Privacy Policy
Last updated: August 15, 2026
1. Who We Are
PawTrek is operated by Big Bespoke LLC (“we,” “us,” “our”). PawTrek is a mobile and web application for law enforcement K9 handlers to document deployments, training sessions, and related activities.
2. Information We Collect
Account Information: Name, email address, rank, badge number, agency name, jurisdiction (state, county, federal circuit). Provided during registration.
K9 Information: Dog name, breed, date of birth, specialty, scent list, certifications, medical records. Provided by the handler.
Report Data: Deployment logs, training records, activity logs, care time records, narratives, GPS tracks, weather data, photos. Created by the handler during normal app use.
Audio Data: Voice recordings captured during ambient capture mode. Audio is streamed to Deepgram for speech-to-text transcription and stored temporarily in device storage. Audio files may be uploaded to Firebase Cloud Storage for batch transcription and forensic record purposes. Audio is never used for AI model training.
Device Information: Operating system, device model, app version, crash reports (via Firebase Crashlytics). Used for debugging and improving app stability.
Diagnostics & Error Reports: When the app encounters an error, a diagnostic report is sent to Sentry (Functional Software, Inc.), our error-monitoring provider. These reports include the error details, device model, operating system, app version, your internal account ID, and a short trail of recent in-app events (screens visited, buttons tapped, network request outcomes) that helps us reproduce the failure. This trail records that an action happened — it does not contain report narratives, transcripts, photos, audio, or any other record content, and log payloads are redacted before sending. Your IP address is used at ingestion to derive an approximate city-level region and is not stored on the error report. Session counts and crash-free rates are also collected to measure app stability.
Usage Analytics: We collect usage events — which screens are viewed and which features are used (for example: a report was saved, a court packet was generated, a live track was started) — together with your internal account ID, your role type, and timestamps. Record content is structurally excluded from analytics: event data is limited to short, fixed labels and can never contain narratives, transcripts, or other report content. Today these events are collected first-party into our own database and are not shared with any analytics vendor. An upcoming app version will enable Google Analytics for Firebase for the same event data, at which point Google will process these events on our behalf and an app-instance identifier will be collected; this policy covers that use.
Location Data: GPS coordinates captured during deployments and training sessions, with handler permission. Used for track recording, map display, and automatic location fields on reports. Report coordinates are also sent to the National Weather Service (a U.S. government service) to attach official weather observations to your report.
3. How We Use Your Information
- To provide the PawTrek service: report generation, case law citations, GPS tracking, court packet generation.
- To process AI-generated narratives via xAI (Grok API). Your report data is sent to xAI for narrative generation. xAI does not train on API data.
- To transcribe voice recordings via Deepgram. We opt out of Deepgram's model improvement program (mip_opt_out=true). Audio is processed and immediately deleted by Deepgram.
- To send notifications about certification expirations, report reviews, and system updates.
- To process subscription payments via Stripe.
- To improve app stability via crash and error reporting (Firebase Crashlytics and Sentry).
- To understand which features are used and improve the product via usage analytics (first-party today; Google Analytics for Firebase in an upcoming version). Analytics never includes record content.
4. AI Data Governance
xAI (Grok): Used for narrative generation, field extraction, and chat assistance. xAI does not train on API inputs or outputs. Data is auto-deleted within 30 days. xAI holds SOC 2 Type 2 certification and is GSA-approved for government use.
Deepgram: Used for speech-to-text transcription. We set mip_opt_out=true on every API call to prevent handler audio from entering any training data. When opted out, audio is processed and immediately deleted. Deepgram holds SOC 2 Type II certification.
No handler audio, transcript content, or report data enters any AI training pipeline.
5. Data Storage & Security
All data is stored in Google Firebase (Firestore, Cloud Storage, Authentication) in the us-central1 region. Data is encrypted at rest and in transit. Authentication requires multi-factor authentication. Sessions expire after 30 minutes of inactivity per CJIS Security Policy v6.0 guidelines.
6. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with:
- xAI: Report data for AI narrative generation (not retained for training).
- Deepgram: Audio for speech-to-text (immediately deleted after processing).
- Stripe: Payment processing (name, email for billing).
- Firebase/Google Cloud: Infrastructure provider (data storage, authentication, hosting, push notifications).
- Sentry (Functional Software, Inc.): Error and crash monitoring (diagnostic reports as described in Section 2 — no record content).
- Google Analytics for Firebase: Usage analytics processing, beginning with an upcoming app version (event data and an app-instance identifier — no record content).
- Mapbox: Map rendering. When you view maps, your device requests map tiles from Mapbox (which reveals the approximate map area viewed), and the Mapbox SDK may collect usage telemetry per Mapbox's privacy policy.
- National Weather Service: Report coordinates, to retrieve official weather observations (a U.S. government service).
- Resend: Transactional email delivery (recipient name/email and the message content of emails you trigger, such as court packet shares and invitations).
- Expo (EAS): App update delivery — your device requests over-the-air app updates from Expo's servers (standard request metadata; no account or record data).
- Your agency supervisors: If you submit a report for supervisor review, the reviewing supervisor can see that report.
Diagnostic and analytics data never includes report narratives, transcripts, photos, audio, or other record content. The only account identifier attached to diagnostics is your internal account ID — never your email or name.
7. Data Retention
Report data (deployments, training logs, activity records) is retained as long as your account is active. Deployment records are considered legal records and are retained for the duration required by your agency's records retention policy. You may request data export or account deletion by contacting us.
8. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting alexi@pawtrek.app. You may delete your account and its data directly in the app via Settings → Delete Account, and you may export all your data at any time via Settings → Export My Data.
9. Contact
Alexander Derkatsch
Big Bespoke LLC
Email: alexi@pawtrek.app
Phone: +1 (609) 815-0257