Privacy policy

This policy covers both our marketing website peppula.com and the Peppula app used by professional dog groomers. Peppula is currently in private beta.

1. Who we are

Peppula ("we", "us", "our") is currently operated as a registered Belgian sole trader (zelfstandige / indépendant): Rajarshi Bhattacharjee, BCE/KBO number BE1028.715.583, established in Belgium. The sole trader is the data controller for personal data collected through peppula.com and the Peppula app during this closed, invite-only beta phase. Once Peppula BV is incorporated, the controller will transfer to the company and this page will be updated; existing users will be notified by email.

Processing is governed by Regulation (EU) 2016/679 (GDPR) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Contact: info@peppula.com.

2. What we collect and why

2.1 Website (peppula.com)

• Beta access form — name, email, business name, city, and a free-text "about" field. Used to evaluate and grant access to the private beta. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
• Website chatbot — your messages, optionally your name and email if you share them, plus a conversation ID. Stored on our backend so we can improve the assistant and respond to leads. Legal basis: legitimate interest (Art. 6(1)(f)); consent (Art. 6(1)(a)) when you voluntarily share contact details.
• Analytics (Google Analytics 4) — anonymized IP, page views, button clicks, device/browser type. Loaded only if you accept analytics cookies. Legal basis: consent (Art. 6(1)(a)).
• Email notifications — when you submit a form or start a chat we send an internal notification to info@peppula.com via Resend. Legal basis: legitimate interest (Art. 6(1)(f)).
• Technical logs — minimal request metadata kept by our hosting and backend providers for security and debugging. Legal basis: legitimate interest (Art. 6(1)(f)).

2.2 Peppula app

Account data: email address (via Google Sign-In), name (entered during onboarding), optional phone number, salon name and address.

Dog and appointment data: dog names, breed and owner contact details, appointment dates, times and status, coat assessment results and groomer notes, grooming workflow selections and pricing.

Photos: photos taken during coat assessments. Photos are processed to remove location metadata (EXIF/GPS) before storage or analysis.

Usage data: assessment decisions (confirmed/dismissed conditions), anonymized feature usage analytics, crash reports (device type, OS version, error details).

3. AI processing

Peppula uses artificial intelligence in two ways:

• In the app — coat assessments. On-device models (CLIP, breed classifier) run locally on your phone; no data leaves the device. For enhanced analysis, compressed photos stripped of location metadata are sent securely to the Google Gemini Vision API, which returns breed and coat condition suggestions only. Google does not use your photos to train their models (per Google Cloud terms). Every AI suggestion can be confirmed, modified, or dismissed by you and does not replace professional judgment.
• On the website — chatbot. Messages are routed through the Lovable AI Gateway to a large-language model to generate replies.

4. Who we share data with (processors)

We do not sell personal data and do not share it with advertisers.

International transfers. Some processors (Google, Resend, Lovable AI Gateway) may process data in the United States. Where data leaves the European Economic Area, transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs, Decision 2021/914), together with the processors' supplementary measures. Primary storage is provisioned in an EU region (AWS Frankfurt) where available.

5. Where data is stored

• Local: on your device (SQLite database, encrypted in transit).
• Cloud: Supabase on AWS EU (Frankfurt region).
• AI processing: Google Cloud EU endpoints.

6. How long we keep your data

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15) — in the app: Profile > Export my data.
• Request correction of inaccurate data (Art. 16) — edit in app or contact us.
• Request deletion ("right to be forgotten") (Art. 17) — in the app: Profile > Delete Account.
• Restrict or object to processing (Art. 18 and 21).
• Data portability (Art. 20) — in the app: Profile > Export my data.
• Withdraw consent at any time (e.g. notifications via device settings), without affecting prior processing.

For website requests, the easiest way is the data request form, or email info@peppula.com. We respond within 30 days (GDPR Art. 12(3)).

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be — dataprotectionauthority.be.

8. Data deletion

When you delete your app account:

• All profile data is permanently deleted.
• All dogs, appointments, and assessments are permanently deleted.
• All photos are permanently deleted from cloud storage.
• Local data on your device is cleared.
• This action is irreversible.

9. Cookies

We only set non-essential cookies on the website after you consent via the cookie banner. See our cookie policy for the full list.

10. Children

Peppula is a professional B2B tool for dog groomers and is not directed to children under 16. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this policy as the product evolves. The "last updated" date at the top will change and material updates will be announced on this page and, for the app, in-product.

12. Contact

Email: info@peppula.com.