Privacy Policy

1. Information We Collect

1.1. Information You Provide

When you use the Application, we collect personal information that you voluntarily provide, such as your name, your handle, the short text you write about yourself, your email address, your pets' profiles, and photos you upload (for example, pet and profile pictures).

1.10. Hazard Reports and Watched Areas: If you report a map hazard (such as broken glass, a poisoned-bait risk, an aggressive dog, hazardous chemicals, or an open pit), we collect the hazard type, an H3 hexagon cell of about 150 metres around the location, and your account identifier; other nearby signed-in users can see the report, and confirming or dismissing it records their account identifier against that vote. Reports expire automatically between 14 and 180 days after they were last confirmed, depending on the hazard type. Separately, you may declare up to 5 areas you want hazard alerts for — for example your home, your workplace, or a parent's place — by choosing a location and an optional label; we store the H3 hexagon cell and label for each area against your account for as long as you keep it, with no automatic expiry, until you remove it or delete your account.

1.11. Air-Raid Shelter Contributions: If you add an air-raid shelter marker to the map, report that an air-raid shelter is no longer accessible, or mark an air-raid shelter as accessible with your dog, we record your account identifier, which specific shelter it was, the timestamp, and the type of contribution. You are recording this information against a shelter location, which may originate from official municipal data rather than a user contribution. These records are retained in your account unless you delete your account. Air-raid shelter locations in Kyiv come from an official municipal open dataset published by Київська міська державна адміністрація (Kyiv City State Administration) under a CC-BY license. Adding a shelter marker or reporting on one requires that your device report a location near the shelter at the time of contribution, using your client-reported GPS position; the application does not independently verify your physical presence at the location. Shelter-accessibility reports are visible to other signed-in users.

1.12. Walk-Together Invitations and Messages: If you invite another walker near you to walk together, we store that invitation with your account identifier, the recipient, the walk it referred to, the template you chose or the message you wrote (up to 140 characters), and, if you chose one, a public meeting place taken from the map and a meeting time. We separately record every invitation attempt you make, including attempts that were not delivered, for up to 90 days; that record exists only to enforce the invitation limits and is never used to tell you whether an invitation reached anyone. An invitation and its text are deleted within 24 hours. If the invitation is accepted, a short conversation opens and is deleted in full 24 hours after the acceptance. To send an invitation you must confirm that you are 18 or older; we store that confirmation and the time it was given, and we never ask for your date of birth. Once you have given that confirmation, every walk you start is marked as open to company automatically, without asking again. You can switch that off in the walk panel; we remember the choice and stop marking your later walks. If you have never confirmed your age, your walks are never marked.

1.13. Favourite Places: If you save a place to your favourites, we store the place identifier and the time you saved it against your account for as long as you keep it. Your favourites are private: no other user can see them, and they are not used for any counter or recommendation shown to others. Removing a favourite deletes the record at once, and deleting your account deletes all of them.

1.14. Place Corrections: If you report that a place on the map is closed, not welcoming to dogs or listed under the wrong category, we store that report with your account identifier, the place, the kind of problem and, for a category report, the category you suggested. Reporting requires you to be physically near the place, which we verify on our servers as for map contributions, and is available once your account is at least a week old and you have finished a walk. Other users see only anonymous counts of reports, never who reported; once three users agree, the map is corrected automatically and a record of the change (without reporter identities) is kept for our moderators. You can withdraw your report at any time, which deletes it; deleting your account deletes all of your reports.

1.15. Invite Codes: Every account has an invite code, which is the same public identifier other users already see on your profile. Opening an invite link stores that code on your device for up to 14 days; nothing is recorded on our servers until you confirm it in the app. When you do confirm it, we permanently record that your account was invited by theirs, together with the date. That link is used to send a friend request on your behalf, to pay you 100 Paw Coins after your first qualifying walk and, if the person who invited you is eligible under the limits below, 100 to them as well, to award them a badge for the number of people they invited, and to enforce a monthly limit on how many invites one person can be rewarded for. The person who invited you sees your name and profile in their list of invites, and you see theirs. An invite code can only be confirmed while you are setting up your profile, and only once; once your profile is set up the code can no longer be used. Before offering Paste, the app checks whether your clipboard holds a link at all, without reading it. If you tap Paste, we read your clipboard once and use its contents only if they are an invite link from our site — anything else is discarded and never leaves your device. Deleting your account deletes your side of the record; where you were the inviter, the record stays with your identity removed.

1.16. Lock Screen Walk Card (iOS): While a walk is in progress, Tailomi can show a card on the lock screen and in the Dynamic Island with your pets’ names, the elapsed time and the distance so far, and on iOS 17 and later a pause button. The card is drawn by the operating system from data that stays on your device; nothing is sent to our servers for it, and it never contains your position. Anyone looking at your locked phone can read the card, so you can turn it off in Settings → App Settings → Lock screen; it is on by default. The pause button is set to require the device to be unlocked first (Face ID, Touch ID or passcode).

1.17. Walk Weather: When you record a walk, our servers look up the weather for it so that weather-related achievements and titles can be awarded. To do that we send a weather provider, Apple Weather, the date and a point on a coarse grid of about five kilometres near where the walk took place; the request comes from our server, never from your device, and carries no account identifier, no exact position and no route. We make the same kind of lookup for a day on which you recorded no walk at all, using the grid point of your most recent walk, so that a day when going outside was dangerous does not break your walking streak. For users on Android this makes Apple a recipient of that coarse location as well. The provider’s hourly figures are kept on our servers for about 48 hours and then deleted, and the queue record of which grid cell and date was looked up for your account is deleted within seven days; what stays with the walk permanently is only a derived summary — bands of temperature and wind, minutes of rain, snow or fog, and whether conditions were extreme — never the provider’s raw data. Who can see this summary is described in clause 1.18. Weather lookups are part of recording a walk and cannot be switched off separately. Separately from that, if you leave the morning weather notification switched on, once a day our server looks up the forecast for the grid point of your most recent walk so it can tell you when conditions have got worse than the day before; that answer is used to write the notification and is then discarded, and switching the notification off in Settings stops the lookup itself, not just the message.

1.18. Weather You See in the Application: The Application shows weather in two places, and they work differently. The first is the weather of a walk you already finished: the derived summary described in clause 1.17, shown on your own walk and, for a friend who has turned progression sharing on, on that friend’s walk in your friends feed — the same audience that already sees that walk’s route and distance. A person who co-owns the pet with you also sees it, both on the walk itself and inside the pet’s activity insights, which draw on the walks of every family member. Nobody outside those two audiences sees it, and it carries no temperature more precise than a five-degree band. The summary is never written as text onto a card you export to another application, but the background of that card is chosen to match the walk’s weather, so an exported card does show broad conditions — rain, snow, fog, frost, heat or a clear sky — to whoever you send it to. Straight after a walk ends the summary is not ready yet, and the background is chosen from the current conditions instead. The second is the current weather and the forecast for the next twenty-four hours, which late in the evening means tomorrow morning rather than the rest of today. At the moment you open the map or the weather sheet, your device sends our server your position, our server rounds it to the same coarse grid of about five kilometres and asks Apple Weather for that grid point, and the answer is passed back to your device and kept in the memory of the running Application. Apple receives no account identifier, no exact position and no route. We also keep that answer on our servers for a few minutes, stored against the grid point alone, so that the next lookup for the same five-kilometre cell — yours or anyone else’s — can be answered without asking the provider again; that stored copy carries no account identifier, it stops being used after ten minutes, and it is deleted within half an hour. Separately, and with no place attached at all, we record that your account was answered such a request, how many were answered today and when the last one was, and we keep that record for the current day only — it is deleted once the day is over. A single setting in Settings → App Settings switches off everything in this clause: it hides both kinds of display and stops the requests of the second kind; switching it off does not affect achievements, titles or streak protection, which are computed on our servers from the walk summary in clause 1.17.

1.19. Your Profile: Your profile carries an optional handle — a short public name you choose for yourself, unique across the Application — the optional “About me” text you write about yourself, up to 150 characters, and the month you joined. Your handle is public: it is shown wherever your name is shown, including to signed-in users who are not your friends, such as walkers near you on the map and people who find you through search. Your “About me” text is shown to your friends and to a person you have sent a friend request to, and to nobody else. The month you joined is shown to any signed-in user who can open your profile, including people who are not your friends; the day is never shown. We refuse to save text that looks like contact details — links, email addresses, messenger handles or phone numbers — so such a text is not stored at all rather than cleaned up; that check is not perfect, and you should not put contact details there. Both fields are optional, you can clear either at any time, and both are deleted when you delete your account. When you create an account we also ask for your date of birth. We keep the date itself and show other users only your age in years, never the date; an age under 18 is never shown to anyone, and with an active Tailomi Plus subscription you can hide your age entirely — switching that on stores your choice, and the age reappears if the subscription lapses. You can set the date once: changing it afterwards means writing to our support address. If the date you give says you are under 13 we refuse to finish setting up the profile, store no date, and count the refused attempt so that the answer cannot simply be retried; that count is kept for a day and counts against that account alone. We also keep the bare fact that a setup was refused, without the date you gave, until the account is deleted under clause 9.5. The account created for setup stays unusable and is removed under clause 9.5. You may pick your first handle freely; after that you can change it once every 30 days, and a small list of reserved names, including names that would pass for ours, cannot be taken. Before this version of the Application, an account created with an email address was given a username derived from that address, and that username was shown to other users in the places a handle is shown now; we have cleared those values, and no name derived from an email address is shown any more. Separately, so that one account cannot read other people’s profiles or send friend requests without limit, we keep short-lived records of those actions against your account: the profiles you opened, for about an hour and a quarter; the friend requests you sent, the ones you cancelled, and every time you unblocked someone, for about a day; the requests that were declined, for seven days, which is also how long you wait before you can ask that person again; and the fact that you tried to report someone, for up to two days. Those records exist only to enforce the limits, they are deleted automatically, and the other person is never shown them.

1.2. Content You Create

We collect content you create in the Application, such as reviews of places, pet information, and walk records. Reviews you submit may be visible to other users of the Application.

1.20. Anonymous Accounts: When you finish setting up the Application we create an account for you straight away, with no email address and no sign-in identity. It holds the name you gave, your date of birth, your pets and their photos, and your walks with their GPS routes. Because it has no sign-in identity, it lives on this device only: it cannot be restored on another device, and anyone who uses this device reaches it. What deleting the Application does depends on the platform, and neither case deletes the account itself, which lives on our servers. On iPhone and iPad the key to it is kept in the device keychain, which outlives the Application, so installing the Application again returns you to the same account. On Android that key is stored with the Application and goes with it, so after deleting the Application the account becomes unreachable and is removed under clause 9.5. To remove it yourself in either case, delete the account inside the Application. You can turn it into a permanent account at any time by adding a sign-in method, and nothing is lost when you do. Until you do, you are not visible to other users of the Application: you are not shown to walkers nearby or in city lists, you cannot send or receive friend requests, and you earn no Paw Coins. You can buy a Tailomi Plus subscription on an anonymous account. The subscription is tied to the Apple ID that paid for it, and only one account can hold it at a time. If you sign in to a different account with the same Apple ID, Plus may move to that account — sometimes by itself, sometimes once you restore purchases. Where it moves, the account it left keeps no subscription; where it does not, it stays with the account that bought it and the new account has none. Signing in with a different Apple ID gives you no subscription at all. An account with an active subscription is not deleted — see clause 9.5.

1.21. Analytics: To see where people give up while setting up the Application, and which parts of it are used, we use Google Analytics for Firebase, provided by Google. It receives the name of what you did and how it ended — setup steps, tutorial portions, the subscription screen and purchases, walks you finished and shared, photos you added, friend requests, the answers you gave to permission prompts, and the names of the screens you opened — together with a label saying whether the build is a published one or a test one. It never receives your name, your email address, your handle, any text you wrote, your pets’ names, or your location in any form: we send no coordinate, no area, no route and no name of a place. Google itself works out an approximate location, city included, from the network address your device connects from, and that we cannot switch off. We do not give Google your account identifier. Alongside our own events, Google’s library records a small set of its own that cannot be refused separately — that the Application was opened for the first time, that a session began, how long you used it, that the Application or the operating system was updated, on Android that the Application was deleted, and that a purchase was made — and attaches to each your device model, operating system, Application version, language and country. No advertising identifier is collected, and we do not follow you across other companies’ apps or websites. Google keeps this for 14 months and then deletes it. Collection happens only in the published version of the Application and never in test builds, and you can switch it off at any time in the Application’s settings, which stops it from that moment. If the date of birth you give says you are under 13, we switch this collection off for this installation and clear what is held on the device; whatever reached Google before that answer stays there until the 14 months run out.

1.3. Usage Information

We collect information about how you use the Application, including your interactions, the features you use, and performance and reliability data (such as request timing and error information) used to keep the Application working correctly.

1.4. Device Information

We collect information about your device, including the device type, operating system version, unique device identifiers, push notification tokens, mobile network information, the time zone your device reports, and the language your device reports. We store that time zone and that language on your profile — the language is used only to pick the language of the notifications we send you — and, if you use the Dog Training feature, on each training session you log, so that daily features such as training streaks and reminders use your local day.

1.5. Location Information

We collect precise location information (via GPS), including while the Application runs in the background during an active walk, in order to record your walk route and provide location-based features. If you choose to share your live location with friends, your location is transmitted to those friends while sharing is enabled. While a walk is active, your shared location, display name, handle, profile photo, the pets on that walk, and whether that walk is marked as open to company are also visible on the map to other signed-in users near you, including users you are not friends with; this stops when the walk ends, and turning off live location sharing removes you from that map. Separately, for up to seven days after a walk, the fact that you walked in a given city, together with your display name, handle, profile photo, pets and the day you walked, is visible to other signed-in users of the Application, not only to users physically near you; this never includes any coordinate. Turning off live location sharing does not remove you from that seven-day city list: the list is derived from the walk you recorded, not from your live position. The setting that removes you from it is "Hide me from nearby walkers", and that setting takes effect only while you have an active Tailomi Plus subscription; without an active subscription the only way not to appear in the city list is not to record walks. When you send a walk invitation to a friend, you may optionally include a precise meeting location, which we store with that invitation. Background location tracking only occurs while a walk is active, and you can stop it at any time.

1.6. Subscription Information

If you purchase a Tailomi Plus subscription, we collect and store your subscription status, the product purchased, its expiry date, the app store the purchase was made through, and identifiers for the related purchase events. We never receive or store your payment card details; payment is processed by the app store. Some features that require an active subscription, such as hiding yourself from the nearby-walkers map, stop taking effect while your subscription is inactive and take effect again if it resumes; a billing event never changes the settings you saved.

1.7. Training Content

If you use the Dog Training feature, we collect the training sessions you log for your pet, including the skill, level, outcome, and the date and time zone of each session. If you choose to share a skill-mastery achievement with your friends, we collect the photo and the caption (up to 280 characters) you attach to that post.

1.8. Content Reports

If you report another user's content, such as a shared training post, we collect your identity as the reporter, the type of content reported, and any details you choose to provide, up to 500 characters. We use this information to review the report and, where warranted, restrict the reported content's visibility; we do not share your identity as the reporter with the user whose content you reported. You can also report a person's “About me” text or their handle, whether or not you are their friend. For such a report to count towards hiding the text, your account must be at least seven days old and have at least one walk of at least 500 metres and 10 minutes; a report from a newer account is still recorded — with your identity, the details you wrote and the copy of the text — but it does not count towards hiding. For those two kinds of report we also store a copy of the text as it stood when you reported it, so that a reviewer sees what you saw. When three different eligible people report the same wording, it is hidden automatically; a hidden “About me” text looks to everyone else exactly as if it had never been written, and you can see on your own profile that yours was hidden. Editing the text clears the count and starts it afresh. We keep the copy of the reported text and the details you wrote for 90 days, the report itself for 180 days, and the log of what was hidden or restored, and by whom, for a year; the record that a particular wording of yours is currently hidden stays with your account until the account is deleted. A decision we make about a particular wording is permanent for that wording: once we have restored it, that exact text is never hidden automatically again, and once we have hidden a handle, that exact handle stays reserved and cannot be taken by anyone unless we release it ourselves. The first time your handle is hidden you may choose a new one straight away; if it is hidden again within 180 days, the usual 30-day wait applies before you can change it.

1.9. Map Contributions

If you add a place to the map, such as a water fountain or a bag dispenser, we collect the coordinate you were physically near and the category you chose, and we publish that submission publicly and permanently on the map for every signed-in user to see. We also store the H3 hexagon cells covering that coordinate. When you or another user confirms a contributed place or marks it as no longer there, we record that vote against your account. Adding a place or voting on one requires you to be physically near the location, which we verify on our servers using your recent walk or live-location data. Separately, when you complete a qualifying walk (at least 500 metres and 10 minutes), we derive and store a coarse record of the areas you walked in, at a resolution of about 170 metres, against your account for about 8 days. We use this record only to show other users an anonymous count of how many people walked near a place; we never show who walked there, and we only show a count once at least 3 other people qualify.

1.9a. Place Addresses: When you open the card for a vet, pet store, groomer, boarding, dog trainer or dog-friendly venue, your device asks the map provider on your platform (Apple on iOS, Google on Android) to turn that place’s own published coordinate into a street address. The coordinate we send is the place’s, never yours, and we never send your identity or your account. We do not store the result on our servers; it stays on your device. Places that are not buildings — parks, dog parks, drinking water, bag dispensers and air-raid shelters — are never geocoded, and neither are hazard reports or meeting points.

2. How We Use Your Information

2.1. We use the information we collect for the following purposes:

• Providing and improving the Application, including GPS walk tracking and maps;
• Enabling social features, such as sharing your live location with friends you approve and sending walk invites;
• Showing nearby pet-friendly places and place reviews;
• Sending push notifications you have enabled;
• Communicating with you and responding to your inquiries;
• Detecting, preventing, and addressing technical issues;
• Complying with legal obligations.
• Showing walkers near you on the map while a walk is active, and showing you to them;
• Providing, restoring, and managing Tailomi Plus subscriptions;

3. How We Share Your Information

3.1. We share your personal information only in the following circumstances:

• With other users: your profile and, if you enable location sharing, your live location are shared with the friends you have approved. During an active walk, that same live location, your display name, handle, profile photo, and the pets on the walk are also shown to other signed-in users near you who are not your friends. If you share a skill-mastery post from the Dog Training feature, its photo and caption are visible to your approved friends until you remove the post or it is hidden through content moderation. Reviews you post may be visible to other users.
• Walk invitation meeting points: When you send a walk invitation to a friend, you may optionally attach a precise meeting location (GPS coordinates), a short label, and a meeting time. This location is precise and is not coarsened by your live location sharing setting. It is shown to the person you invited, and it stays readable to the two of you for no longer than 24 hours after the invitation was last changed. We erase the meeting location, label, and time within 24 hours and 15 minutes of that change; we erase them immediately if either of you removes the other as a friend; and they are deleted together with your other data when you delete your account.
• Walk-together invitations: the invitation you send, its text and the meeting place you chose are shown to the person you invited. Whether they accept, ignore or refuse it is never disclosed to you. If they accept, the messages the two of you exchange are visible only to the two of you and are erased 24 hours after the acceptance.
• Pet photos and pet profile links: the photos you add to a pet are stored privately and are shown to the people who can already see that pet — the members of that pet’s family and, while “Share progress with friends” is switched on, the friends you have approved. When you share a pet profile link, any Tailomi user who holds that link can open the profile together with its photos; the link works for 30 days from the moment you share it and sharing again replaces it, so only the newest link opens; it also shows photos you add after you shared it, and it stops working when those 30 days pass, when you share a new link, or when the pet is deleted. One exception: if you post a pet profile to the friends feed, that post keeps opening the profile and its photos for the friends you have approved regardless of the 30 days and of any newer link, and a post cannot be taken back — it goes only when the pet or your account is deleted. Removing a photo removes it for everyone. When you delete your account, the photos of a pet owned only by you are deleted along with the rest of your data; if that pet is co-owned with a family member, the pet and its photos stay with the household and are disassociated from your account, as described in section 9.2.
• With service providers: we use trusted third parties to operate the Application, including Supabase (database, authentication, and storage hosting), Google Maps (map display on Android, and turning a place’s own coordinate into a street address on your device), Apple (map display on iOS, turning a place’s own coordinate into a street address on your device, App Store purchase processing, the Apple Push Notification service, APNs, and Apple Weather, which supplies the weather for your walks as described in clause 1.17), OpenStreetMap data providers (independently operated Overpass API servers in the European Union that supply information about nearby pet-friendly places; the request is sent by our servers rather than your device and carries only a coordinate rounded to about one kilometre, never your precise position, your identity, or your account), RevenueCat (subscription management and purchase validation), Brevo (delivery of account emails such as sign-in and password-reset messages), Google Firebase (Firebase Cloud Messaging, FCM, for push notifications), and Sentry (crash and error diagnostics: when the Application crashes or hits an unexpected error, we send Sentry the technical details of the failure — the error type and message, the code stack trace, the app release, and your device model and operating system version. We strip the structured context of the event and redact e-mail addresses, coordinates, map cells, identifiers and links out of the error text before sending, so this report is not a route by which your name, your email address, your position or the map cells you have visited reach Sentry). If you sign in with Google or Apple, that sign-in is processed by the provider you chose. To manage your subscription we send RevenueCat your account identifier together with the purchase receipt from the app store and basic device information; we do not send it your name or your email address. A push notification may include the name of the friend who triggered it and your device push token. These providers process data on our behalf to provide their services.
• Website and support correspondence: our website and legal pages are hosted by Cloudflare, which also routes email sent to our support address. If you contact us by email, Cloudflare and our email provider process that message, including your email address and anything you choose to include in it.
• As required by law or to protect our rights, safety, and the safety of others.
• With your consent or at your direction.

We do not sell your personal information, and we do not use it for third-party advertising or tracking.

4. Data Security

4.1. We take reasonable measures to protect the security of your personal information and prevent unauthorized access, disclosure, or alteration. However, please note that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Children's Privacy

5.1. The Application is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us, and we will take steps to remove the information.

6. Your Rights and Choices

6.1. You can control location sharing at any time from your device settings and within the Application. You may request access to, correction of, or deletion of your personal information, including deletion of your account, by contacting us at the address below.

7. Changes to This Privacy Policy

7.1. We may update this Privacy Policy from time to time by posting a revised version on our website or within the Application. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Application after the posting of changes constitutes your acceptance of such changes.

8. Contact Us

8.1. If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at [email protected].

9. Data Retention and Deletion

We retain personal information we collect from you for as long as we need it to fulfill the purposes for which it was originally collected, unless otherwise required by law. When personal information is no longer needed, we will delete or anonymize it in a secure manner. When you delete your account, your subscription record is deleted from our database together with the rest of your data, and we ask our subscription management provider to delete the subscriber record associated with your account.

9.2. Retention on Shared Pets After Account Deletion

If your pet is owned only by you, deleting your account deletes that pet's photos, your training sessions, skill-mastery titles, and skill status records for that pet along with the rest of your data. If your pet is co-owned with another family member, those same records stay attached to the pet so the household does not lose its pet's history, but they are disassociated from your account: your user identifier is removed from them and cannot be restored.

9.3. Retention of Map Contributions After Account Deletion

Places you added to the map stay on the map after you delete your account, since other users may rely on them, but they are disassociated from your account: your user identifier is removed from them and cannot be restored. Your votes on other users' places are deleted along with the rest of your data.

9.4. Retention of Handles After a Change or Account Deletion

When you change your handle, we keep the old one for about 30 days, so that nobody else can take it straight away and pass for you; that record is kept against your account, so your own former handle is never the one being held against you; the ordinary rule that you may change your handle once every 30 days still applies. When you delete your account the same 30-day hold applies, but the record is kept with no account identifier at all. After that the handle becomes available again. A handle we have hidden is different: we keep that string, with no account identifier, for as long as it stays reserved — indefinitely, unless we release it ourselves — and nobody else can take it, including after the account that held it has been deleted.

9.5. Retention of Anonymous and Unfinished Accounts

An anonymous account is deleted after 90 days without activity, where activity means your last completed walk or the last time the Application refreshed your session on this device. An anonymous account is not deleted while it has an active Tailomi Plus subscription, including a store grace period after a failed renewal; once the subscription ends, the rule above applies again. An account we refused to finish setting up because the date of birth given says you are under 13 is deleted seven days after that refusal, whether or not it has a sign-in method, unless you come back and finish setting it up in the meantime, or it holds an active subscription as described above; such an account holds no pets and no walks, and what is left of it — the refusal, and an email address where there is one — goes with the deletion. Deletion removes your pets, your walks and their routes, and the photos stored for them, and we ask our subscription processor to delete the purchase record it keeps under your account identifier; places you added to the map follow clause 9.3.