Privacy Policy

Last updated: 10 October 2026

Introduction

Head in the Clouds Consulting Limited, trading as Titan Training Academy ("we", "our", or "us"), operates the Titan Training Academy mobile application (the "App") and the website titantrainingacademy.co.uk. We are the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).

This notice covers:

• The App
• This website, including the breed identifier
• Our email list and waitlist
• Beta testing
• Messages on social media, and calls with us
• Booking and attending a training session
• Who processes your data for us, and your rights

The App

Information We Collect

Information You Provide

• Account Information: If you create an account, we collect information needed to authenticate and support that account, including your email address and an account identifier. You can sign in with Sign in with Apple or email/password.
• Dog Profiles: Name, breed, age, sex, and temperament tags for your dogs.
• Training Data: Session logs including exercise names, durations, ratings, and notes you add.
• User Preferences: Training style preferences, notification settings, and app customization choices.
• Where You Heard About Titan: At the end of setting up, the app asks where you heard about Titan. Answering is optional. Your answer, and any words you type for “Something else”, are stored with your account, used only as counts to see which channels help owners find us, and deleted with your account.

Photos, Voice, and AI Inputs

• Chat Content: If you use AI coaching, we process the messages you send and relevant dog profile context needed to answer them.
• Dog Photos: If you enable AI data sharing and submit a dog photo for cloud breed identification, that photo may be processed by OpenRouter. If AI data sharing is off, the app falls back to on-device breed analysis when available.
• Voice Audio: If you use voice coaching, your audio is processed by Hume AI to power that conversation.

Automatically Collected Information

• Product Analytics: Only if you say yes when the App asks, or turn it on in Settings > Data & Privacy, we collect app usage events through PostHog to understand which features are used, and on iPhone recordings of how you move through the screens with every word and photo covered. See Product Analytics.
• Diagnostics: We collect crash and performance diagnostics through Sentry to monitor reliability and fix bugs. See Error reporting.
• Device Information: Device type, iOS version, and app version for compatibility purposes.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's functionality
• Personalise your training experience
• Generate training plans tailored to your dog's profile
• Provide AI coaching and optional cloud breed analysis when you consent to AI data sharing
• Send training reminders and notifications (if enabled)
• Improve app features and user experience when Product Analytics is enabled
• Count, in totals only, how owners get on with the App (for example how many add a dog, train in their first week, finish the skill check or start a trial), from the account, training and subscription records we already hold for the App to work, leaving out test and staff accounts. Nobody is profiled from these counts; the lawful basis is our legitimate interest in running and improving the App
• Monitor crashes, errors, and service reliability
• Provide customer support

Data Storage

Core training data is stored locally on your device by default. If you sign in to a cloud account, your synced app data is stored using Supabase. If you choose to create calendar events or reminders, those entries are stored in Apple's Calendar or Reminders services.

Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• Service Providers: We use third-party services to help operate our App:
  • OpenRouter (AI coaching and optional cloud breed identification)
  • Hume AI (voice coaching)
  • Supabase (account and sync storage)
  • PostHog (optional product analytics)
  • Sentry (crash and performance diagnostics)
  • Apple (Sign in with Apple, In-App Purchases, Calendar, and Reminders integration, and Apple Ads attribution if you agree to Product Analytics)
• Legal Requirements: If required by law or to protect our rights.

AI Services and Data Sharing

Titan Training Academy uses third-party AI services to provide personalised coaching and optional cloud breed analysis.Users must provide explicit consent within the app before any data is shared with these services.

OpenRouter

• Data shared: Text chat messages, relevant dog profiles, training context, and any dog photo you submit for cloud breed identification
• Purpose: Generates personalised AI coaching responses and optional breed-identification analysis

Hume AI

• Data shared: Voice audio when using voice coaching features
• Purpose: Processes voice audio for conversational voice coaching

Supabase

• Data shared: Account data, dog profiles, training session logs
• Purpose: Securely stores your data when you use an account with sync enabled

Consent and Withdrawal

You must explicitly consent to AI data sharing before using AI coaching features. You can withdraw consent at any time in the app under Settings > AI & Privacy. Withdrawing consent disables third-party AI features and stops cloud breed-identification uploads. The app remains usable without AI consent.

Sharing Your Progress With Dami, and Coach Topic Counts

• Sharing your progress (your choice, off unless you turn it on): if you turn on “Share my dog's progress with Dami” in the app, Dami can see your dogs, their plan and progress, your recent training sessions and notes, your plan type and your account email, so he can prepare for a call and help you. A separate switch, “Also share my coach conversations”, lets him read your chats with the coach too; while it is on, those chats are copied to our server. Every time he opens your page it is logged. Turn either switch off at any time: your coach chats are deleted from our server at once, and Dami can no longer open your page. Deleting your account deletes everything. Lawful basis: your consent. Shared chats are deleted 12 months after your last activity.
• Coach topic counts: to know what owners need help with, we keep a weekly count of the topics people ask the coach about, such as recall or pulling. The count is worked out on our server from your question and then only the topic and a number are kept: no name, account, message or dog name. You can turn this off in the app under Settings, “Count my coach question topics”. Lawful basis: legitimate interests, to improve the coach, lessons and content.
• We never sell this information, use it for advertising, or let AI companies train their models on it.

Product Analytics and Diagnostics

Product Analytics is off until you say yes. The App asks once, while you set up your dog, and you can change your answer at any time in Settings > Data & Privacy. Saying no changes nothing else: every feature works the same.

• What we collect: which screens you open, which setup steps you finish, when you log a training session, and when you start a trial or subscribe. Each event carries your app version, device type, how many dogs you have, your plan, and whether yours is a customer, tester or staff account. It is linked to a random ID, and to your random account ID if you are signed in. It never includes your name, your email, your notes, your dog's name or what you type to the coach.
• Why: to see which exercises and screens help owners, and to find and fix what does not.
• Who handles it: PostHog, in the EU. We do not sell it, and we do not use it for advertising.
• Lawful basis: your consent. Turning it off stops collection from that moment.

Apple Ads

We advertise the App on the App Store through Apple Ads. If you agree to Product Analytics and you installed the App from an Apple Ads advert, the App asks Apple which advert it was. Your iPhone gives the App a short-lived token, the App sends that token to Apple, and Apple replies with the ID numbers of the campaign, ad group, advert and search keyword, and the country the advert ran in, or says the install did not come from an advert. We keep that reply with your usage data so we can tell which adverts bring owners who find the App useful. Apple's reply contains no personal data: it names an advert, not a person, and Apple does not tell us who you are. This does not use Apple's tracking permission, and the App does not track you across other companies' apps or websites. If you say no to Product Analytics, the App never asks Apple.

Session replay (iPhone)

On iPhone, Product Analytics also records how you move through the App's screens: the layout of each screen, where you tap and how you scroll. Before anything leaves your phone, every word on screen, every text box and every photo is covered, so a recording never shows your name, your email, your dog's name or photo, your notes or your conversations with the coach. It records no network requests and no device logs. Recordings are held by PostHog in the EU with your other usage data, on the same lawful basis (your consent), and they stop the moment you turn Product Analytics off. The App does not record on Android.

We also use Sentry for crash and performance diagnostics to keep the App reliable: see Error reporting.

Product Tests

To learn what helps owners most, a new install may be shown one of two versions of a screen, for example two versions of the setup steps. Which version you get is decided by chance, on your phone.

• What we keep: the name of the test and the version you were given, stored with your account on our servers. We compare it with what happens next, for example whether a free trial starts, and we only ever look at the totals for each version, never at one person.
• How long: our record is deleted with your account.
• Lawful basis: legitimate interests, to improve the App fairly for everyone. This does not need your Product Analytics consent: it is our own record, kept on our own servers, and a test is only fair if every new owner is counted. If you have said yes to Product Analytics, the version you were given can also appear in your usage data in PostHog, which is linked to a random ID rather than your name or email. Deleting your account does not remove that copy on its own; ask us and we will (seeYour Rights).

Error Reporting

When the App crashes or hits an error, Sentry receives a report. It shows what went wrong, on which screen, and on which device and iOS version. If you are signed in, the report carries your random account ID. It never carries your name or email address. We use these reports only to find and fix faults. Our lawful basis is legitimate interests: keeping the App working for everyone who uses it.

AI Providers

Our AI features go through OpenRouter. OpenRouter passes your request to the company that runs the AI model (the model provider) and passes the answer back. That means the messages, dog details and photos you choose to send reach both OpenRouter and the model provider. We send only what the feature needs to answer you. For the AI features on this website (the breed identifier and the training plan), we tell OpenRouter to use only model providers that do not collect your data or train on it.

This Website

Analytics

We use PostHog to count page views and see which pages help. On this website PostHog keeps everything in your browser's memory for the visit only. It sets no cookies and stores nothing on your device, so it cannot recognise you on a later visit. We never send your email address to analytics. Our lawful basis is legitimate interests: understanding how the site is used. More detail is in Cookies and storage.

Error reporting

If you accept cookies, the site sends a report to Sentry when a page breaks in your browser: what went wrong, on which page and in which browser. It carries no name, no email address, no form contents and no web address beyond the page itself, and it stores nothing on your device. It does not run until you accept and it stops as soon as you withdraw. Our server reports its own failures to Sentry in the same way, without anything about you. Our lawful basis is legitimate interests: keeping the site working.

Spam protection on forms

Our signup forms use Google reCAPTCHA to tell people from bots. When you start typing your email, Google receives information about your browser and device, including your IP address. Our lawful basis is legitimate interests: keeping our forms and email list free of spam.

Hosting logs

The website runs on Vercel. Like any web host, Vercel records technical logs of each request, such as your IP address, the page asked for, and your browser type. We use them only to keep the site secure and fix faults (legitimate interests). Vercel keeps them for a short period and then deletes them.

The breed identifier

• Your photo is sent to our AI provider, OpenRouter, and on to the model provider to analyse it. We do not store it: it is not saved to a database, to file storage or to our logs.
• Your IP address is used to cap how many photos one visitor can send in a day. We do not save the address itself in our database: we save a count next to a one-way code made from it with a secret key that only our server holds, and the code changes every day. The count and code are deleted within a few days. Our lawful basis is legitimate interests: keeping the free identifier open by stopping one visitor using it all. The same applies to the contact form, the email sign-up form and the training plan calculator.
• Your email is never needed to use the identifier. If you tick "Email me tips and Titan news" and enter your email, you join our email list. See Our email list and waitlist.

Comments, photos, votes and image reports on breed pages

• What we keep: what you post (your comment, photo, caption or dog's name, or your report about a breed image), the name you give, your email if you add one, and the date. We show your name with an approved comment or photo; your email is never shown.
• Your IP address is not saved in our database. We save a one-way code made from it with a secret key that only our server holds. Unlike the daily code above, this one stays the same, so we can limit how often one person posts, count one vote per person, and hold a first comment for review while letting someone whose comment we have already approved post straight away. Nobody can turn the code back into your address without that key, and it never matches the daily code.
• Lawful basis: legitimate interests, to run the comments and photos and keep spam and abuse off them.
• How long we keep it: we keep a comment, photo, vote or image report, and the code stored with it, until you ask us to delete it or we delete it ourselves. A post we take down is hidden first and may be kept for a while in case of abuse. Email privacy@titantrainingacademy.co.uk to have yours deleted.

Contact form

If you send us a message through the website, we keep your name, email and message so we can reply. The message is stored in Supabase and a copy is emailed to us through Resend. Our lawful basis is legitimate interests: answering the question you asked.

Payments

The app is sold through the App Store, and Apple handles those payments. Training sessions are booked and paid for through Calendly and Stripe: see Booking and attending a training session. Earlier website subscriptions were paid through Stripe and have all ended. Whenever you pay us through Stripe, we keep the payment record (your name, email, billing address and what you paid, never your full card number) for six years, because tax law requires it.

Cookies and Storage on This Website

This section is about the website, titantrainingacademy.co.uk, rather than the app. We do not use advertising or cross-site tracking cookies anywhere on it.

Used without asking, because the site cannot work without them

• Your cookie choice. When you accept or reject below, we store that answer on your device so we do not ask again on every page.
• Offline caching. A service worker stores pages and images so the site keeps working on a poor connection.
• The breed identifier. If you use it, the number of identifications you have used, and whether you chose to keep going, are stored on your device so the page can count them. They stay on your device. We do not store your email there.
• Spam protection. Our signup forms use Google reCAPTCHA, which sets its own cookies to tell people from bots. It loads when you first focus the email field, rather than when you open the page. Google's handling of that data is covered by their own privacy policy.

Used only if you accept

• The booking calendar. The training page can show a Calendly scheduler so you can book a call without emailing back and forth. Calendly sets its own cookies, so it does not load until you agree and you can always open Calendly's own page in a new tab instead, which sets nothing here.
• Error reporting. When something breaks in your browser, a report goes to Sentry so we can fix it. It stores nothing on your device and carries no name, email address or form contents, but it is a third party receiving details of your visit, so it waits for your answer and stops if you withdraw it. See This Website.

Website analytics

We use PostHog to count page views and understand which pages are useful. On this website it is configured to store nothing at all on your device: no cookies, no local storage, and no identifier that follows you between visits. We rely on our legitimate interest in understanding how the site is used, and you can object to that at any time using the contact details below.

Changing your mind

Select Cookie settings at the bottom of any page. That clears your answer, asks again, and stops the booking calendar and the error reporting. We ask again after 180 days, and whenever what we ask for changes. Withdrawing is as easy as accepting was. If your browser blocks storage, we keep your choice for this visit only. You can also clear cookies and site data in your browser.

Our Email List and Waitlist

• What we collect: your email address, the form you used, and the date you joined. The trainer enquiry form also asks for your name and, if you choose, your business name and how many clients you have. The training plan calculator and the breed identifier never need an email: we only keep one if you tick "Email me tips and Titan news".
• Why: to send you the guide or update you asked for, news about the App and its launch, and dog training tips.
• Lawful basis: your consent. You give it when you join, and you can withdraw it at any time.
• Who handles it: Brevo stores the list and sends our emails. A copy of your signup is kept in Supabase as a backup. MailerLite runs our beta list (see Beta testing). Resend sends messages from our contact form to us.
• How to leave: use the unsubscribe link at the bottom of any email, or email privacy@titantrainingacademy.co.uk. Unsubscribing withdraws your consent. It does not affect anything we did before you left.
• The Android waitlist: if you join it on our Android page, we keep your email and the date you joined so we can send you updates on how the Android version is going and an email the day it launches. If you answer the optional question there (whether you would buy it on day one, try the free part first, or wait and see), that answer is kept with your email. We use it to judge how much demand there is, and nothing else. It is held in the same places as the rest of this list: Brevo (in the EU), marked as joining the Android waitlist, and a copy in Supabase (in London). If you were already on another of our lists, we note that you joined the Android list too. You can unsubscribe any time, the same way.
• How long we keep it: until you unsubscribe, or until 24 months pass with no opens or clicks from you, whichever comes first. Then we delete you from the list.

Beta Testing

• The invitation: to invite you to test the App, we give your name and email address to Apple. Apple uses them to send your TestFlight invitation.
• Running the beta: we keep track of your beta stage, the date we invited you, whether you started, and any feedback you send. This is kept in our email platform (MailerLite) and in the reports you send from inside the App.
• Lawful basis: legitimate interests. We need this to run the beta programme you asked to join.
• How long we keep it: we delete your beta records 6 months after the beta ends.

Messages on Social Media, and Calls With Us

• Messages: if you message us on social media, we keep your messages and notes of what you tell us about your dog in our customer records (Notion), so we can reply and follow up.
• Instagram and Messenger: these messages reach us through Meta, which runs both. Meta sends us each message as it arrives: the text, your Instagram or Facebook account ID, the time it was sent and how many attachments it had (not the attachments themselves). We store that in our database (Supabase, in London) so we do not miss a message and can see the whole conversation. Meta's own privacy policy covers what Meta does with your messages on its platforms.
• Booking a call: calls are booked through Calendly, which receives the name and email you enter.
• Recording: we ask whether you are happy for the call to be recorded and transcribed by an AI note-taking tool (such as Calendly's note-taker or Granola). We only record if you say yes, and you can say no, before or during the call, and still have it. We use the transcript, with your name removed, and AI tools to prepare for, run and follow up the call and to plan your dog's training. If you mention your own or your family's health, we do not keep those details beyond what the training needs.
• Lawful basis: legitimate interests, to answer you and plan the training you asked about. For recording, your consent.
• How long we keep it: 12 months after we were last in touch. Then we delete the notes, recordings and transcripts.

Booking and Attending a Training Session

• What we collect when you book: your name and email, your dog's name, age and breed, what you would like help with, and your answers to the safety questions. Those ask whether your dog has ever put teeth on a person or another dog, whether there is growling or stiffening over food, toys or people, any limping, medication, vet visit in the last three months or sudden change in behaviour, what your dog walks on, and who is handling on the day. For a home visit we also collect your address.
• Why we ask: to work out whether we are the right help for your dog, to plan the session, and to run it safely for you, your dog and anyone nearby. If your answers show you need your vet or a registered behaviourist first, we cancel and refund you rather than run the session.
• Lawful basis: contract, because we need this to deliver the session you booked. For the safety questions it is legitimate interests, which is protecting you, your dog and the public.
• Payment: taken by Stripe when you book. We see your name, email, billing address and what you paid, never your full card number.
• Your written plan: after the session we write up what we did and what to practise next, and we keep a copy.
• How long we keep it: session records for five years from the date of the session, because our insurer requires us to keep records of the professional services we provide for that long. Payment records for six years, because tax law requires it.

Who Processes Your Data for Us

These companies handle data for us, under contract, and only for the purposes below. Some are in the US. When data goes outside the UK, it is protected by the UK Extension to the EU-US Data Privacy Framework, or by standard contractual clauses (the UK International Data Transfer Agreement, or the UK Addendum to the EU clauses).

Your Rights

Under UK data protection law you have the right to:

• Access: ask for a copy of the personal data we hold about you
• Correction: ask us to fix anything that is wrong or incomplete
• Deletion: ask us to delete your data
• Objection: object to anything we do on the basis of legitimate interests
• Withdraw consent: at any time, for anything based on your consent, such as our emails
• Portability: get the data you gave us in a format you can take elsewhere

To use any of these rights, email privacy@titantrainingacademy.co.uk. We reply within one month. There is no charge. In the App you can also do much of this yourself:

• Access your personal data within the App
• Delete your account and all associated data
• Export your training data
• Turn Product Analytics on or off in the app
• Withdraw consent to AI data sharing
• Opt out of push notifications

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator: ico.org.uk, or call 0303 123 1113.

To delete your account, open the App and go to Settings > Delete Account, or sign in on this website at titantrainingacademy.co.uk/delete-account. Either way the deletion happens at once and cannot be undone: your profile, dogs, photos, sessions, progress and coach chats are removed from our servers, and the account itself is deleted. The page explains what goes and what does not. If you signed in with Sign in with Apple, deleting your account removes the data we control. You may also revoke Titan Training Academy from your Apple account settings.

Children's Privacy

Our App is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Data Security

We implement industry-standard security measures to protect your data, including encryption for data in transit and at rest. However, no method of transmission over the internet is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@titantrainingacademy.co.uk
Company: Head in the Clouds Consulting Limited
Address: Unit 13, Freeland Park, Wareham Road, Lytchett Matravers, Poole BH16 6FA, United Kingdom