Privacy Policy
In force since 9 October 2026. This policy describes what the Cuenco app really does with your data and your dog’s: if the text and the app’s behaviour ever differed, the app prevails and we will correct the text.
Cuenco exists for iPhone (iOS) and for Android. What this policy says about your data applies to both, except where stated.
This is a translation; in case of discrepancy, the Spanish version prevails.
1. Data controller
The controller of the data collected through the Cuenco mobile app and the cuencoapp.com domain is Mario Román Sánchez, developer of the app. For any query or to exercise your data protection rights you can write to contacto@cuencoapp.com.
2. What data we process and why
Cuenco processes only the data needed to provide the service. There is no password-based sign-up, no marketing forms and no optional fields that are not used to calculate something.
Account
When you sign in with Apple, with Google or with an email link, an account is created in Supabase. We store an internal identifier and the email address associated with that sign-in. Cuenco never sees or stores your Apple or Google password.
If you start using the app without signing in, a trial session is created with no email, only an internal identifier. When you later link it to Apple, Google or your email, whatever you did in it moves to your account.
Legal basis: performance of the contract
Your pet’s profile
Name, species, breed, age or date of birth, weight, whether they are neutered, level of physical activity, body condition (scale of 1 to 9), any health conditions or nutritional conditions you declare and, optionally, a photo. Each time you change the weight or body condition it is also stored in a weight history, to show you how it evolves. This data is used exclusively to calculate the “Fit for your dog” block and the daily portion, and for that history. You provide health conditions voluntarily to refine the analysis: you can leave them out and the app keeps working.
Legal basis: performance of the contract · consent for health data
Analyses and scans
Each analysis stores the product, the score obtained, the breakdown by block and the date. When you photograph the ingredients list, the text that the camera read from that label is also stored; it is used to improve recognition and expand the ingredient dictionary. The text is stored, never the photograph.
Legal basis: performance of the contract · legitimate interest in improving recognition
Product search
When you search for a product by name, the text you type is sent to Supabase to find it in the catalogue and is not stored.
Legal basis: performance of the contract
Products you contribute
If a barcode is not in the catalogue, you can send us that product so we can add it. Only if you choose to, the barcode, the brand, the product name and type, the analysis you confirmed, the text read from its ingredients list and the photos you pick (the front of the pack and its barcode) are sent. The photos are kept in private storage: only the person reviewing the submission sees them, to check the data before the product joins the catalogue, and they are never published. Submissions are included in your data export and are deleted, with their photos, when you delete your account.
Legal basis: consent (sending it is voluntary)
Separately, when a barcode is not found and you pick the product yourself in the search, the barcode–product pair is stored, linked to your account, so that the next person who scans that bag finds it straight away.
Legal basis: legitimate interest in completing the catalogue
Which food each pet eats
To keep track of its feeding, Cuenco stores for each pet which food you give it and since when, and whether you are in the middle of a guided food change. If it is not known when a food started, the date is marked as approximate. If you log the bag you have, it also stores its size, when you started it, what you said was left if you adjust it and, if several of your pets share it, that it is the same bag.
Legal basis: performance of the contract
Daily check-in
If you use the daily check-in, Cuenco stores for each pet and day what you note down: what its stool was like (a 1 to 5 scale), itching, energy and appetite, how many treats it ate and which one (if you pick it) and, if you want, a free-text note of up to 500 characters. It is your own record: Cuenco does not interpret it or use it for any diagnosis, and it is not a substitute for the vet. We recommend not writing personal data about yourself or other people in the note.
Legal basis: performance of the contract
Report by dog food
From what you noted in the daily check-in, the weight and the food of each period, Cuenco builds a report by dog food on your phone. Nothing new is stored on the server. If you export it as a PDF, the file is created in the device’s temporary storage, carries your dog’s name and what you noted down, only leaves the device if you share it, and is deleted when you sign out or delete your account.
Legal basis: performance of the contract
Reminders
If you allow it, Cuenco schedules local notifications — that the bag is running out, worked out on the phone itself from the daily portion, or the daily check-in reminder at the time you choose. Your phone creates and shows them: they do not go through any server and need no identifier. The permission is asked at the moment it makes sense, never when you first open the app, and you can withdraw it at any time from iOS or Android Settings. Scheduled reminders are deleted when you sign out and when you delete your account.
On Android, reminders are approximate system alarms: they do not go off at the exact time. The system loses them when the phone restarts, so Cuenco keeps on the device itself a record of which reminders were scheduled, to schedule them again after a restart, when the app is updated and when the time, the time zone or the language changes.
Legal basis: consent (the iOS or Android notifications permission)
Camera
Cuenco asks for access to the camera to read the barcode on the bag and to photograph the label panel. Text recognition (OCR) runs entirely on your phone: on the iPhone, with Apple’s vision engine; on Android, with Google’s ML Kit (see below). Cuenco does not send label images to any server or store them. The only exception is the photos you choose to send when contributing a product (see “Products you contribute”). You can revoke the camera permission at any time from iOS or Android Settings; without it you only lose scanning, not the rest of the app.
Legal basis: performance of the contract
Reading labels on Android (Google ML Kit)
On Android, Cuenco reads the barcode and the label text with ML Kit, a Google kit. Its models are bundled in the app itself, so reading happens on your phone and nothing has to be downloaded to do it.
ML Kit, for its part, may send Google diagnostic and usage data about the SDK itself. According to Google’s documentation on ML Kit data, this is: device information (manufacturer, model, OS version and build), the package name and app versions, per-installation identifiers that are not intended to uniquely identify a user, performance metrics (such as latency) and the API configuration (such as image format and resolution). Google states that it encrypts the data in transit and does not transfer it to third parties.
Permissions on Android
The Android app declares these permissions, and uses them only for this:
- Camera: to read the barcode and photograph the label. It is not essential: without it you can search for products by name.
- Notifications (Android 13 or later): to show the local reminders, only if you allow them.
- Receive the system start-up notice: to schedule the reminders again after the phone restarts.
- Internet and network state: to talk to the servers in the “Who your data is shared with” section and to know whether there is a connection.
- Google Play billing: to subscribe and to restore the subscription.
Some libraries the app uses also declare their own permissions (for example, to retry in the background whatever was left pending to save). The app does not ask for location, contacts, microphone, messages or access to your files.
Subscription
Purchases and renewals are handled by Apple (App Store) on the iPhone or Google Play on Android, and RevenueCat, which receives your account’s internal identifier to link the subscription to the right profile. Cuenco stores only whether your subscription is active and its expiry date. We do not store, or have access to, your card or payment method details. The subscription works on both platforms with the same account.
Legal basis: performance of the contract
3. App usage telemetry
To know what works and what fails, Cuenco sends aggregated usage events to PostHog, which acts as a data processor. The project is hosted in the European Union region (PostHog Cloud EU): these events do not leave the EU.
- Identifier: a random value generated on your device the first time you open the app. Your account identifier, your email address and any data about your pet are never sent.
- Which events are sent, and no others: that an analysis obtained a score (with the band, whether it was personalised and whether the product came from the catalogue); that a barcode was not in the catalogue; that an analysis did not reach a score and why — and, if it was because of unrecognised ingredient terms, those individual terms (at most eight, trimmed to 40 characters) to expand the dictionary; that a product outside the scope of the current version was scanned.
- The subscription: that the subscription screen was shown, which plan you picked, where the payment stopped (started, cancelled by you or failed for a generic technical reason) and whether a conversion followed, with the plan and whether it was a purchase or a restore; whether you reached it after the questionnaire or on returning and, after the questionnaire, whether you have a current food, the band of its score and how many ingredient warnings it had (never its name or your pet's); if you closed the app with the screen in front of you without paying, how many seconds it had been open and whether you had picked a plan or started the payment; and whether you were shown the welcome price and accepted or declined it. Never any detail of the purchase itself or of your payment method.
- The journey through the first few minutes: that the app was opened for the first time on your device; that you started a trial session without an account; that you signed in or linked that session to an account, by which of the three routes (Apple, Google or email link), whether it was the first time on that device and how it ended; and which screen of the initial questionnaire you are on. For each screen, which screen you completed is sent, not what you answered on it.
- Your questionnaire answers, in aggregate: when you finish it, and when you subscribe, some answers are sent only as values from closed lists: the age stage, whether your dog is neutered, its activity level, a weight band (not the weight), the goals and symptoms you ticked, how many statements you recognised, whether it already had a food and how you found it, whether you added a photo (yes or no) and the score band. Never the name, the breed, the photo, the exact weight or the food.
- Keeping track of your pet: that the app was opened (on launch or when coming back to it) and whether it was by tapping a notification; that you started, cancelled, finished or skipped a guided food change; that you were asked for the notifications permission, from where, and whether you granted it; that you opened a notification and of which kind (bag or daily check-in); that you logged the bag size and whether it came from the catalogue or you entered it; whether, when it ran out, you chose to repeat or compare; that you saved a daily check-in, from where and whether it had a note; that you turned on its reminder; and that you opened the report or created its PDF. Never the food names, the bag size, the reminder time, what you noted in the check-in (stool, itching, energy, appetite, treats) or the text of the note.
- Technical data the analytics library adds to each event: the device model, the operating system and its version, the language, the time zone, the screen size and density, the type of network (wifi or mobile data), the app version and whether it is an emulator; and, on Android, the name of the mobile network operator and the system identification string (user agent). It describes the device, not you.
- Approximate location: until 9 October 2026 the analytics service worked out an approximate location (country and city) from the IP address for each app event. Since that date it is switched off: the IP is discarded and no location is worked out. What was already collected is kept according to the PostHog retention policy (section 8).
- What is never sent: your pet’s name or photo, email address, account identifier, the full text read from a label, location, contacts or address book.
- No automatic capture: the events above are the only ones and the app sends them one by one; inside the app, screens viewed and taps are not recorded, there is no session recording and no person profiles are created.
These events do not allow you to be identified and are not used to track you across third-party apps or websites, in the sense Apple gives to tracking (App Tracking Transparency). That is why Cuenco does not show the tracking permission request. On Android the device’s advertising identifier is not used either.
Legal basis: legitimate interest in measuring and improving the product
4. Analytics on this website
This website measures its audience with PostHog, in a project separate from the app’s and likewise hosted in the European Union (PostHog Cloud EU). It is used to know how many people reach cuencoapp.com and which pages they read, nothing more.
- No cookies: the measurement does not write any cookie to your browser and does not use local storage. That is why this website does not ask for your consent or show you a cookie notice: there is nothing to consent to.
- How you are counted without being identified: PostHog does not store your IP address. It combines it with the browser, the domain and a random key that changes every day —and that PostHog deletes once it has finished processing that day’s events— to obtain an irreversible value from which no personal data can be recovered. The visitor count comes from that.
- What is recorded: the page visited, where you came from (the referring link or search engine, including the campaign parameters that some links carry to tell which post you come from), the language and the type of device and browser, and whether you click the App Store download button.
- What is not recorded: there is no session recording, no click maps, no automatic capture of what you do on the page and no visitor profiles. Because the IP is not kept, your location is not inferred either.
This analytics is independent of the app’s telemetry: they are two separate projects and the data is not cross-referenced.
Legal basis: legitimate interest in measuring the site’s audience
5. Zero data sales principle
Unconditional commitment: Cuenco does not sell, rent or share your personal data or your dog’s with food manufacturers, commercial brands or advertising intermediaries. There is no advertising inside the app and no integrated ad networks. The only source of income is the users’ optional subscription.
6. Who your data is shared with
Only with the providers that are essential for the app and the website to work, each as a data processor and under a processing agreement:
- Supabase — database, authentication and photo storage. Data hosted in the European Union.
- PostHog — anonymous app usage telemetry and website analytics, in two separate projects. Both hosted in the European Union.
- RevenueCat — management of subscription status. Provider established in the United States; the transfer relies on the European Commission’s standard contractual clauses and is limited to the internal account identifier and the purchase status.
- Apple — sign-in and payment for the subscription on the iPhone, in accordance with its own privacy policy.
- Google — sign-in with Google, payment for the subscription on Android (Google Play) and the diagnostic data of the ML Kit SDK described above, in accordance with its own policies.
Beyond these cases, data would only be disclosed in response to a valid legal request from a competent authority.
7. Where it is stored and how it is protected
The database is hosted on Supabase infrastructure within the territory of the European Union, with encryption in transit (TLS) and encryption at rest. Row Level Security (RLS) policies are applied that prevent any user from reading or modifying other profiles’ information.
An exception you should know about: your pet’s optional photo is stored in publicly readable storage, at a path with random identifiers. Only you can upload, replace or delete it, but anyone who comes to know its exact address could view it. If you prefer to avoid this, do not add a photo: the app works the same without it.
The photos of products you contribute, on the other hand, go to private storage: they have no public address and only the person reviewing the submission sees them.
8. How long we keep the data
Your account data, your profile and your analyses are kept for as long as the account exists. When you delete the account they are irreversibly deleted, including the photo. The app telemetry events and the website analytics events, which do not identify you, are kept according to the retention policy of each PostHog project.
9. Your rights
In compliance with the General Data Protection Regulation (GDPR, EU 2016/679) and Apple’s and Google Play’s privacy guidelines:
- Access and portability: from Settings → Your data → Export my data you get a JSON file with your profile, your pets, their weight history, which food each one eats, your daily check-ins, all your analyses and the products you have contributed.
- Erasure: from Settings → Delete my account your account and all associated data (profile, pets, weight history, each pet’s food, daily check-ins, analyses, contributed products and photos) are deleted. The action is immediate and irreversible. You can also ask for it without having the app installed, by email; how it works, what is deleted and what is kept is on the Delete your account page.
- Rectification: you can edit your pet’s profile at any time from the app itself.
- Objection and restriction: you can object to processing based on legitimate interest by writing to the contact email address.
- Complaint: you can lodge any complaint with the competent supervisory authority. In Spain, the Spanish Data Protection Agency (AEPD).
10. Minors
Cuenco is not aimed at minors and does not knowingly collect data from minors. If we detect that an account has been created by a minor without authorisation, we will delete it.
11. Changes to this policy
If this policy changes, this page will be updated with a new effective date and, if the change is substantial, you will be notified within the app.
12. Right of reply for manufacturers
If you represent a brand and want to provide data or correct a product’s entry, write to replica@cuencoapp.com. We review the request against the composition certificate you provide. No brand can pay to change its score.