Privacy Policy
Last updated: March 11, 2026
Effective: March 11, 2026
Poopaya
This Privacy Policy describes how Mote Software OÜ (“we”, “us”, “our”), an Estonian private limited company (registry code 14718882) with its registered address at Tartu mnt 67/1-13b, Tallinn 10115, Estonia, handles information in connection with the Poopaya mobile application (“App”).
By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
1. Our Privacy Commitment
Poopaya was designed with privacy as a core principle. Your health data stays on your device. We do not operate user accounts, we do not require registration, and we do not collect or transmit your bowel movement data, symptom logs, or any other health-related information you enter into the App.
2. Information We Do Not Collect
To be clear about what we do not do:
- We do not collect your bowel movement logs, symptom data, medication records, dietary information, or lifestyle factor entries.
- We do not require you to create an account or provide your name, email address, or any other personal identifier to use the App’s core features.
- We do not sell, rent, or trade any personal data to third parties.
- We do not display advertisements in the App.
- We do not use tracking pixels, advertising identifiers, or cross-app tracking technologies.
3. Information Stored on Your Device
All health and tracking data you enter into Poopaya is stored exclusively on your device using local storage. This includes:
- Bowel movement logs (timing, Bristol Stool Scale type, urgency, effort, quantity, evacuation completeness)
- Symptom records
- Medication and supplement logs
- Dietary notes
- Lifestyle factor entries (sleep, alcohol, exercise, abdominal massage, etc.)
- Notes and free-form text entries
- App preferences and settings
This data never leaves your device unless you explicitly choose to export it (for example, generating a report to share with your healthcare provider) or enable an optional backup feature such as iCloud backup.
4. Information We May Collect
While your health data remains on your device, certain limited information may be collected or processed in the normal course of operating the App:
4.1 App Store Transaction Data
When you purchase a Poopaya Gold subscription, the transaction is processed entirely by Apple. We receive confirmation of your subscription status (active, expired, trial) from Apple but do not receive or store your payment details, credit card number, or Apple ID credentials.
4.2 Basic Analytics
We may collect anonymised, aggregated usage data to help us understand how the App is used and to improve the experience. This may include:
- App launch and session frequency
- Feature usage patterns (which screens are visited, which features are used)
- Device type, operating system version, and app version
- Country or region (derived from App Store region, not GPS)
- Crash reports and error logs
This data is collected in aggregate form and cannot be used to identify you personally. It does not include any of your health or tracking data. We use Apple’s built-in analytics frameworks for this purpose, which are subject to your device’s privacy settings. You can opt out of sharing analytics data with app developers through your device’s Settings > Privacy & Security > Analytics & Improvements settings.
4.3 Support Communications
If you contact us at support@poopaya.com, we will receive and store your email address and the content of your message for the purpose of responding to your enquiry. We will not use your email address for marketing purposes unless you separately opt in to receive marketing communications.
4.4 Apple HealthKit Data
If we introduce HealthKit integration in a future update, any data read from or written to HealthKit will be handled in accordance with Apple’s HealthKit guidelines. HealthKit data will never be used for advertising, will not be shared with third parties, and will only be used to provide you with health-tracking functionality within the App. HealthKit integration will always require your explicit permission through iOS system prompts.
5. How We Use Information
The limited information we may collect (as described in Section 4) is used solely for the following purposes:
- Operating the App: Processing subscription status, enabling premium features.
- Improving the App: Understanding usage patterns, identifying bugs, and prioritising feature development.
- Providing support: Responding to your enquiries and resolving technical issues.
- Legal compliance: Meeting our obligations under applicable laws and regulations.
We do not use any collected information for advertising, profiling, automated decision-making, or any purpose unrelated to the operation and improvement of the App.
6. Data Sharing
We do not sell your personal data. We may share limited information only in the following circumstances:
- Apple: Transaction and subscription data is processed by Apple in accordance with Apple’s privacy policy. We receive only subscription status confirmations.
- Analytics providers: If we use any analytics service beyond Apple’s built-in frameworks, we will update this policy to identify the provider. Any such service will process only anonymised, aggregated data.
- Legal requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Mote Software OÜ, our users, or the public.
- Business transfer: In the event of a merger, acquisition, or sale of all or a portion of our assets, any data we hold may be transferred as part of that transaction. We will notify you via the App or email before any such transfer takes effect if it would result in a material change to how your data is handled.
7. Data Retention
On-device data: Your health and tracking data is stored on your device for as long as you keep the App installed. If you delete the App, this data is permanently deleted from your device (unless backed up via iCloud or another mechanism you have enabled).
Support communications: We retain support emails for up to 24 months after resolution of your enquiry, after which they are deleted.
Analytics data: Aggregated, anonymised analytics data is retained for up to 36 months, after which it is deleted or further anonymised.
8. Data Security
We take reasonable technical and organisational measures to protect the limited data we handle. Your on-device health data benefits from the security features built into iOS, including device encryption when a passcode is enabled. If you enable FaceID/TouchID lock within Poopaya Gold, the App adds an additional layer of access protection.
However, no method of electronic storage or transmission is 100% secure. We cannot guarantee the absolute security of your data and encourage you to keep your device software up to date and use a strong device passcode.
9. Your Rights
9.1 General Rights
Because your health data is stored locally on your device, you have full control over it at all times. You can view, modify, or delete any entry within the App. You can delete all data by uninstalling the App.
9.2 Rights Under GDPR (European Economic Area Users)
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR) with respect to any personal data we process:
- Right of access: You may request confirmation of whether we process your personal data and, if so, a copy of that data.
- Right to rectification: You may request correction of inaccurate personal data.
- Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to our processing of your personal data in certain circumstances.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for Mote Software OÜ is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.
To exercise any of these rights, please contact us at support@poopaya.com. We will respond to your request within 30 days.
Our legal basis for processing any personal data we collect is:
- Legitimate interests (Article 6(1)(f) GDPR) for anonymised analytics data, where our interest in improving the App does not override your fundamental rights.
- Contractual necessity (Article 6(1)(b) GDPR) for processing subscription data necessary to provide the service you have purchased.
- Consent (Article 6(1)(a) GDPR) for any optional data processing, such as HealthKit integration, which will always require your explicit opt-in.
9.3 Rights Under CCPA (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. Given that we collect very limited personal information and do not sell personal information, most CCPA provisions have limited practical application to our App. However, you have the right to:
- Know what personal information we collect and how it is used.
- Request deletion of your personal information.
- Not be discriminated against for exercising your privacy rights.
We do not sell personal information as defined by the CCPA.
10. Children’s Privacy
Poopaya is not intended for use by children under the age of 17. We do not knowingly collect personal information from children under 17. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@poopaya.com and we will take steps to delete such information.
11. International Data Transfers
Mote Software OÜ is based in Estonia, a member of the European Union. If you use the App from outside the EU, please be aware that any data you transmit to us (such as a support email) will be processed in the EU, which provides a high standard of data protection under the GDPR. We do not transfer personal data outside the EEA except where adequate safeguards are in place in accordance with applicable data protection law.
12. Third-Party Links and Services
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of any third party. We encourage you to read the privacy policies of any third-party services you access.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means. The “Last updated” date at the top of this policy indicates when it was most recently revised. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Mote Software OÜ Tartu mnt 67/1-13b Tallinn 10115, Estonia
Email: support@poopaya.com
For data protection enquiries, you may also contact the Estonian Data Protection Inspectorate: Website: www.aki.ee