Loyumo Privacy Policy

Last updated: 7 October 2026. This English text describes the existing service. The app is called ZhuaZhuaShu (爪爪书) in mainland China and Loyumo elsewhere. It is the same app, operated by Xi’an Heikuan Technology Co., Ltd.

1. Information we collect

We process account identifiers, email addresses, authentication information, profile details and your date of birth to provide accounts, verify sign-in and apply age restrictions. If you choose WeChat sign-in, we process the one-time authorization code and WeChat identifiers (openid/unionid) to link your account. We do not read WeChat chats, contacts or Moments.

Dog profiles can include names, breed, sex, birthday, the date your dog joined your family, health information and photos. Location permission enables walk tracks, distance and duration, explored places and nearby features. Exact home locations and private tracks are not exposed through public feed locations. Public locations use generalized street or area labels. A dog’s avatar follows the visibility of its profile and may use public or private storage.

We also process your feed updates, follows, route ratings, personal walk notes, uploaded files, feedback and reports. Comments and likes are no longer available. Technical information can include device identifiers, operating-system details, IP addresses, request metadata, diagnostic logs and verification tokens. Notification services use device push tokens. Language, timezone, unit and country preferences are stored to display the service as you choose.

Apple Health

With your iOS Health permissions, Loyumo can write walking workouts, routes, distance and estimated active energy. It reads step counts for walk integrity checks and queries related walking workouts and routes to avoid counting the same activity twice, including activity recorded by Apple Watch or another source. Deduplication can remove workouts and related samples written by this app; it does not delete workouts written by other apps. Individual HealthKit samples and queried workouts remain on your device. With your permission, the aggregate step count for each walk is uploaded with the walk record for integrity checks, including when an offline walk is synchronized later. This aggregate is processed with Loyumo’s own walk data as described above. Manage or withdraw access in Apple Health settings; existing records can be managed in Apple Health. Refusing Health access does not prevent other app features. Workout metadata contains a walk session identifier, without dog or user names. HealthKit data is not used for advertising or marketing.

Health-derived step counts, duplicate-workout counts, overlap ratios and reconciliation outcomes are not sent to Sentry diagnostics.

2. How we use information

We use this information to operate accounts and dog profiles, record and synchronize walks, calculate activity summaries and achievements, provide requested social and discovery features, send account and walk notifications, handle feedback, screen content and investigate abuse. Optional features depend on your choices and permissions. Exercise guidance is informational and does not replace veterinary advice.

3. Sharing and public visibility

Content you choose to make public may be visible to other users or to people opening a shared link. A live-walk link is shared by the owner and can display the walk’s location; it does not display the owner’s account or contact details. Lost-dog notices display the information selected for the notice. Sighting contact details are sent privately to the owner.

Service providers process information needed to host, authenticate, store, deliver, diagnose or moderate the service. We may disclose information when required by applicable law or to address security incidents. We do not sell your location data.

4. Storage, retention and security

Information is stored in cloud services. Connections use HTTPS/TLS, and access controls are used to restrict private records. No system can guarantee absolute security or uninterrupted availability.

Account and dog records are retained while needed to provide the service. Account deletion has a 30-day waiting period; you can cancel a pending request before processing begins. After this period, we process deletion of your account and associated records. Some shared dog and walk records remain for other users. Records of deletion requests, reports, enforcement and security audits may also remain, including identifiers or content associated with you. Removing an account link does not necessarily make a retained record anonymous. Report handling policy specifies retention for at least six months; this is not a deadline for erasing all retained records. We do not currently publish a complete category-by-category retention schedule or a verified deadline for removal from provider backups. Contact privacy@zhuazhuashu.com for details about a specific request. Completed account deletion cannot be undone.

When a stored Apple authorization token is available, account deletion includes automatic revocation of Sign in with Apple access. Some older accounts do not have a stored token; this does not prevent account deletion. In that case, you can also stop using Sign in with Apple for this app in your Apple Account settings. On iPhone, open Settings > your name > Sign in with Apple, select this app or developer, tap Delete and follow the confirmation steps. See Apple’s instructions. Stopping Apple access alone does not delete your Loyumo account.

5. Processing across countries and regions

The existing app uses cloud and infrastructure providers that may process information outside your country or region, including in mainland China, Hong Kong, Singapore and the United States. This can include account and dog records, walk location data, social records, uploaded files, request metadata and anti-bot verification information, depending on the service used.

Registration asks for separate acknowledgement of these processing and storage arrangements. Do not register if you do not accept them. Existing users can request account deletion to stop use of the service. Contact privacy@zhuazhuashu.com for questions about recipients, safeguards or your information.

6. Your choices and rights

You can view and correct profile and dog information in the app, control public visibility, disable location permission in your device settings, change notification and personalization preferences, or request account deletion. Disabling location prevents location-dependent walk tracking. To request a copy of your information, ask about deletion or make a privacy complaint, use in-app feedback or email privacy@zhuazhuashu.com. Rights and applicable procedures depend on the laws relevant to your situation. We aim to respond to personal-information requests within 15 working days.

7. Younger users

New registrations and incomplete accounts in the United States and United Kingdom require the account holder to be at least 18. Elsewhere, the minimum registration age remains 12. Registration country is separate from interface language; users under 18 must provide a registration country. This in-app rule uses a supplied registration or account country and a self-reported date of birth; it does not independently verify age, identity or geographic location. An account’s recorded minimum age cannot be lowered by changing its country or language. Existing completed mainland China accounts retain their original eligibility and are not reclassified merely because the device travels abroad. These rules do not delete existing accounts, records or guardian permissions. For eligible new registrations and incomplete accounts aged 12–13 outside the United States and United Kingdom, we send a parent or guardian an email explaining the information and purposes, followed by a separate confirmation email. Both steps must be completed before account registration can proceed. This confirms access to the email address; it does not independently establish the adult’s identity or relationship to the child. Existing completed accounts are not automatically invalidated solely because they used an earlier confirmation process.

Accounts aged 12–13 use private features. Their dog records, walks, photos and notes are not made available to other users merely because those users share ownership of the dog. Public posting, public sharing and public profile changes are restricted. Optional location and Apple Health permissions can be refused or disabled; basic account and dog-profile features remain available. We do not use children’s information for advertising or marketing. Under-18 protections also restrict the following feed, broadcast notifications, behavioral personalization and public live-location links.

A parent can use the management link in the confirmation email to withdraw consent while it is required, or contact privacy@zhuazhuashu.com to ask to review or delete the child’s information. Withdrawal before age 14 blocks further use of features that collect the child’s information; it does not by itself delete existing records. From age 14, the earlier parental permission no longer controls access to the independently eligible account. Reaching age 14 or 18 does not automatically make existing records public.

We retain the notice version and language, a copy of each email’s text with private permission links removed, and the email-send and permission-action timestamps. These copies follow the same guardian-record cleanup schedules. Unbound requests expire after 14 days and are removed by scheduled cleanup. Approved permission bound to an account does not expire after 14 days. For a withdrawn permission still needed to restrict an under-14 account, contact details, email-delivery identifiers and notice copies are cleared after 90 days, while the minimum access-control record is retained. Earlier parental-permission records are removed 90 days after the user turns 14. They are also eligible for scheduled removal when the linked authentication account no longer exists, no profile references the permission record, and more than 90 days have passed since the permission was bound to the account or withdrawn, whichever occurred later. This period is not measured from account deletion. These schedules concern our guardian-permission records; they do not promise equivalent erasure deadlines for providers’ email logs or backups.

8. Third-party services

Supabase: account authentication, database and file storage.
Vercel and Alibaba Cloud: hosting, request handling and infrastructure.
Apple MapKit and map providers: map display and location-related requests.
AMap and a configured private Nominatim-compatible service: place lookup or map images, depending on configuration. These requests can include coordinates or walk tracks.
QWeather, the US National Weather Service (NWS), Apple Weather and MET Norway (met.no): weather requests using lookup coordinates, including generalized area centres. US locations use NWS first, and requests to NWS or Apple Weather use a generalized area centre; Apple Weather is a temporary display fallback and is not stored as long-term protection evidence.
APNs: device tokens and notification delivery.
Sentry: diagnostics and performance information; public diagnostic reporting is designed to exclude user content and exact locations.
Tencent WeChat OpenSDK: optional WeChat authentication.
Resend: transactional emails such as registration verification, parent notices and confirmations, administrator invitations and support replies.
Alibaba Cloud content security: uploaded text and images for content screening.
Cloudflare Turnstile: IP addresses, browser metadata and verification tokens for anti-bot checks.
Cloudflare Workers AI: submitted text fragments for moderation assistance.

We require service providers that process personal information on our behalf to protect it to the same level described in this policy, use it only for the disclosed service purposes, and apply appropriate confidentiality, security and deletion safeguards. We remain responsible for our selection and use of these providers. Their own privacy terms also apply to their services; those terms do not replace our responsibilities under this policy. Availability of a feature or provider can vary by platform and configuration.

9. Personalization

Personalized memories use walk history and preferences. Nearby same-breed discovery uses generalized location and breed details and requires opt-in. Milestone and completed-walk messages can depend on activity. Change personalized content preferences in Settings → Privacy and content. Turning them off stops the related personalized generation and display; it does not turn off account-security messages. Behavioral personalization is not enabled for users under 18. This includes both generating and displaying memories selected using walk history and preferences; an enabled personalization preference does not override this age restriction.

10. Changes to this policy

We may update this policy when the service or applicable requirements change. Material changes will be notified in the app and may require renewed acknowledgement.

11. Contact and operator

Privacy: privacy@zhuazhuashu.com. Support: support@zhuazhuashu.com. You can also use in-app feedback.

Operator: Xi’an Heikuan Technology Co., Ltd. Unified Social Credit Code: 91610104MAB0QU6L0R. Registered address: Room 10104, Unit 1, Building 1, No. 4, Jianguolu Xuanfengqiao, Beilin District, Xi’an, Shaanxi 710000, China.

We aim to review reports within 24 hours, and urgent safety or child-protection reports as soon as possible. These are response targets, not guaranteed deadlines. Loyumo is not an emergency service.