Policies
Privacy policy
What we collect, why, who helps us handle it, and how you can see, change or delete it.
Who's responsible
is operated by , based in . We're responsible for the personal information described here and follow Canada's federal privacy law (PIPEDA). Our privacy officer handles questions and requests:
What we collect
- From your Google account when you sign in: your name, email address and, if Google provides it, a link to your profile picture. We never see your Google password.
- About your pet: their name and breed, which go on your certificate.
- Your learning: which courses you own, the lessons and quizzes you've completed, your skills checklist and your certificates.
- Purchases: what you bought, the amount, the date and Stripe's reference for the payment. Stripe collects your card details and may collect your country and postal code. We never see or store your full card number.
- Messages: your name, email and whatever you write when you use the contact form.
- Technical data: our hosting and database providers keep short-term logs, including IP addresses, to run the site securely and stop abuse.
We don't use advertising or analytics trackers, and we don't use cookies to follow you around the web. Your browser stores a sign-in session so you stay logged in; logging out removes it.
How we use it
- To create and run your account and give you the courses you bought.
- To track your progress and issue and verify certificates.
- To process payments, prevent fraud and keep the records tax law requires.
- To answer your messages and send service emails, such as receipts and notices about your courses or these policies.
We don't sell your personal information, share it for targeted advertising, or send marketing emails unless you've opted in. You can opt out of marketing emails at any time.
What's public
Once a certificate is issued, anyone with its number can see your pet's name and breed, the course and the date it was issued on our verify page. Your name, email and payment details are never shown there. Your own name appears on the certificate itself, which only you can open and share.
Who helps us
We use a small number of service providers, each only for the job below and under contract to protect your information:
- Supabase: our database and sign-in system. Your account and course data are stored in Canada (Montreal region).
- Vercel: hosts the website, in the United States.
- Stripe: processes payments, in the United States and Canada.
- Google: provides "Sign in with Google" and the site's fonts. When a page loads, Google's font service sees your IP address.
Some of these providers are outside your province or country, so your information may be processed in the United States, where it can be accessed by courts and authorities under US law. We may also share information if the law requires it, or to protect people's safety or our legal rights.
How long we keep it
- Account, course and certificate records: while your account is open, so your certificates can still be verified.
- Payment records: for as long as tax law requires, generally six years in Canada, even after you close your account.
- Contact messages: up to two years, unless we need them longer to resolve an issue.
Your rights
You can ask to see the personal information we hold about you, correct it, or delete your account. Deleting your account removes your learning records and certificates, including from the verify page. We'll keep only what the law requires, such as payment records. You can also withdraw your consent to how we use your information, though we may then be unable to provide the courses.
Send requests through the contact form or the contact details above. We'll reply within 30 days and may need to confirm your identity first. These rights apply wherever you live, including under US state privacy laws.
If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Security
Information is encrypted in transit, access to your records is limited to your own account by database rules, and only the people who run the service can see the back end. If a breach ever creates a real risk of significant harm, we'll notify you and the Privacy Commissioner as the law requires.
Children
Our courses are sold to adults. We don't knowingly collect personal information from children under 13. If you think a child has given us information, contact us and we'll delete it.
Changes
We'll post any changes here with a new date. If a change significantly affects how we use your information, we'll email you first.
Last updated October 16, 2026.