Privacy Policy
Effective date: 14 November 2026
About Pupiters
Pupiters is a small, independent Android app for tracking toilet routines with friends. It is for fun, not medical care. The person who runs Pupiters is responsible for how Pupiters uses your data. Contact them at dev@ridzki.com.
Pupiters is for people aged 18 and older. Do not create an account if you are under 18. If you think someone under 18 has an account, contact us. If we confirm an account belongs to someone under 18, we will delete it.
What we collect and why
- Your Google email and the account identifiers needed to sign you in. Google's sign-in also passes your Google account name and a link to your Google profile picture, which our sign-in provider stores with your account. Pupiters does not show or use them. Pupiters does not receive your Google password.
- Your username, display name and chosen emoji avatar, so people can find you and recognise you.
- Your Plongs and "No plong today" check-ins. A Plong includes its occurrence time and saved time zone. You can add Bristol type, amount, colour and how it felt. Bristol type can be skipped. We use these records for your history, stats, streaks, scores and fun predictions.
- App activity: friend requests and friendships, blocks, reactions, pokes and reports. We use these to run social features, handle reports and limit unwanted contact.
- Your signup date, when you confirmed the 18+ and privacy screen, your invite code and credited inviter, if any. Invite credit remains if you later remove or block that friend. We use our own account, entry and friendship records to count app use and invites. Deleted accounts drop out of those metrics.
- Technical data our providers process to run sign-in and message delivery, such as IP addresses, device or app details and notification installation identifiers. The exact fields and retention need confirmation before publication.
- Your sharing and notification settings, and push tokens if you enable notifications. A push token is an address used to send notifications to your device.
Entries save on your device before syncing to Supabase. The app also keeps cached data so you can use it offline.
Your toilet records can reveal sensitive information about your health. Choose what you share carefully. We do not collect photos, videos, location, contacts or free-text toilet notes. Pupiters has no ads, ad SDKs or third-party analytics. We do not sell your personal data.
Who can see what
| Who | What they can see |
|---|---|
| Any signed-in user, through username search unless blocked | Your username, display name and emoji avatar. There are no public profiles. |
| Your friends | Today's check-ins and their time buckets (morning, afternoon, evening or night), which days you checked in and which were ideal days, streaks, weekly score and fun prediction. |
| Your friends, only when you turn on "Share details" | Entry details: Bristol type, amount, colour, feel and exact time. "Share details" is off by default. |
| You | Your full records, including your email and stored time zones. Other users cannot see your email or stored time zones. |
An "ideal day" means a day with at least one type 3–4 Plong. Friends also see your leaderboard rank and emoji reactions on Plongs they can access. Friends can see which days were ideal even with "Share details" off, so this reveals a little about your Bristol patterns.
When you turn off "Share details", the server stops sending your entry details to friends at once. A friend's screen that is already open can keep showing them until it refreshes, usually within 5 minutes, or longer if they are offline. Removing a friend ends their friend access and removes them from your past leaderboards. Blocking also hides each of you from the other's search and requests. These controls cannot erase screenshots or information someone already saw.
The person who runs Pupiters reviews user reports and may access data when needed to run the service, handle a problem or meet legal duties. Service providers also process data as described below. "Only you" describes visibility to other app users, not a promise that service operators cannot access data.
Services we use and where data goes
- Supabase hosts the database, account sign-in system and live updates. It processes account data, entries, app activity and settings for Pupiters.
- Google sign-in verifies your Google account so you can sign in. Google handles your use of its sign-in service under its own privacy policy.
- Expo push service and Google's Firebase Cloud Messaging (FCM) deliver Android notifications. They process push tokens and notification content. Messages can include a friend's name and that they just Plonged, a poke, streak information or weekly results. Notifications may appear on a lock screen. You can change notification settings or deny notification permission and still use the app. We keep a record of notifications we send (type, recipient, the friend it's about, time and delivery status, without the message text) for 3 days to apply the daily limit.
Supabase stores the database in its Singapore region, outside Indonesia. Sign-in, push delivery and provider operations may process data in other countries. Choosing a database region does not mean all processing stays there.
Read more: Supabase data processing terms, Google privacy policy, Expo privacy policy, and Firebase privacy information.
How long we keep data
We keep account information, entries and app activity while your account is open so your history and social features work. The entry edit window does not limit how long entries are kept. You can edit or delete an entry only while its local day is today or yesterday under the app's rules. You can still delete your whole account later.
Account deletion removes your profile and all entries from the active service at once. It also ends your social access. We cannot erase copies other people saved, or delete your Google account.
Account deletion also deletes the reactions, pokes, reports, blocks, friendships, friend requests, push tokens and notification records linked to your account. Records of notifications sent to friends about you no longer identify you, and we delete them once they are 3 days old. Signing out tries to delete this device's push token and unregister it for notifications. If these steps fail, the server copy can remain and notifications may continue. We handle web deletion requests within 30 days. We keep deletion-request messages for 6 months as a record of the request, then delete them. Pupiters runs on Supabase's Free plan, which does not include automatic backups and keeps API and database logs for 1 day. Sign-in audit records that Supabase Auth keeps, which can include your email, expire within 30 days. If our plan or these settings change, we will update this page. Notification providers handle delivery data under their own policies.
How we protect your data
- The app connects to Supabase only over HTTPS, so data is encrypted in transit. Supabase says it encrypts customer data at rest.
- Database access rules (row-level security) limit each signed-in user's direct access to their own records and friends' reactions on them. Search and friend features use server functions that return only the fields described in "Who can see what", and entry details only while a friend shares them.
- The app contains only Supabase's public key, never a key that bypasses these rules.
- The app's offline copy of friends' data leaves out their entry details.
No method of storing or sending data is completely secure.
Your choices and deletion
You can change your profile, sharing controls, friends and notifications in the app. "No plong today" counts as a check-in; you do not need to log a bowel movement every day.
To delete your account and all entries, use Delete account in Settings. If you cannot use the app, request account deletion at pupiters.vercel.app/delete-account. That page links to a Google Form, so Google stores your request for us. We may need to verify that the account is yours before acting on a web request. Uninstalling the app does not delete your account or server records.
For questions, access or correction requests, to delete specific data without deleting your account, or to ask about your privacy rights, write to dev@ridzki.com. If an entry is locked, contact us about a correction request. Data export is not an in-app feature in v1.
Privacy in Indonesia
Indonesia's Personal Data Protection Law (Law No. 27 of 2022, known as UU PDP) covers personal data and people's rights. You can contact us about your data or a privacy concern. This policy is not a claim that Pupiters meets every legal requirement. The rules for sensitive data and overseas processing need review before launch.
Changes
We will update this page and its effective date when the policy changes. For changes that affect what we collect or share, we will explain them in the app before they take effect.