Privacy Policy

What the Poop? is a mobile app that helps you find the nearest public toilet and access door codes shared by the community — so you never have to pay for a bathroom when someone nearby already knows the code.

The app is operated by What the Poop Ltd, based in the United Kingdom. For any privacy-related questions, email us at hello@whatthepoop.app.

We collect only what the app needs to work:

• Username & avatar — the display name and profile picture you choose when you first open the app. These are shown on toilet codes you share, so other users know who contributed them.
• Location — your device's approximate GPS location, used in real time to show you nearby toilets. We do not store a history of your location.
• Codes & ratings — toilet codes you submit, when you submitted them, and ratings left by other users on whether a code worked.
• Coin balance & transactions — how many coins you have earned (from sharing working codes or watching ads) and spent (on unlocking codes).
• Anonymous device identifier — a random ID created by Firebase Authentication. There is no email address or password linked to your account.
• Ad interaction data — collected automatically by Google AdMob when you watch a rewarded ad. See the Google Privacy Policy for details on what AdMob collects.

We do not collect health data, payment details, or real names.

We use the data we collect to:

• Show you toilet locations near your current position.
• Display shared codes and attribute them to the username of the person who shared them.
• Credit coins to your account when someone rates your code as working.
• Serve rewarded ads and record when a reward has been earned.
• Improve the map over time — for example, removing codes that are repeatedly rated as not working.

We do not use your data for marketing, profiling, or selling to third parties.

We use the following third-party services to run the app. Each acts as a data processor on our behalf:

• Google Firebase & Firestore — stores your username, avatar, submitted codes, and coin balance. Data is held on Google's servers. See the Firebase Privacy & Security page.
• Google AdMob — serves rewarded ads within the app. AdMob may use device identifiers and ad-interaction data for ad personalisation, subject to your device's ad-tracking settings.

We do not sell, rent, or trade your personal data with any other organisation.

Location is central to what the app does. When you open the app or search for toilets, your device shares its GPS coordinates with us temporarily so we can return nearby results.

We do not log or store your location history. The coordinates are used for the search request only and are not written to our database.

You can revoke location permission at any time in your device settings. The app will still work, but you will need to search manually for a location rather than seeing results near you automatically.

Your account data (username, avatar, codes, coin balance) is kept for as long as your account exists. If you delete your account, your data is removed from our systems within 30 days.

Codes you have shared may be retained in anonymised form (without any link to your username) to preserve the accuracy of the map for other users.

Under UK GDPR and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate data (your username can also be changed directly in the app).
• Deletion — ask us to delete your account and associated data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — for location access or ad personalisation, via your device settings at any time.

To exercise any of these rights, email hello@whatthepoop.app. We will respond within 30 days. If you are in the EU or UK and feel your rights have not been respected, you have the right to lodge a complaint with your local data protection authority (in the UK, that is the ICO).

What the Poop? does not contain adult content and is available to general audiences. However, the app is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at hello@whatthepoop.app and we will delete the account promptly.

We may update this policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify you via an in-app notice. Continued use of the app after changes are posted means you accept the updated policy.