Legal
Privacy Policy
Effective date: 30 May 2026 · Last updated: 30 May 2026
A note before we start
Hauva.club is a small community service for dog owners in Helsinki, launched on 30 May 2026. We try to collect as little personal data as possible, and to be honest and clear about what we do with it. This policy explains the details. If anything is unclear, write to us at privacy@hauva.club.
This service is currently in private beta. We may update this policy as the service evolves; we will note the changes here.
01
Who runs Hauva.club
Hauva.club is operated by:
Sofia Helsinki Members
Sofiankatu 4 C
00170 Helsinki, Finland
Y-tunnus: 3474646-8
For any privacy-related question or request, contact: privacy@hauva.club
Atelier Lighthouse Tmi is the data controller for personal data processed through Hauva.club.
02
What we collect, and why
We collect personal data only for the purposes described below. We do not sell data and we do not use it for advertising.
2.1 Account data
When you sign in with Google, we receive:
- Your name (as set in your Google account)
- Your email address
- Your Google profile picture (if you have one)
- A unique identifier from Google for your account
Why: to create and maintain your Hauva.club account, identify you in the app, and let you sign in.
Legal basis: performance of a contract (you joining the service).
2.2 Profile data
When you use Hauva.club, you may add:
- A display name
- Information about your dogs (name, breed, size, sex, birth year, photo)
- A privacy setting (Public or Private)
- A favorite spot per category
Why: to let you participate in the community and personalize your experience.
Legal basis: performance of a contract.
2.3 Activity data
As you use the service, we record:
- Spots you check in at, including time of check-in
- Reviews you write (text, photos, tagged dogs)
- Photos you upload
- Friend requests and friend connections
- Likes you give to reviews
- Notifications you receive
Why: to power the core features of Hauva.club, such as showing your activity to friends, displaying reviews to other users, and keeping a record of your visits.
Legal basis: performance of a contract.
2.4 Location data
When you check in at a spot, we use your device's GPS location to verify you are near the spot. The location is checked at the moment of check-in but the precise coordinates are not stored as part of your check-in record.
Why: to make sure check-ins represent real visits, not remote actions.
Legal basis: performance of a contract.
You may decline GPS access in your browser, but check-ins will not work without it.
2.5 Technical data
When you use the service, we receive:
- Your IP address (used briefly for security and abuse prevention; not stored beyond what is needed for that)
- Browser type, device type, operating system
- Pages or actions you take in the app
Why: to operate and secure the service, and to fix bugs.
Legal basis: legitimate interest in running a secure and functional service.
2.6 Business account data
If you create a business account for a venue, we additionally collect:
- The venue's Instagram account
- The applicant's role (owner, manager, etc.)
- Any business contact information you provide
Why: to verify that you are authorized to represent the venue. We do this by contacting the venue's Instagram account.
Legal basis: performance of a contract.
03
Who we share data with
We do not sell your data. We do not share it with advertisers. The only parties that receive your data are service providers we rely on to operate Hauva.club:
| Service | What they handle | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU |
| Cloudflare | Hosting, content delivery, image storage | Global (EU edge nodes) |
| Sign-in (OAuth) and email (Workspace) | Global |
Each of these providers is bound by data processing terms and uses appropriate safeguards for international data transfers where applicable.
We may share data with authorities if required by law (for example, in response to a valid legal request from Finnish or EU authorities).
04
How long we keep data
- Account data and content (profile, dogs, reviews, check-ins, photos, etc.): as long as your account is active. When you delete your account, all of this is removed from Hauva.club.
- Photos already published to Hauva's official Instagram account: these remain on Instagram after deletion, but you may contact us at privacy@hauva.club to request removal.
- Usage logs: Hauva.club does not currently run user-facing analytics tools. Basic operational logs are short-lived and rotated by our providers.
- Backups: Hauva.club currently runs on Supabase's free tier, which does not include automatic database backups. We may perform manual exports for operational purposes; these are kept only as long as necessary.
05
Your rights
Under the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Access — you may request a copy of the personal data we hold about you.
- Correction — you may correct inaccurate or incomplete data, often directly in the app.
- Deletion — you may delete your account at any time. This removes your data from Hauva.club.
- Restriction — you may ask us to limit how we process your data.
- Portability — you may request your data in a machine-readable format.
- Objection — you may object to certain processing based on legitimate interest.
- Withdraw consent — where processing is based on consent, you may withdraw it.
To exercise any of these rights, write to privacy@hauva.club. We will respond within 30 days.
If you believe we have mishandled your data, you may file a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
06
Children
Hauva.club is not directed at children under 18. We do not knowingly collect data from minors. If you believe a child has created an account, contact privacy@hauva.club.
07
Security
We take reasonable steps to protect your data, including:
- HTTPS for all connections
- Authentication via Google (no passwords stored by Hauva.club)
- Row-level security in our database to limit access
- Encrypted storage at our service providers
No service is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by GDPR.
08
Cookies and similar technologies
Hauva.club uses cookies only for essential service functions, such as keeping you signed in. We do not use third-party tracking cookies or advertising cookies.
09
Photos and content you upload
You retain ownership of the photos and reviews you upload. When you upload content, you grant Hauva.club a non-exclusive license to display it on the service and, in the case of Public users, on Hauva.club's official social media. The full terms of this license are in our Terms of Service.
If you switch your profile from Public to Private, future uploads will not be used on social media. Past uploads remain under the license granted at the time of upload, though you may request removal on a case-by-case basis.
10
International data transfers
Some of our service providers (such as Google and Cloudflare) operate globally, which may involve transferring your data outside the EU. These transfers are protected by appropriate legal safeguards, including the European Commission's Standard Contractual Clauses.
11
Changes to this policy
We may update this policy as Hauva.club evolves. When we make a significant change, we will note it here and update the "Last updated" date at the top.
12
Contact
For any privacy-related question or request:
Postal: Atelier Lighthouse Tmi, Sofia Helsinki Members, Sofiankatu 4 C, 00170 Helsinki, Finland