Version 2026-09-09
Privacy Policy
Draft. Written by the developer on 9 September 2026 to match what the app actually does. Not yet reviewed by a lawyer, and not legal advice. It will be finalised before the app is listed on the App Store.
Flushr is a private diary of the bathrooms you have visited. This page says exactly what the app collects, why, where it goes, how long it stays, and how to get rid of it. The short version: your diary is yours, your home never appears on anyone's map, the one health-adjacent field is optional and never leaves your own account, and Settings has a button that deletes everything.
Who is responsible
Flushr is made and run by its developer, who is the data controller. Contact: jamesjlee04@gmail.com. There is no company behind it and no one else with access to the database.
What Flushr collects
Your account
On first open the app creates a guest account: a random identifier and nothing else. No name, no email, no phone number. If you choose to save your diary, you add an email address and a password; the password is stored by our authentication provider as a hash, never in a form we can read. The app also records the date you confirmed you are 13 or older and the version of the Terms you agreed to.
Your diary
Each visit you log can hold:
- which toilet, and when;
- ratings on up to eight dimensions of the room (cleanliness, privacy, and so on) and up to five descriptors from a fixed list;
- a note of up to 280 characters, if you write one;
- how long the visit took, if you tell it;
- an optional Bristol stool scale value (1 to 7). This is the one health-adjacent field in the app. It is off by default, it is asked for with its own explanation, and it is treated as described under Health data.
Toilets you add
A toilet has a name, a type (home, office, public, pub, and so on), whether it is private, and, if you choose to pin it, a location. See Location.
Reports and blocks
If you report a toilet (or, later, a post or a person), Flushr stores what you reported, why, and that it was you. If you block someone, Flushr stores that you blocked them. Nobody is told who reported or blocked them.
Technical data
Our hosting providers keep ordinary server logs (IP address, request time, device type) for a short period to run and secure the service. Flushr contains no advertising SDK and no analytics SDK in this version. If usage analytics are added later, this page will say so first, and the App Store privacy label will change with it.
What it never collects
- Photos. The app cannot take or upload one. There is no image storage.
- Contacts, calendar, microphone, motion. Never requested.
- Background location. Never requested.
- Precise location of a private toilet, for anyone but you. See below.
Location
Location is optional and only ever read when you tap a button to pin a toilet or to find toilets near you. Flushr never reads your position in the background.
A private toilet (your home, your office, a friend's place) keeps its exact coordinates for you alone, so the map can show you where it is. Everyone else, including our own shared views, only ever sees a point blurred to roughly a kilometre. That rule is enforced in the database itself, not just in the app, and it is tested. A public toilet's location is shared as given, because that is the point of a public toilet.
Health data
The Bristol scale value is optional. Under UK and EU data protection law it counts as health data, a special category, so Flushr only stores it because you chose to enter it on that visit, and you can remove it by editing or deleting the visit, or by deleting your account. It is never shown in anything shared: not in a feed, not on a card, not in a recap, not in any query another user can run. It is not used for anything except showing it back to you in your own diary.
Why, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Keeping your diary and showing it back to you | Account, diary, toilets | Performing our contract with you (the Terms) |
| Finding toilets near you, pinning one | Location, at the moment you ask | Your consent, given by tapping the button and the system prompt |
| The Bristol scale field | That one value | Your explicit consent, given by entering it |
| Keeping the service safe and lawful | Reports, blocks, server logs | Our legitimate interest in running a service people can trust |
| Emailing you a password reset or a confirmation | Email address | Performing our contract with you |
Who else sees it
Flushr does not sell data and does not share it with advertisers. It uses these providers:
- Supabase: the database and sign-in service that holds your account and diary.
- Cloudflare: serves these pages and receives the report notifications.
- Resend: delivers the email we send ourselves when you file a report. That email contains the report's ids and reason, never a note or a rating.
- Apple and Google: the app stores, which handle download and any purchase under their own policies. Flushr has no in-app purchases in this version.
If sharing arrives (a feed of friends' visits), what you choose to share will be seen by the people you share it with, under the rules in the Terms. Nothing marked private ever will. The Bristol scale field is never shareable at all.
How long it stays
As long as you have an account. Deleting a visit removes it at once. Deleting your account (Settings, "Delete my account") removes your account, every visit, every rating, every badge, every report and block you made, and every private toilet you added, immediately. Public toilets you added stay on the map for everyone else, with your name taken off them. Our providers' backups roll off within 30 days.
Your rights
You can see everything Flushr holds about you in the app itself. You can correct it by editing it, and delete it by deleting a visit or your account, without asking us. If you would like a copy of your data in a portable form, or want to object to something, email jamesjlee04@gmail.com. If you are in the UK or EU and are not satisfied with our answer, you can complain to your data protection authority (in the UK, the Information Commissioner's Office).
Children
Flushr is for people aged 13 and over and asks you to confirm that before anything else. If we learn that an account belongs to someone younger, we delete it.
Changes
This page carries a version date at the top. When the Terms change in substance the app asks everyone to agree again on their next open; when this policy changes in substance we will say so here and in the app.
Contact
jamesjlee04@gmail.com. A person reads it.