Poopify

Poopify - Privacy Policy

Effective date: October 21, 2026 Version: 1.0

This Privacy Policy explains what personal data the Poopify app (the “App”) processes, why, and what rights you have. It applies to the App on all devices and to the optional Cloud Sync service.

Summary

By default, your health records never leave your device. In Local Mode, everything you record (bowel movements, menstrual cycle, symptoms, notes, profiles) is stored only on your phone. We do not receive it.
Cloud Sync is optional. If you turn it on and give your explicit consent, a copy of your records is stored in the cloud (Google Firebase, in the European Union) so it can be synchronized between your devices. Cloud Sync is being made available gradually and may not be available in all regions.
We never sell your data, never use your health records for advertising, and never share them with anyone for their own purposes.
The App shows ads and uses analytics and crash reporting from Google. These services receive device identifiers and app usage information, but not the content of your health records.
You can turn Cloud Sync off, export your data, or delete your cloud account at any time, directly in the App (Menu > Privacy).

1. Who is responsible for your data

The controller of your personal data is:

Everton Carvalho Leite, independent developer, Rio de Janeiro, Brazil Email: poopify.dev@gmail.com

Data protection contact / Encarregado (LGPD): Everton Carvalho Leite, poopify.dev@gmail.com

2. Data stored only on your device (Local Mode)

When you use the App without Cloud Sync, the following data is stored only on your device, in the App’s private storage:

the records you enter: date and time, stool characteristics, symptoms, pain, medication and food notes, hygiene method, menstrual cycle information, free-text notes;
profiles you create (name, icon, optional birth date) and App settings.

We do not have access to this data. It is not sent to us or to any third party, except in the following cases, which you control:

Exports and sharing: when you export a backup, CSV, JSON or PDF, the file is created on your device and sent only where you choose to share it.
Android device backup: depending on your device settings, Android may include App data in your device’s own backup to your Google account. This backup is managed by Google and your device settings, not by us.

3. Cloud Sync (optional)

Cloud Sync is an optional feature that is being made available gradually. It may not be available in all countries or regions, and where it is not available, the App does not show it.

3.1 What we process

If you turn on Cloud Sync, we process:

Account data: a unique account identifier and the email address of the account you sign in with (for example, your Google account), managed by Firebase Authentication.
Your health records: a copy of the records and profiles described in Section 2, excluding location data.
Technical sync data: device identifier generated by the App, timestamps of changes and synchronization status.
Consent record: the version of this Privacy Policy and the Terms of Use you accepted, and when.
App integrity signals: information that confirms that requests come from a genuine copy of the App (Firebase App Check with Google Play Integrity).

3.2 Why and on what legal basis

Purpose: only to store your records and synchronize them between the devices signed in to your account, and to let you restore them on a new device.
Legal basis: your explicit consent (GDPR art. 6(1)(a) and art. 9(2)(a); LGPD art. 7, I and art. 11, I; and equivalent rules in other jurisdictions). Account and technical data are processed because they are necessary to provide the service you requested (GDPR art. 6(1)(b); LGPD art. 7, V).
You can withdraw your consent at any time by deleting your cloud data in the App (Section 9). Turning off Cloud Sync alone only stops synchronization: the copy already in the cloud stays there until you delete it, and the App offers to delete it when you turn Cloud Sync off. Withdrawal does not affect processing that happened before it.
We do not use your cloud data for analytics, advertising, profiling, research, training of artificial intelligence, or any purpose other than providing Cloud Sync to you.

3.3 Where your data is stored

Cloud Sync data is stored on Google Cloud servers located in the European Union (Firestore multi-region “eur3”). Google acts as our processor under the Firebase Data Processing and Security Terms.

3.4 Who can access it

Through the App, only your account. Security rules on the servers block any other account from reading or writing your data.
The developer, only in exceptional cases. The data is encrypted in transit and at rest, but not end-to-end: technically, it can be seen through the administration console of the service. That console is restricted to the developer account, protected with two-factor authentication, and its access is logged. We look at your cloud data only if you explicitly ask us for help with your account, or if we are required to by law.
Google, as our infrastructure provider, processes the data only to host it on our behalf.

3.5 Availability by region

Cloud Sync may be unavailable in some countries or regions for legal or technical reasons. If Cloud Sync becomes unavailable where you are, synchronization stops, your data on your devices is not affected, and you can still delete your cloud account and cloud data at any time in Menu > Privacy.

4. Advertising

The App displays ads provided by Google AdMob. AdMob may process your device’s advertising identifier, IP address and information about ads shown and clicked.
In the European Economic Area, the United Kingdom and Switzerland, and where else required by law, we ask for your consent before ads are personalized, using Google’s consent tool. You can change your choice at any time in the App’s menu, under Ad privacy options (shown where this choice applies).
On Android you can also reset or delete your advertising ID in your device settings.
The content of your health records is never shared with AdMob or used to select ads.
If you buy “Remove Ads”, ads are no longer shown.
More information: https://policies.google.com/technologies/partner-sites

5. Analytics and crash reports

We use Google Analytics for Firebase to understand how the App is used (for example, which screens are opened and which features are used), and Firebase Crashlytics to receive reports about crashes and errors.
These services process an App instance identifier, device and operating system information, approximate location derived from the IP address (country and region), and usage events.
Usage events record that a feature was used (for example, “a record was created”), never the content of what you recorded.
Legal basis: our legitimate interest in keeping the App working and improving it (GDPR art. 6(1)(f); LGPD art. 7, IX), or your consent where the law requires it.
Analytics is linked to Google AdMob only to measure the performance and revenue of the ads shown in the App. Analytics data is not used to personalize ads (ads personalization and Google signals are turned off in our Analytics settings) and is not shared with other advertising partners.
Retention: analytics event data is kept for 2 months, and user-level analytics data for up to 14 months. Crash reports are kept for up to 90 days.

6. Purchases

Purchases (such as “Remove Ads”) are processed by Google Play. We receive only the information needed to confirm the purchase (such as a purchase token and status). We do not receive your payment details. Google’s privacy policy applies to the payment.

7. Support emails

If you email us, we process your email address and the content of your message only to respond to you, and we keep the conversation as a record of our support history, until you ask us to delete it. Please do not send health information by email unless necessary.

We do not sell personal data, and we do not “share” it for cross-context behavioral advertising.

We use the following service providers (processors), which process data on our behalf and under our instructions, or as independent controllers where stated:

Provider	Service	Data	Role
Google (Firebase Authentication, Cloud Firestore, App Check)	Cloud Sync	Account, Cloud Sync data	Processor
Google (Analytics for Firebase, Crashlytics)	Analytics and crash reports	Usage events, device data, identifiers	Processor
Google (AdMob)	Advertising	Advertising ID, IP, ad interactions	Independent controller for ads, see Section 4
Google (Google Play)	Purchases	Purchase data	Independent controller

We may also disclose data when required by law, or to protect the rights, safety or security of users or of the App, but only to the extent strictly required, and we will notify you when legally allowed.

9. Your choices and rights

9.1 Available in the App at any time

Turn off Cloud Sync: your data stays on your device and the App keeps working in Local Mode.
Delete your cloud account and cloud data: in the App (Menu > Privacy > Delete a Cloud Sync account, or Menu > Cloud Sync > Delete cloud account and data), or at https://etcho.github.io/poopify-legal/delete-account/.
Export your data (SQL backup, CSV, JSON, PDF), for access and portability.
Correct or delete records directly in the App.

9.2 Your rights

Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent; not be subject to decisions based solely on automated processing; and be informed about with whom data is shared.

European Union / EEA / UK (GDPR / UK GDPR): all rights above. You may also complain to your local data protection authority.
Brazil (LGPD, art. 18): confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, deletion of data processed with consent, information about sharing, information about the possibility of denying consent and its consequences, and withdrawal of consent. You may also complain to the ANPD (Autoridade Nacional de Proteção de Dados).
United States: see Sections 11 and 12.
Other countries: we honor equivalent rights under your local law.

To exercise any right that is not available directly in the App, email poopify.dev@gmail.com. We will answer within the period required by law for each type of request (for example, up to 15 days for a complete confirmation of and access to your data under the LGPD, and one month under the GDPR, which the GDPR allows to be extended in some cases). We may need to verify that the request comes from the account holder.

10. How long we keep data

Data	Retention
Local Mode data	On your device until you delete it or uninstall the App
Cloud Sync data	Until you delete your cloud account or your cloud data; or, at the latest, until the account has not been used by any device for 24 consecutive months; or until Cloud Sync is discontinued. Data on your devices is not affected in any of these cases
Deleted cloud data	Removed from our active systems immediately; residual copies in Google’s backup systems are deleted within the periods set by Google Cloud’s data deletion terms
Consent records (which versions of these documents you accepted, and when)	Stored with your Cloud Sync account and deleted together with it, or when you delete your cloud data
Analytics / crash reports	See Section 5
Support emails	See Section 7

11. Additional information for United States residents

Categories collected: identifiers (account ID, App instance ID, advertising ID, IP address); internet or electronic activity (App usage events); approximate geolocation (from IP, for analytics); sensitive personal information / consumer health data (only with Cloud Sync, see Section 12); commercial information (purchase status).
We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the past 12 months.
We use sensitive personal information only to provide the service you requested, so the right to limit its use is applied by default.
California, Colorado, Connecticut, Virginia, Oregon, Texas and other states with consumer privacy laws: you have the right to know, access, correct and delete your personal information, and to not be discriminated against for exercising these rights. You may appeal any decision on your request by replying to our response.
We do not knowingly collect personal information from children under 13 through Cloud Sync accounts (see Section 13).

12. Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut and similar laws)

This section is our Consumer Health Data Privacy Policy. It is also available as a separate page at https://etcho.github.io/poopify-legal/consumer-health-data/.

Consumer health data we collect: only if you enable Cloud Sync: the health records described in Section 2 (bowel movements, symptoms, pain, medication and food notes, menstrual cycle information, notes), excluding location data. We may also infer that you use a health-related app from analytics identifiers (Section 5).
Purpose: to store and synchronize your records between your devices and restore them, as requested by you.
Source: directly from you, through the App.
Sharing: we do not share consumer health data with third parties or affiliates. It is processed only by our processor, Google Cloud, to host the service.
Consent: we collect consumer health data only with your separate, explicit consent, given in the App before Cloud Sync is enabled. You can revoke it at any time.
Your rights: confirm whether we process your consumer health data, access it, obtain the list of all third parties and affiliates with whom it was shared (none), delete it, and withdraw consent. Exercise them in the App (Section 9.1) or by emailing poopify.dev@gmail.com. You may appeal any decision by replying to our response; if the appeal is denied, you may contact your state Attorney General.
We never sell consumer health data.

13. Children

The App is a personal health journal and is not directed to children.
Cloud Sync accounts are only for adults (18 years or the age of majority where you live).
Parents and guardians may use the App to keep records about their children, in separate profiles. In that case, the parent or guardian is responsible for that information and consents on the child’s behalf.
If you believe a child created a Cloud Sync account, contact us and we will delete it.

14. Security

We protect your data with technical and organizational measures appropriate to its sensitivity, including:

encryption in transit (TLS) and at rest;
server rules that let each account access only its own data;
verification that requests come from the genuine App;
restricted, two-factor-protected and logged administrative access;
data minimization (for example, location data is never synchronized);
automated tests of our security rules.

No system is completely secure. If a security incident affects your personal data, we will notify the competent authorities and you, when and as required by law (for example, within 72 hours to the supervisory authority under GDPR).

15. International transfers

We are based in Brazil, and our providers may process data in other countries. Cloud Sync data is stored in the European Union. When personal data is transferred internationally, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the EU-U.S. Data Privacy Framework where applicable, and the mechanisms provided in art. 33 of the LGPD, as offered by Google in its data processing terms.

16. Changes to this policy

We will notify you in the App about material changes before they take effect. If a change affects how we process Cloud Sync data, we will ask for your consent again. Previous versions remain available at this address followed by the version number (for example, https://etcho.github.io/poopify-legal/privacy-policy/1.0/).

This policy may be translated into other languages. In case of conflict between a translation and the English version, the English version prevails, except where the law of your country requires otherwise.

17. Contact

Email: poopify.dev@gmail.com

Version history

Version	Effective date	Changes
1.0	October 21, 2026	First version