Privacy Policy

EquiWyze, LLC ("EquiWyze," "we," "our," or "us") operates the EquiWyze mobile application and associated platform (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal information in connection with the Platform.

For users whose data is entered by an Equine Practitioner (for example, horse owners and clients), the practitioner is responsible for the lawful collection and use of such data, and EquiWyze processes such data on the practitioner's behalf pursuant to our Data Processing Addendum (DPA).

By using the Platform, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Policy, please do not use the Platform.

This Privacy Policy applies to:

• All users who register for and use the Platform ("Users"), including Equine Practitioners
• Data entered by Equine Practitioners about their clients and horses
• Visitors to our website at equiwyze.com
• All data processed through the Platform

This Privacy Policy does not apply to third-party services (including Stripe, PayPal, Apple App Store, Google Play Store, OpenAI, or Anthropic). Please consult those parties' privacy policies for information about their data practices.

3.1 Account and Identity Data

• Full name, email address, username and password (hashed)
• Profile photo (optional)
• Professional title, specialty, and business name
• Business address and contact information
• Professional license or certification numbers (if voluntarily provided)

3.2 Horse Records and Clinical Data

• Horse names, breeds, ages, and identifying information
• Health history, medications, and conditions (as entered by practitioner)
• Nutrition assessments and dietary records
• Session notes and treatment records (farrier, chiropractic, acupuncture, bodywork, and other entries)
• Interactive body map annotations
• Assessment scores and outcomes

3.3 Client and Horse Owner Data

Equine Practitioners may enter information about their clients and horse owners, including names and contact information, horse ownership records, and appointment and service history. If you are an Equine Practitioner entering client data, you are responsible for that data. EquiWyze processes such data on your behalf under our Data Processing Addendum.

3.4 AI-Processed Data

• Audio recordings submitted for Whisper transcription (processed by OpenAI's Whisper API)
• Transcription text used to generate session summaries (processed by Anthropic's Claude API)
• AI-generated text outputs (session summaries)

3.5 Payment and Billing Data

Billing name and email address, subscription plan and billing history, transaction IDs and payment status. We do not store your full credit card number, CVV, or bank account details. Payment card information is collected and processed directly by our Payment Processors (Stripe and/or PayPal).

3.6 WyzeScore Rating Data

Ratings and written reviews submitted through the WyzeScore system; records of rating interactions.

3.7 Device and Usage Data

• Device type, operating system, and App version
• Mobile device identifiers (e.g., IDFA, Android Advertising ID), subject to your device's privacy settings
• IP address and approximate geographic location (derived from IP)
• App usage patterns, feature interactions, and session duration
• Log data (error logs, crash reports)

4.1 Service Delivery — Creating and maintaining your account; providing access to Platform features; processing and displaying Horse Records and session documentation; generating AI transcriptions and summaries; enabling WyzeScore ratings; processing payments.

4.2 Platform Improvement and Analytics — Analyzing usage patterns to improve features and user experience; identifying and fixing bugs; developing new features.

4.3 Communications — Sending transactional emails (account confirmation, receipts, password resets); service announcements and policy updates; marketing communications (where you have provided consent or where otherwise permitted by law); responding to support requests.

4.4 Safety and Security — Detecting, investigating, and preventing fraud, abuse, and security incidents; enforcing our Terms of Service and Acceptable Use Policy.

4.5 Legal and Compliance — Complying with applicable laws, regulations, and legal process; responding to lawful requests from government authorities; establishing, exercising, or defending legal claims.

We do not sell your personal information. We share your data only as described below.

5.1 Payment Processors — We share billing name, email address, and subscription details with Stripe and/or PayPal to process payments. Stripe Privacy Policy: stripe.com/privacy · PayPal Privacy Policy: paypal.com/us/legalhub/privacy-full

5.2 AI Service Providers — We transmit audio recordings and text to OpenAI (Whisper API) and Anthropic (Claude API) solely to provide AI Features. These providers process data as our sub-processors under contractual data protection obligations.

5.3 Legal Requirements and Safety — We may disclose your data in response to a valid subpoena, court order, or other legal process; to comply with applicable law or regulatory requirements; to protect the rights, property, or safety of EquiWyze, our Users, or the public.

5.4 Business Transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you of any such transfer.

5.5 Aggregated / Anonymized Data — We may share aggregated or anonymized data for research, industry analysis, or marketing purposes. Such data is not personal information.

EquiWyze is based in the United States, and the Platform is operated from the United States. If you access the Platform from Canada, your personal information may be transferred to, stored in, and processed in the United States. By using the Platform, you acknowledge that your personal information may be processed in the United States, where privacy laws may differ from those in your province or territory. We take steps to ensure that personal information transferred to the United States is handled in accordance with applicable Canadian privacy law, including through contractual protections with our service providers.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. When data is no longer needed, we securely delete or anonymize it. Upon account deletion, we will delete or anonymize your data within thirty (30) days, except where retention is required by law.

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Sensitive data stored on our servers is encrypted at rest.
• Access controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
• Incident response: We maintain a security incident response plan.

No system is completely secure. We cannot guarantee the absolute security of your data. You are responsible for maintaining the security of your account credentials.

The Platform is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under the applicable age threshold, we will take steps to delete such data promptly. If you believe we have collected data from a child, please contact us at support@equiwyze.com.

General Rights

• Access the personal data we hold about you
• Correct inaccurate personal information
• Request deletion of your data
• Withdraw consent for certain processing (subject to legal and contractual limitations)
• Data portability (receive a copy of your data in a machine-readable format)

Canadian Users (PIPEDA and Provincial Privacy Laws)

Canadian users have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including: Alberta PIPA, BC PIPA, and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (as amended by Law 25 / Bill 64). Quebec residents have enhanced rights including data portability, de-indexation, and the right to be informed of automated decision-making.

Complaints may be lodged with the Office of the Privacy Commissioner of Canada (OPC): priv.gc.ca. Quebec residents may also file complaints with the Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca.

California Residents (CCPA/CPRA)

California residents have the right to: know what personal information we collect; delete personal information; correct inaccurate personal information; opt-out of sale/sharing (we do not sell personal information); limit use of sensitive PI; and non-discrimination for exercising rights. We will acknowledge CCPA requests within ten (10) business days and respond within forty-five (45) calendar days.

To exercise any of these rights, contact us at support@equiwyze.com.

EquiWyze complies with Canada's Anti-Spam Legislation (S.C. 2010, c. 23). We will not send you commercial electronic messages without your express opt-in consent or valid implied consent as defined under CASL. All commercial messages include sender identification, contact information, and a functional unsubscribe mechanism that can be exercised at no cost within sixty (60) days. We will process all unsubscribe requests within ten (10) business days of receipt.

For CASL-related complaints, contact us at support@equiwyze.com or file a complaint with the CRTC at fightspam.gc.ca.

U.S. State Breach Notification — We will notify affected U.S. residents of security breaches involving their personal information in accordance with applicable state breach notification laws (including California, Texas, and all other applicable states), within the timeframes required by those laws.

Canadian Breach Notification (PIPEDA) — In the event of a breach of security safeguards involving personal information that poses a real risk of significant harm to individuals, we will: (a) notify the Office of the Privacy Commissioner of Canada (OPC) as soon as feasible; and (b) notify affected individuals as soon as feasible.

If you discover a security vulnerability or suspect a breach, please report it immediately to support@equiwyze.com.

Essential Cookies — EquiWyze uses strictly necessary cookies and browser storage required for login sessions and core app functionality. These cannot be disabled without breaking the Platform.

Error Monitoring (Sentry) — When you accept cookies, we activate Sentry for anonymized error and crash logging. Sentry data does not include personally identifiable information and is used solely to diagnose and fix bugs. Sentry is only initialized after you provide consent via the cookie banner.

No Advertising Cookies — We do not use advertising, retargeting, or behavioral tracking cookies of any kind.

Withdrawing Consent — You can withdraw cookie consent at any time by clearing your browser's localStorage (your browser settings → Clear Site Data). The cookie banner will reappear on your next visit, allowing you to make a new choice.

We use the following third-party sub-processors to operate the Platform. Each processor is bound by appropriate data protection agreements.

• Base44 — Cloud infrastructure, database hosting, and authentication. Privacy Policy
• Stripe — Payment processing. PCI DSS Level 1 certified. Stripe processes payment card data directly and does not share card numbers with EquiWyze. Privacy Policy
• PayPal — Alternative payment processing. Privacy Policy
• Sentry — Anonymized error monitoring and crash reporting. Only activated when the user accepts cookies. No PII is included in error payloads. Privacy Policy
• StableWyze — Optional calendar sync integration. Data is only transmitted to StableWyze when a practitioner explicitly links a horse to a StableWyze farm profile and completes a session. Contact StableWyze for their privacy policy.
• Twilio — SMS appointment reminders and notifications. Only phone numbers explicitly provided by practitioners or clients are used. Privacy Policy

For a complete list of sub-processors, see our Sub-Processors page.

EquiWyze data is stored and processed by Base44 on servers located in the United States.

If you are located in the European Union, United Kingdom, or European Economic Area, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as the laws in your jurisdiction.

Where required, such transfers are governed by appropriate safeguards in accordance with GDPR Article 46, including Standard Contractual Clauses (SCCs) or other recognized transfer mechanisms. By using the Platform, you acknowledge this transfer.

For questions about international data transfers or to request a copy of the applicable transfer safeguards, contact us at support@equiwyze.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by: (a) updating the "Last Updated" date at the top of this Policy; (b) posting a notice in the App; and/or (c) sending you an email to the address associated with your account. Your continued use of the Platform following the effective date of changes constitutes your acceptance of the updated Policy.