1. Two different roles — please read this first

HeelYeah serves two kinds of people, and our responsibilities differ for each:

2. Information we collect

Account and identity information

When a trainer or team member creates an account we collect name, email address, and (optionally) phone number, business name, time zone, and role. Authentication is handled through Amazon Cognito; sign-in typically uses an emailed magic link rather than a stored password.

Information about clients and animals (entered by trainers)

Trainers may enter client contact details (name, email, phone, mailing address), animal details (name, species, breed, age, weight, photos), training goals, behavioral and care notes, session notes, and similar records. Some of these notes can be sensitive. HeelYeah stores this on the trainer’s behalf.

Payment and billing information

Paid plans and invoices are processed by Stripe. We do not collect or store full payment card numbers — Stripe handles card data directly. We retain billing records such as Stripe customer and subscription identifiers, invoice amounts, dates, and status.

Content and media you upload

Photos, videos, documents, and other files (for example session media, resources, and program logs) are stored in Amazon S3 and delivered through Amazon CloudFront using access-restricted (signed) URLs and cookies.

Consent forms

When a client signs a consent or waiver form in HeelYeah, the signed PDF records the signer’s typed name, the date and time, the form version, and the signer’s IP address, so the trainer has a verifiable audit trail. These records are stored on the trainer’s behalf.

Usage, device, and analytics information

We use Google Analytics to understand how the Service and our website are used. This may include pages viewed, actions taken, approximate location derived from IP address, and device and browser information. In the trainer portal we associate analytics with a non-identifying account identifier and your role/business identifier for product analytics — we do not send your name or email to Google Analytics.

Communications

We send transactional emails (such as sign-in links, reminders, follow-ups, and notifications) through Amazon SES, and we keep records of support communications you send us.

3. How we use information

We use information to: provide, operate, and maintain the Service; authenticate users and keep accounts secure; process payments and manage subscriptions; send transactional and service notifications you’ve enabled; provide AI-assisted features (see below); detect, prevent, and investigate fraud, abuse, and security incidents; provide customer support; analyze and improve the Service; and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. AI-assisted features

HeelYeah offers optional AI features that summarize and assess training progress — for example generating behavioral assessments from session notes or nightly board-and-train summaries. To do this, the relevant text (such as session notes and animal logs) is processed by Amazon Bedrock using Anthropic’s Claude models. This processing runs within AWS; under AWS Bedrock’s terms, your content is not used to train the underlying foundation models. AI output can be inaccurate or incomplete and is not a substitute for professional judgment. Trainers control whether AI processing is enabled for their account.

5. How we share information; service providers

We share information with trusted service providers who process it on our behalf to run the Service, including:

We may also disclose information to comply with the law or valid legal requests; to protect the rights, safety, and property of HeelYeah, our users, or others; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect it consistent with this Policy.

6. Cookies and similar technologies

We use browser storage and cookies to keep you signed in (authentication tokens are kept in your browser’s local storage), to run analytics (Google Analytics cookies), and to protect forms from abuse (Cloudflare Turnstile). You can control cookies through your browser settings and can opt out of Google Analytics using Google’s opt-out browser add-on. Blocking some technologies may affect how the Service works.

7. Data retention

We keep personal information for as long as an account is active and as needed to provide the Service, and afterwards as required to comply with legal obligations, resolve disputes, and enforce our agreements. Information that a trainer enters about clients and animals is retained according to that trainer’s use and instructions. When you close an account, we delete or de-identify information within a reasonable period unless we are required to keep it.

8. Security

We use technical and organizational measures to protect information, including encryption in transit (TLS) and at rest, access controls, and tenant isolation that separates each business’s data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Trainers and team members can update much of their information directly in the app or by contacting us. If you are a client of a trainer, contact that trainer to exercise these rights, since they control your data; we will assist them. You can manage notification preferences in your account settings.

10. U.S. state privacy rights

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, access, delete, and correct personal information, and the right not to be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising. Residents of other U.S. states with comprehensive privacy laws may have similar rights. To make a request, contact us using the details below.

11. International users

HeelYeah is operated from, and stores data in, the United States. If you access the Service from outside the United States, you understand your information will be processed in the United States.

12. Children’s privacy

The Service is intended for businesses and is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Effective” date above, and for material changes we will provide additional notice where appropriate.

14. Contact us

Questions or requests about this Policy or your information:
HeelYeah!
1155 S Power Rd
Ste 114 #936
Mesa, AZ 85206
Email: hello@heelyeah.com