PUP Install
Home · Legal

Privacy policy.

Effective: May 16, 2026 Version 2.5 Plain-English summary at the top of every section

PUP is a personal health-tracking app. Everything in this document is written to be readable in one sitting. The short version: your logs are yours, we store the minimum needed to make the app work, and you can delete everything at any time.

What we collect

We try to keep this list short on purpose.

Account information

  • Your email address and display name from Sign in with Google or, on iOS, Apple Sign In.
  • A randomly generated user ID we use to associate logs with your account.
  • Optional profile fields you set yourself: username and display name.

Log data

  • The Bristol type (1–7), duration bucket, and toilet type you enter.
  • The date and time of each log.
  • An optional location name ("Home", "SPBU Cimindi") and — only if you tap "Get Location" — the GPS coordinates of that log.
  • Optional free-text notes you write.

Device information

  • App version, operating system, and a device identifier used for push notifications.
  • Crash logs (anonymised) so we can fix bugs.
🚫
What we never collect. Health records from Apple Health or Google Fit, contacts, photos, microphone, calendar, advertising IDs, or any third-party tracking pixels. PUP has no ads.

Why we collect it

Each piece of data above maps to one of these purposes:

  • Run the app. Logs need an owner; an owner needs an ID.
  • Sync across devices. If you sign in on a tablet, your logs should follow you.
  • Earn XP, achievements, and rank. Gamification needs to count things; the things are your logs.
  • Send notifications you opted into. Like a streak milestone or an achievement unlock.
  • Fix bugs. Crash logs are scrubbed of personal data before they reach us.

Where it's stored

Logs live in two places: on your device (in a local SQLite database, so the app works offline) and on our backend (PostgreSQL, hosted on Supabase in Singapore). The two stay in sync whenever you're online.

We use Cloudflare in front of the backend for caching and DDoS protection. RevenueCat handles subscription state for Pro users. Apple and Google handle authentication. Each of these is a data processor, not a buyer.

Who we share with

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

We share only with the processors above, and only the minimum needed to do their job. We disclose data to authorities only when legally compelled and will tell you when we can.

Your rights

Wherever you live, you have the right to:

  • Export your data as a PDF report from Profile → Settings → Export as PDF (Pro). Email us if you need raw JSON or CSV.
  • Correct any log by editing it in the app, or any profile field by tapping your name on the Profile screen.
  • Delete your account and all associated data. See Delete account for the exact steps.
  • Withdraw consent for push notifications or optional analytics any time, from Profile → Settings.

Children's privacy

PUP is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, write to us at contact@pup.my.id and we'll delete the account.

Changes & contact

When this policy changes in a material way, we'll notify you in the app at least 30 days before the change takes effect. Trivial copy edits (typos, clarifications) will be made silently with a bumped version number.

Questions about this policy? contact@pup.my.id.
Want your data exported or deleted on your behalf? Same address — we'll respond within 30 days.