POOPPAL is a personal bowel-habit and gut-wellness tracker designed to keep sensitive records under the user's control.
Data you choose to enter
POOPPAL can store bowel-movement time, Bristol type, colour, amount, effort, feeling, duration, notes, food flags, display name, a composed POOPPAL avatar, and preferences. The app uses these records to show history, scores, trends, correlations, reminders, exports, and reports. POOPPAL does not accept profile-photo uploads for the friend circle.
Storage and sync
On Apple platforms, records are stored locally with Core Data. If the user enables iCloud sync, records are also stored in that user's private iCloud/CloudKit database so they can sync across the user's Apple devices. POOPPAL's developer cannot browse the contents of a user's private CloudKit database.
On Android, records are stored locally. Android backup or device-transfer services may copy app data according to the user's Google and device settings.
Private bowel records are not sent to POOPPAL's social server.
Optional online community
The online community is off by default. If a user explicitly joins it, POOPPAL creates an anonymous account and stores an app-generated identifier, alias, composed POOPPAL avatar, invite code, date-level check-ins, streak, aggregate social points, challenge and friend state, moderation actions, and any live presence the user switches on. An APNs device token is stored only if the user also allows notifications.
When a user saves a friend-circle nickname, the server first applies local safety rules. The nickname text alone may then be sent to OpenAI's moderation service, with Google Cloud Natural Language used as a provider fallback. No account identifier, avatar, friend data, or health record is included in that moderation request.
Private friend leaderboards require a separate switch. If enabled, the server stores one summary per local day containing entry count, healthy-range count (Bristol 3–5), longest recorded session in seconds, and manually logged water in millilitres. Friends see only the calculated leaderboard value.
The community server does not receive individual Bristol types, exact bowel movement times, stool colour, amount, effort, feeling, notes, photos, food, sleep, steps, or HealthKit records. Turning leaderboard sharing off deletes the stored daily summaries. Community data is used only to operate requested social features, security, notifications, and moderation. It is not used for advertising or cross-app tracking.
Apple Health and Health Connect
With explicit permission, POOPPAL can read sleep, steps, and hydration data from Apple HealthKit or Android Health Connect to show personal context and correlations. Access is optional and read-only. POOPPAL does not send this health data to its own server. Permission can be revoked in system settings.
Purchases
Apple processes purchases through the App Store. Google processes purchases through Google Play. POOPPAL receives entitlement status and product information but does not receive full payment-card details.
Advertising
The Apple version does not include third-party advertising.
The free Google Play version may use Google AdMob. Google and its partners may process device identifiers, ad interactions, diagnostics, approximate location derived from IP address, and consent choices to deliver, measure, secure, and where permitted personalize ads. Premium removes advertising. Refer to Google's privacy documentation and the consent choices shown in the app for details.
POOPPAL never supplies bowel records, notes, photos, HealthKit data, or Health Connect data to advertisers.
Analytics
The current Apple version does not send product-usage analytics to POOPPAL or an external analytics provider. App Store and Google Play may provide developers with aggregated storefront, purchase, crash, and performance reports under their own terms.
Export, sharing, and deletion
Users can export their records and choose an app or person to receive them. POOPPAL only shares data after the user initiates the system share flow.
Users can erase POOPPAL data from Settings. Deleting the app removes local data subject to operating-system backups. Users who enabled iCloud sync can manage app data through their iCloud settings.
Users can disconnect from the online community at any time. Community Privacy settings let users stop and delete friend-leaderboard summaries separately, or delete the anonymous online-community account and all related social data, without deleting private on-device or private iCloud health records.
Security
On supported Apple devices, users may protect app access with Face ID, Touch ID, Optic ID, or the device passcode. Biometric matching is performed by the operating system; POOPPAL does not receive biometric templates.
No storage or transmission method can be guaranteed completely secure. Keep the device and platform account protected.
Children
POOPPAL is not directed to children under 13 and does not knowingly collect personal information from them.
Medical disclaimer
POOPPAL is a wellness tracking tool, not a medical device. Scores, correlations, timing estimates, and educational content do not diagnose, prevent, or treat disease and are not a substitute for professional care.
Seek qualified medical advice for concerns. Seek prompt care for severe pain, blood in stool, black tarry stool, persistent symptoms, unexplained weight loss, fever, dehydration, or an emergency.
Changes
This policy may be updated as POOPPAL changes. The effective date above identifies the latest version.
Contact
Questions or privacy requests: pooppal_tracker.support@superorange77.com