owner record, so the identifier that was yours exists in no table.
• Deletes your sign-in account, which removes your email address and ends every session you have open.
• Erases the order number and tracking number on your delivery records.

7.2 What is kept, and why

Your dog’s health records are not deleted. They are kept, de-identified.

This is the part most people do not expect, so here it is in full.

At the moment you delete your account we generate a brand-new random identifier that has never been used anywhere, and move your dog’s records and delivery records onto it. The record that identifier belongs to carries no information about you: its email address is a made-up one at a domain that does not exist, and its name is the literal text “[research subject]”. Your original record is deleted rather than blanked, so no real name, email, phone number, address or subscription detail survives beside it.

What survives under that identifier is your dog’s record in full — its name, breed, date of birth, sex, neuter status, weights, target weight, body condition, activity level, feeding goal and complete health history, including any free-text notes you typed.

We keep it to improve how the calculation works. It improves the engine itself. It is not shared outside the company, and nothing is published as research. This is product development, not a clinical trial.

Photographs are the exception — they are deleted outright, because a photograph cannot be de-identified.

Two things we want to be straight about.

Our store still holds the link between your deliveries and you: when we move your delivery records we erase the order and tracking numbers, but one fulfilment reference from the store remains on the retained record.

And deleting your account here does not ask our store, our subscription system or our website platform to delete what they hold. Their retention is governed by their own terms.

These records have no end date. We keep them for as long as they are useful to improving the calculation. Nothing in our system expires them, and we say so plainly rather than implying a limit we do not apply.

7.3 Everything else

We keep your personal information for as long as needed to run your subscription, meet our legal, tax and accounting obligations, resolve disputes and enforce our agreements.

Records relating to abuse, harassment, fraudulent submissions or legal disputes may be kept for longer, for our legal protection.

We keep website form submissions, the IP address and timestamp of each one, and our communications with you. Where a submission is abusive, fraudulent or impersonates someone, we may keep those records for longer and use them as evidence in a legal proceeding.

Our servers keep a running log. It records a customer’s email address in ordinary operation — when a portion email is sent, when an order or renewal is processed, when a subscription changes, when an email address is changed, when a dog profile is created. When a conditions lookup fails it also records the coordinates your phone sent; when a delivery-area lookup fails it records the delivery address and your account reference.

Our website uses strictly necessary cookies, analytics cookies, and where permitted marketing cookies. You can control them through your browser, though disabling some will affect how the site works. Where the law requires it we ask before setting non-essential cookies.

The app sets no cookies and contains no analytics.

9.1 California residents (CCPA/CPRA)

• Right to know the categories and specific pieces of personal information we hold about you, where it came from, why we hold it, and who we share it with.
• Right to delete the personal information we have collected, subject to exceptions required by law. Please read section 7.2 — deleting your account keeps your dog’s health records in de-identified form.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell your personal information and do not share it for cross-context behavioural advertising.
• Right to non-discrimination for exercising any of these rights.

9.2 Getting a copy of your data

We can produce a copy of the data we hold about your dog. It contains your account details, your dog’s profile, portion records, health logs, deliveries, allergies, medications, other foods, device-sync rows, notifications we sent you, concern flags, outcome evaluations and milestones.

Two honest limits. The file covers one dog — an owner with more than one dog needs one file per dog. And it does not currently include the stool and appetite answers from the weekly check-in, the weekly step total you typed, or the breakdown of the Vitality score into its parts.

To ask for a copy, email thealpha@thewolferycompany.com with “CCPA Privacy Request” in the subject line. There is no button in the app; a person produces the file. We respond within 45 days of a verifiable request.

9.3 Signing out

Signing out in the app ends the session on that phone only. It does not sign you out on another device or in a browser.

9.4 What is not available today

There is no way to delete a single dog while keeping your account. You can remove that dog’s photograph, or delete the whole account.

We use reasonable administrative, technical and physical safeguards, including encryption in transit, restricted access, and reputable third-party platforms. No method of transmission or storage is completely secure. If you think someone has reached your account without permission, contact us immediately.

Our Services are not directed at children under 13. We do not knowingly collect personal information from a child under 13. We ask for no information about your age at any point, and the app has no age gate of any kind.

If you are a parent or guardian and believe a child has given us personal information, contact us at thealpha@thewolferycompany.com and we will remove it.

We may update this policy. When we make material changes we will update the “Last Updated” date and tell you by email or a notice on the site.

The Wolfery Company LLC
2108 N St Ste N, Sacramento, CA 95816
thealpha@thewolferycompany.com

For California privacy requests, put “CCPA Privacy Request” in the subject line. We respond within 45 days of a verifiable request.