Pugpig, GDPR, and you
The EU's Government Data Protection Regulation (GDPR) is enforceable as of the 25th of May 2018. Here's what you need to about how our products and services interact with your data.
Should you want to know more about GDPR, what it is and why it’s being introduced, here's a useful GDPR summary.
The good news is that most of you shouldn’t need to do anything related to Pugpig. We don’t store any data about your users. That’s the responsibility of Apple, Google or Amazon in the case of In-App Purchases, or your subscription system in the case of direct subscribers. Note that for some of you, however, some personal data does pass through the Pugpig servers when a user signs in. We do not store any of this information, or log IP addresses in server logs. If you use a Piano PKCE flow then no data is passed through our server. We're happy to chat to you about this if you need more detail.
From an analytics perspective, our out of the box Google Analytics solution doesn’t record any personally identifiable information (PII), one of the main focuses of GDPR. Certain custom dimensions that you might have set up, however, could be considered as recording PII. Get in touch with us if you’re in doubt about this.
Any other third-party services you might be using as part of your Pugpig app, such as Crashlytics, Urban Airship or Adobe Analytics (Omniture) are responsible for their compliance with GDPR. You may have already received correspondence from them explaining their position and whether any action needs to be taken. If not look out for it in the coming weeks and feel free to reach out should anything appear to pertain to your Pugpig app.
Finally, we’d also recommend checking your terms and conditions as they appear in the app. These may need to be updated to ensure that they’re correct and fully compliant.
As always, reach out to support@pugpig.com with any questions or concerns.