Privacy Policy
Who we are
Yomp is operated by Yomp.Dog — a dog-friendly places finder for the UK. This policy covers both the Yomp website and the Yomp Android app.
What we collect and why
We collect the following data to provide and improve the service.
| Data | Purpose | Lawful basis |
|---|---|---|
| Device location | Show nearby dog-friendly venues | Consent — you grant location permission |
| Google account data (name, email, profile photo) | Identify your account and personalise your experience | Contract — Art 6(1)(b) |
| Dog profile (name, breed, age group) | Personalise greetings and recommendations | Contract — Art 6(1)(b) |
| Profile photos (member and dog avatars you choose to upload) | Display your profile and dog avatars in the app | Contract — Art 6(1)(b) |
| Place interaction signals — per-attribute votes (dogs inside, enclosed garden, water bowls, dog treats, on-lead only) | Improve venue data for the community. Legitimate interests assessment conducted — low privacy impact; users expect in-app actions to improve the product. | Legitimate interest — Art 6(1)(f) |
| Aggregated venue attribute scores (derived from votes — not directly linked to your account) | Display community-verified dog-friendly attributes on venue listings | Legitimate interest — Art 6(1)(f) |
| Sign-in audit log (timestamp, truncated user-agent) | Security monitoring and abuse prevention. Legitimate interests assessment conducted — minimal data collected (timestamp and truncated user-agent only); no overriding prejudice to user rights. | Legitimate interest — Art 6(1)(f) |
| Device preferences (category, season theme) | Persist your preferences across devices | Contract — Art 6(1)(b) |
Location is processed transiently to query nearby venues. We do not store your location history or track your movements in the background.
Any profile photos you upload (your own avatar and your dogs’ avatars) are stored in Firebase Storage under a private, account-scoped path, limited to image files of up to 5 MB each, and are readable only by signed-in users. They are deleted when you delete your account.
Cookies and local storage
Essential (always on)
These are strictly necessary for Yomp to work. Under UK PECR Regulation 6(4)(b), no consent is required.
- Firebase Authentication session — keeps you signed in across page loads.
- Cookie consent record (
yomp-cookie-consent) — remembers your choice so we don’t ask again. - Local preference cache — temporary local copies of your dog profile, preferred category, season theme, and recently seen place IDs.
Error monitoring (always on, legitimate interest)
We use Sentry to capture crashes and errors so we can fix bugs, on both the Yomp website and the Yomp Android app. Legal basis: UK GDPR Art 6(1)(f). Session replay is disabled. Sentry does not receive user identifiers — error reports contain crash, diagnostic, and stack-trace context only, not linked to your identity. On the Android app, Sentry additionally attaches a random per-install identifier so crashes from the same device can be grouped; it is not linked to your account or identity.
Analytics
We use analytics to understand how Yomp is used so we can improve it. Analytics data is not linked to your identity — we do not attach your name, email, or account ID to any analytics event, and no analytics user profiles are created.
- Vercel Analytics — page-view metrics, not linked to your identity.
- Vercel Speed Insights — Web Vitals (LCP, INP, CLS), not linked to your identity.
- PostHog — product-usage events (page views and in-app actions such as searching, saving a venue, or voting on dog-friendliness), device-scoped and not linked to your identity. Autocapture and session recording are disabled; we send only named events. Data is processed on PostHog’s US Cloud.
On the Yomp website, analytics are on by default under the UK Data (Use and Access) Act 2025 statistical-purposes basis. You can opt out at any time in Me › Account › Analytics.
On the Yomp Android app, PostHog analytics are off by default and are enabled only if you give explicit consent when prompted. You can withdraw that consent at any time in the app’s Me › Account › Analytics settings.
Withdrawing consent
You can turn off analytics at any time in Me › Account › Analytics.
Data retention
| Data | Retention |
|---|---|
| Device location | Not stored. Processed transiently to query nearby venues and immediately discarded. |
| Account and dog profile | Held while your account is active. Deleted immediately when you delete your account. |
| Profile photos (member and dog avatars) | Held while your account is active. Deleted when you delete your account. |
| Place interaction signals | Your individual vote records (place_signals) are deleted immediately when you delete your account. Aggregated venue attribute scores are derived from votes and are not recalculated on account deletion — your contribution to a venue's aggregate scores is retained in the aggregate and is no longer linked to your account. |
| Sign-in audit log | 90 days, then automatically deleted. |
| Cookie consent record | Until you clear your browser data for yomp.dog. |
| Local storage preferences | Until you clear your browser data, or immediately on account deletion. |
Data processors
We use the following third-party processors to operate the service.
| Processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Google Firebase (Auth + Firestore + Storage) | Authentication, database, and profile photo storage | USA | Standard Contractual Clauses |
| Vercel | Hosting and serverless functions | USA | Standard Contractual Clauses |
| Sentry | Error monitoring | USA | Standard Contractual Clauses |
| PostHog | Product analytics — no user identifiers | USA | Standard Contractual Clauses |
| Google Places API | Venue data — server-side only, no personal data transmitted | USA | Standard Contractual Clauses |
| Upstash | Redis cache for venue search results — no personal data stored | USA | Standard Contractual Clauses |
| Resend | Transactional email | EU | — |
| Stadia Maps | Map tile rendering | USA | Standard Contractual Clauses |
Resend receives your email address only to deliver account-related emails and does not retain it beyond delivery.
We do not serve advertising within the app. Some outbound links to venues, accommodation, or products may be affiliate links, and Yomp may earn a commission if you make a booking or purchase through them, at no extra cost to you. Affiliate links do not involve sharing your personal data with the linked provider.
Your rights
Under UK GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data
- Restrict how we process your data
- Portability — receive a copy of your data in a machine-readable format
- Object to processing where our lawful basis is legitimate interest
To exercise any of these rights, use the Me tab in the app or email hello@yomp.dog. We will respond within one calendar month.
You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
Automated decision-making
Yomp does not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Local storage keys
Yomp stores a copy of your preferences locally on your device for faster loading. These are not used for tracking or analytics.
| Key | Contents |
|---|---|
yomp_onboarding | Temporary copy of your dog's name, breed, and age. Enables instant loading without a network round-trip. |
yomp_seen_places_v1 | Recently viewed place IDs (up to 500). Prevents the same place appearing repeatedly. |
yomp_preferred_category_v1 | Your preferred browse category (e.g. Pubs, Parks). |
yomp_theme_mode_v1 | Your chosen season theme (auto, spring, summer, autumn, or winter). |
yomp:lastLocation | Your most recent search location. Used to restore results without a network round-trip on next open. Cleared when you clear your browser data. |
yomp-cookie-consent | Records your analytics opt-out preference, if you have turned analytics off. |
Changes to this policy
We will update this page if anything changes and revise the date at the top. We will notify you of any material changes via email or in-app notice.