Effective Date: August 25, 2026 Last Updated: October 14, 2026
This Privacy Policy explains how Multipurpose Fun, Inc., a Delaware corporation doing business as Push Drop Stick ("Push Drop Stick," "we," "us," or "our"), collects, uses, stores, and shares information when you use the Push Drop Stick mobile application (the "App"), the companion Apple Watch app, our website at pushdropstick.com (including the signed-in web app), the AI features we offer through them (the Assistant, the Coach and the Live Trainer, together the "AI Features"), and our developer API and MCP endpoints (collectively, the "Services"). By using the Services, you agree to the practices described here.
Push Drop Stick works in three ways, and what we collect depends on which one you use.
Without an account. You can use the whole App without creating an account: the plan library, the Journey, goals, games, history, the Apple Watch clicker and clicker recognition. In this mode your pets, sessions and training records stay in a database on your device. The only things that leave your device are the crash reports, update checks, content downloads and notification registration described in the "Using the App without an account" part of Section 2. None of them carry your name, email address or training records.
With a free account. If you sign in with your email address, your pets and training records are uploaded to our servers so they sync across your devices and can be shared with people you invite, and you can talk to the Assistant. The "With an account" part of Section 2 describes what that adds, including the companies that process your data for us.
Live Trainer. The Live Trainer is a real-time voice feature available to some signed-in users. It streams your microphone and camera to a server we rent while a session runs. The "Live Trainer" part of Section 2 describes it, and we show you a short notice before your first live session.
We do not sell your personal information, we do not show ads, and we do not use your information for cross-app or cross-site tracking.
You can use the whole App without an account. In this mode your pets, sessions, goals, cues, treats, notes and training records are stored in a database on your device and are not uploaded to us. The following is what leaves your device.
The App reports crashes, errors and a small sample of performance traces to Sentry, with your device model, OS and App version, locale, a random identifier created when the App is installed, and the screens and network requests leading up to an error. These reports never include your name, email address, account identifier or the contents of your training records. In-app product metrics (for example, counts of sessions started or plans shared) are also sent through Sentry and are not tied to your name or email. Our servers and the website's support page report to Sentry as well.
The App periodically checks for JavaScript updates from a service we host on Cloudflare. The check carries your IP address, App version, update channel, a fingerprint of the App build, and a rollout number derived from the identifier Apple assigns to this App on your device so we can release updates gradually. It does not identify you.
Once you add a pet, the App registers with Apple's push service and with Expo, the service that delivers our notifications. Expo receives a random installation identifier and the device token Apple issues. If you have an account we store that token, your platform and your device name so the Assistant or the Coach can reach you with check-ins and reminders. You can turn notifications off in your device settings at any time.
The shared plan library, feature settings and the demo videos that play inside plans are fetched from our servers and from our object storage (Tigris Data). The optional on-device voice model for the Live Trainer's voice is downloaded from the same storage. These services see your IP address at download time and nothing else about you.
The following never leave your device: on-device text-to-speech for the Live Trainer's voice; the on-device subject detector that crops photos around your dog; clicker and voice-command detection; your Apple Watch workout data written to Apple Health (we do not read or upload health data); and the record of which version of these terms you accepted on this device (once you sign in, that record is also stored with your account).
If you sign in, the training records already on your device are uploaded to our servers once, and from then on the information below is stored with your account so it syncs across your devices, can be shared with co-trainers, and can be used by the AI Features.
When you create an account we collect your email address, a display name (optional), and — if you claim one — a public handle for your profile page. Sign-in uses emailed magic links, one-time login codes, or a password (stored only as a salted hash). We keep short-lived login tokens, the tokens that hand you off between the App and the website, and any personal API keys you create (stored hashed) for the developer MCP server.
When you sign in, the App uses Apple's App Attest service to prove it is a genuine copy of the App. Apple creates a key on your device, and we store that key's identifier with your account.
If you invite someone to co-train a dog, we store the email address you enter for that invitation so we can deliver it and link the account that accepts it.
For each pet you add we store its name, species, breed(s), birth year, sex and, if one has been set, a portrait photo, and which people share it. A portrait is set only through chat: when you share a photo of your pet with the Assistant or the Coach (as a camera burst or a photo from your library), the Assistant or the Coach can set that photo as the pet's portrait. There is no separate portrait upload. The portrait is then shown wherever the pet appears, including on your public plans and profile if you have them.
As you train we store, per pet and plan: session position and statistics (repetitions, passes and fails, success rate, rate of reinforcement, timing, streaks), goals and when they were achieved, the cue words you assign, the treats you log (including "do not use" notes such as allergies), and the notes the Assistant or the Coach keeps about each pet. This data is attributed to your account so it can sync across your devices and be shared with co-trainers of the same pet.
While you run a training plan, the App produces a compact, structured session recording — the sequence of actions, timings, repetition results, goal and cue names, and which reinforcer was in use. Recordings are uploaded to our storage automatically (including for sessions you abandon or that end when the App is closed) and are attributed to your account and pet. If you use the camera during a session, the App may capture short bursts of still frames and upload them alongside the recording.
Everything you send to the Assistant or the Coach is stored with your account as a conversation history: your messages, camera bursts (about ten frames), frames condensed from videos you pick from your camera roll, and any text the AI writes back, including the tools it used and their results. The Coach may also write and revise notebook files about you and your pets that persist between conversations. The Coach can perform web and scholarly searches on your behalf; the search queries it composes (which may include details from your conversation) are sent to the search providers listed in Section 5. A photo you share in chat can be set as your pet's portrait, as described in 2(g).
Training plans you author (directly, through the Coach, or through the developer MCP server) are stored in a version-controlled library with their full edit history. Plans have a visibility setting. A plan marked public — the default once you have claimed a handle — is listed on your public profile at pushdropstick.com/u/<handle>, can be viewed and forked by any user, is included in our public plan search, and is exposed to search engines and AI assistants through our public catalog and public MCP endpoint (which return the plan's content and your handle as its author). Plans that meet our editorial standards may also be promoted into the shared library the App offers to all users. Comments and posts you make on plans are likewise stored and shown to the audience of that plan.
Any subscription or boost on your account is billed by Stripe, our payment processor. Payment card details are entered on Stripe-hosted pages and never touch our servers. We store your Stripe customer ID, subscription ID, plan, status and renewal date, the email associated with your billing profile, and whether a payment card has been linked to your account (which is what releases the starter energy grant). Stripe may collect your card's country and other fraud signals under its own privacy policy.
If you contact us by email or through the feedback form, we receive whatever you send us — including your email address, message, and any screenshot you attach — and use it to respond.
The Live Trainer is a real-time voice feature available to some signed-in users. While a live session is running, the App streams your microphone audio and periodic camera frames directly to a GPU server we rent from RunPod and control. Audio is transcribed on that server and interpreted together with the frames as the session happens. Audio and frames are processed in memory on that server and are not retained there: the server keeps no audio, no transcript, no frames and no log of the session once it ends. Because iOS runs the microphone in full-duplex mode, audio continues to stream while the Live Trainer is speaking. Anything audible in the room, including other people, may be transcribed; see Section 9 for your responsibilities when recording others.
What we keep from a live session is what the App keeps from any training session, plus a note in your conversation:
We do not use live sessions to train any model. If we ever want to use live-session logs to improve the Live Trainer model, we will ask you first.
We use the information above to:
We do not use your conversations, notebook files, plans, session recordings, camera frames, live sessions or any other content you give us to train or fine-tune any machine-learning model, and we never fine-tune the Anthropic models behind the Assistant and the Coach. We do evaluate and improve the Services, including measuring how well the AI Features perform, and we produce de-identified, aggregated statistics that do not identify anyone. If we ever want to use live-session logs to improve the Live Trainer model, we will ask you first.
Our AI Features are powered by a combination of third-party models and a model we run ourselves:
These providers process data on our behalf under commercial terms that limit their use of your content to providing the service to us. We do not authorize any of them to use your content to train their own models. Where a provider retains data briefly for abuse monitoring, that retention is governed by the provider's terms.
AI output can be wrong, incomplete, or unsafe for your particular dog. See our Terms of Service for the responsibilities you keep when using the AI Features.
We share personal information only as follows:
With service providers ("sub-processors") who process it for us and are bound to protect it:
With other users. People who share a pet with you see that pet's profile (including its portrait), sessions, recordings, frames, and the notes the Assistant or the Coach keeps. Anyone can see your public handle, public profile, and public plans (and can fork them). Comments you post are visible to the plan's audience.
With the public and with machines. Public plans are exposed through our website, sitemap, public plan search, /.well-known AI catalog, and unauthenticated public MCP endpoint, and may be crawled, indexed, and reproduced by search engines and AI assistants outside our control.
For legal reasons — to comply with law, subpoena, or valid legal process, or to protect the rights, property, or safety of us, our users, or others.
In a business transfer. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
As aggregated or de-identified data. We may create, publish, share or sell aggregated or de-identified statistics that do not identify any individual, device or household.
Files the App uploads for your account are stored at unlisted URLs: long, random links that are not listed or indexed anywhere, but that anyone who has the exact link can open without signing in. This applies to session recordings, camera frames (including the crown frames kept from Live Trainer sessions), pet portraits set from photos you share in chat, and demo clips you publish. Pet portraits and demo clips are meant to be visible wherever the pet or plan is shown, including on public plans and profiles. Recordings and frames are only linked from inside your account and your co-trainers' accounts; treat those links as private and do not share them.
Plans default to public once you claim a handle. You can change any plan to private in the plan's settings; doing so removes it from your public profile and from public search, but copies other users already forked remain theirs, and copies made by third-party crawlers are outside our control.
Deleting your account. You can delete your account from your account settings in the App or the web app, or by emailing us from the address on your account (Section 13). For seven days after you ask, you can cancel the deletion by signing in again. After that the deletion is final, and we remove your account and the personal data associated with it within 30 days of your original request, except data we must keep for legal, billing or security reasons and data that has already been de-identified. Deleting your account removes your public profile and unpublishes your plans; forks other users made before deletion remain with those users. You can leave a shared pet or remove a co-trainer at any time in the App. Deleting the App from your device does not delete your account, and it does not delete the training data stored on your device if you never had an account.
We use administrative, technical, and physical safeguards designed to protect your information: encrypted disks on our servers, encryption in transit, hashed passwords and API keys, encrypted backups, access controls, and signed, short-lived session tokens for the Live Trainer. No system is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.
Access, correction, export, and deletion. You can view and edit most of your data in the App and the web app, and delete your account from your account settings. To request a copy of your data or correct something you cannot edit yourself, contact us (Section 13). We will verify the request using the email on your account.
Permissions and features. Camera, microphone, photo library, and notification access are controlled by your device settings; the vision features of the Assistant and the Coach and the Live Trainer simply do not work without them. You can decline push notifications at any time.
Recording other people. Camera frames and Live Trainer audio may capture other people and their voices. You are responsible for obtaining any consent required by the laws where you are before using these features around others.
Public content. You control the visibility of each plan and whether you claim a public handle.
Residents of the EU, EEA, UK, and Switzerland. We process your data to perform our contract with you (providing the Services), on the basis of our legitimate interests (securing and improving the Services, including evaluating the AI Features), to comply with legal obligations, and with your consent where we ask for it. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Because we are located in the United States, your data is transferred internationally as described in Section 10.
California and other U.S. state residents. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. You have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. Use the contact in Section 13 to make a request; an authorized agent may act for you with written permission.
We are a United States company. Our servers are located in Vint Hill, Virginia, USA; our sub-processors are located primarily in the United States; and some of our team works from Canada. By using the Services you understand that your information will be transferred to, stored, and processed in the United States (and may be accessed from Canada), whose privacy laws may differ from those where you live. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.
Accounts and the AI Features are for adults, and we do not knowingly collect personal information from anyone under 18 through them; our Terms of Service require account holders to be at least 18 (or the age of majority where they live). The App can be used without an account, and in that mode it does not collect names, email addresses or training records from anyone. If you believe a minor has created an account, contact us and we will delete it.
We may update this Privacy Policy from time to time. Non-material changes are reflected by updating the "Last Updated" date. For material changes — for example, new categories of data, new purposes, or new kinds of recipients — we will ask you to review and accept the revised Policy in the App or on the website before you continue. Your continued use after a change takes effect constitutes acceptance.
Multipurpose Fun, Inc., d/b/a Push Drop Stick Attn: Allison Wells
Please put "Privacy" in the subject line for data requests.