Privacy Policy
K9Axion · version 2026-10-31.1
1. Who we are
K9Axion is run by Lanelyn Anitubo, doing business as K9Axion, who is responsible for your personal information under the Data Privacy Act of 2012 (RA 10173). Data Protection Officer: Lanelyn Anitubo, privacy@k9axion.com. This notice covers customer (dog owner) accounts.
2. What we collect
| Information | Source | Details |
|---|---|---|
| Account | You | Your email address and, if you sign in with a password, that password stored only as a secure hash (never readable). |
| Google sign-in (if you use it) | Name, email address, profile picture and Google account ID. We never receive your Google password. | |
| Google sign-in tokens | Access and refresh tokens needed for sign-in, stored encrypted. Google's ID token is checked at sign-in and not stored. | |
| Sign-in sessions | Your device | Session identifier, IP address, browser type and session times, to keep you signed in and let you sign out everywhere. |
| Security records | Your device | IP-based counters that slow down repeated sign-in attempts. |
| Terms acceptance | You | Which version of these documents you accepted, and when. |
| Training records | You | Your dogs' names, training sessions, dates, durations, commands, repetitions, results and notes. |
| Pro purchases | Paddle | Your plan, subscription status and renewal dates, and Paddle's customer and subscription IDs. Paddle handles your payment details; we never receive your card number. |
| Messages to us | You | What you send in support, privacy or deletion requests. |
We don't ask for sensitive personal information (such as health, religion or government ID). Please don't put it, or other people's personal information, in your notes. We don't use your device's health or activity data for customer accounts.
3. Why we use it
- To create and secure your account and keep you signed in.
- To store and show your dogs and training records, and summaries of them.
- To protect the Service, for example by stopping repeated wrong sign-ins and investigating misuse.
- To answer your requests and send messages about your account or these documents.
- To meet legal obligations and to establish or defend legal claims.
We don't sell your personal information, use it for advertising, or use your training records to build products for others. We don't make automated decisions with legal or similarly significant effects on you.
4. Legal basis
We process your information because it's needed to provide the Service you signed up for (RA 10173 §12(b)), for our legitimate interest in keeping the Service secure (§12(f)), and where the law requires it (§12(c)). Where we ask for consent, you can withdraw it at any time.
5. Who sees your information
Your training records are private to your account. Trainers and other customers can't see them. Our staff and contractors access them only when needed for support you request, security, or a legal obligation.
We use these service providers, who process information only on our instructions:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database (account, sessions, training records) | Mumbai, India (ap-south-1) |
| Vercel | Hosting and app servers | Mumbai, India (bom1); content delivery worldwide |
| Sign-in (if you use Google) | Google's global infrastructure | |
| Paddle | Pro checkout, payments, invoices and sales taxes (Merchant of Record) | Paddle's global infrastructure |
| Resend | Sending account emails (sign-in links, password resets, reminders you turn on) | Resend's infrastructure |
We may also disclose information to courts, regulators or law enforcement when the law requires it, and to professional advisers under confidentiality.
6. Where it's stored
Your information is stored and processed outside the Philippines, mainly in India, by the providers above. We remain responsible for it and require providers to protect it under their data processing terms.
7. How long we keep it
- While your account exists: account and training records.
- When you delete your account: account, sign-in details, sessions, dogs, training records and Terms records are removed right away. Records of past Pro payments are kept by Paddle as tax law requires.
- Backups: copies made before deletion are kept for up to 30 days, then deleted.
- Security records: sign-in attempt counters are deleted within 2 days.
- Support messages: kept for 12 months after the request is closed.
8. Your rights
Under RA 10173 you have the right to be informed, to access and correct your information, to object, to have it erased or blocked, to data portability, and to claim damages. You can:
- See and correct your training records in the app.
- Delete your account in the app: Settings → Delete account.
- Ask for a copy of your information or anything else at privacy@k9axion.com. We'll verify it's you and reply within 15 days.
- Complain to the National Privacy Commission at privacy.gov.ph.
9. Cookies and browser storage
| Name | Purpose | Type |
|---|---|---|
| __Secure-k9customer.session_token (k9customer.session_token on non-secure connections) | Keeps you signed in | Necessary |
| Short-lived sign-in cookies set during Google sign-in | Protect the sign-in step against forgery | Necessary |
| Paddle checkout cookies | Set by Paddle on the checkout step only, to process your payment and prevent fraud | Necessary |
| k9theme, k9style | Remember light/dark mode and display style | Preference |
We don't use analytics or advertising cookies.
10. Google user data
K9Axion's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. We use your Google name, email address and profile picture only to create and identify your account. We don't use Google data for advertising, sell it, or let people read it except as needed for security, the law or with your consent.
11. Security and breaches
Connections are encrypted; Google sign-in tokens are encrypted at rest; customer sign-in runs on a separate, restricted database account; each customer's records are kept apart from everyone else's; sign-in attempts are rate-limited. No system is perfectly secure. If a breach is likely to harm you, we'll notify you and the National Privacy Commission within 72 hours of knowing about it, as the law requires. Report security concerns to support@k9axion.com.
12. Children
The Service is for people 18 and older. If you're under 18, a parent or guardian must create and manage the account. If we learn that a child's information was collected without this, we'll delete it. Parents can contact privacy@k9axion.com.
13. Changes
If we change this notice in a way that matters, we'll show the new version in the app and ask you to accept it before you continue. Each version has a date, and the app records which one you accepted.
14. Contact
Lanelyn Anitubo, doing business as K9Axion, Barangay Mambawi, Alimodian, Iloilo 5028, Philippines. Data Protection Officer: Lanelyn Anitubo, privacy@k9axion.com. Website: k9axion.com. National Privacy Commission: privacy.gov.ph.