Privacy Policy

Operator and scope

Idrane (sole proprietor: SUNGEUN KANG) operates Poop Diary: Dooey for iOS and this support website. SUNGEUN KANG is the privacy contact. Send privacy requests to poopdiary.dooey@gmail.com. This policy covers on-device processing, the Apple services you use, support emails, and this website.

Where your diary is stored

No developer account is required. You enter or choose dates and times, stool shapes and colors, feelings and symptoms, notes, photos, tags, awards, a nickname, and preferences. These may contain health information. The app stores and displays them and calculates reports on your device. It does not send your diary to an operator-controlled server or use advertising, behavioral analytics, or AI analysis SDKs. The operator cannot read your private diary.

iCloud sync

On an iPhone signed into iCloud with active full-feature access, entries and photos sync by default to the private CloudKit database in your Apple Account. After trial expiry, sync pauses until full access is purchased; existing local entries and photos remain readable and deletable. Device identifiers, change versions, and deletion markers are also used for synchronization. Disconnect iCloud in the app's settings to stop future sync. Disconnecting or uninstalling does not delete existing cloud data. Apple provides encryption in transit and at rest. We do not promise end-to-end encryption for every item. Apple's account terms and privacy policy also apply.

Photos, authentication, Watch, widgets, and export

Camera permission is used when you take a photo. The photo picker imports only the photos you choose. Refusing permission disables the corresponding feature, not the other diary features. Face ID, Touch ID, and passcode authentication are handled by the operating system. The app receives an authentication result, not facial images or biometric templates.

Apple Watch entries transfer to the paired iPhone. Widgets store summaries of dates, shapes, colors, and counts, excluding notes and photos. People who can see a widget may see this summary. Exporting a PDF or CSV is your choice. Exports exclude notes, photos, and tags but may include daily records, feelings, and symptoms. Exported files are not encrypted and are managed by the sharing destination you choose.

Purchases and diagnostics

Apple's App Store handles payments, refunds, and subscriptions. The app checks products, verified transactions, access rights, and expiration or renewal status. The operator does not receive payment card details or send your diary or photos for purchase verification. Apple processes transaction and diagnostic information under its own terms and settings. Crash reports you share with Apple, TestFlight feedback, and statistics supplied by Apple may be available to the operator. This does not involve a separate analytics SDK collecting your diary content.

Support email: data, purpose, and retention

We use your email address, sender display name, message, and voluntary attachments to answer questions, resolve problems, and handle privacy requests. Device model, iOS and app versions, and steps to reproduce a problem are requested only when needed. Do not send passwords, payment card details, identity documents, health records, or diary photos. Sending an email is optional and is not required to use the app.

Ordinary support messages are deleted from the mailbox and trash within 30 days after resolution. Where Korean electronic commerce law requires retaining consumer complaint or dispute records, we keep only the necessary records separately for three years, then delete them. An ongoing dispute or legal preservation requirement may require limited further retention. These periods apply to copies controlled by the operator. The email provider's own policy applies to its backups and security records.

Website and service providers

This website uses Netlify static hosting. It has no contact form, advertising, custom analytics code, tracking cookies, or external fonts. Hosting may process IP addresses, request times, paths, and browser information to deliver pages and maintain security. The operator does not create a separate visitor analytics database. Provider-managed log retention follows the provider's operational and security policies. Automatic Korean or English display uses your browser language settings. A manual language choice is stored only in browser local storage (dooey-language). We do not request location access or look up your country by IP address. This preference is not sent to a server and can be removed by clearing site data in your browser.

We use Google LLC's Gmail to deliver and store support email, and Netlify, Inc. to deliver and secure web pages. Your diary is not automatically sent to these services as support material. Apple's iCloud and App Store operate through your Apple Account. We do not sell personal information or share it for targeted advertising. If disclosure is legally required, we check the request and limit processing to the necessary information.

International services

When you email support, sender information, message content, and attachments may be transmitted and stored on Google's international infrastructure from the time of sending. When you visit the website, request information may be processed on Netlify's international infrastructure. Google and Netlify are US-based companies operating in multiple countries. The operator cannot select or verify the processing country for each request or a fixed retention period for provider backups. See the Google and Netlify privacy policies for processing locations, retention, and privacy rights.

You can avoid these transfers by not emailing support or visiting the website; on-device diary features remain available. Disconnect iCloud in the app's settings if you do not want cloud sync. Manage already-stored cloud data separately through your Apple Account. Contact the privacy contact for questions about international processing or deletion.

Diary retention and deletion

On-device entries remain until you delete them. Deleted entries can be restored from Trash for 30 days. Expired entries are removed from the device when the app next performs its cleanup. You can also permanently delete an entry immediately. Cloud deletion markers or photo objects may remain for conflict resolution between devices. The 30-day Trash period does not mean that every cloud object is automatically deleted after 30 days.

To remove cloud data as well, stop sync on connected devices and delete this app's data through your Apple Account's iCloud storage management. Check other devices to prevent remaining records from being uploaded again. The operator cannot access or delete your private CloudKit database on your behalf. Delete exported or shared copies separately from their destinations.

Your rights and safeguards

You may email us to request access to, correction or deletion of, or restrictions on support information we hold, or to withdraw consent where applicable. We verify authority using only necessary information and handle requests under applicable law. If a legal retention obligation or another lawful exception prevents full compliance, we explain why. You can view, edit, delete, and export diary entries in the app. An authorized legal guardian may also make a request.

The on-device vault is encrypted and its keys are managed through iOS Keychain. Device authentication is available. The operator limits support data access to the responsible person and deletes unnecessary material. Please avoid emailing sensitive entries. The app is not directed at children. If the operator needs to collect personal information from a child under 14, the required guardian process will be completed first.

Contact, complaints, and changes

Privacy contact: SUNGEUN KANG. Operator: Idrane. Email: poopdiary.dooey@gmail.com. In Korea, privacy complaints may be directed to the Korea Privacy Infringement Report Center (privacy.kisa.or.kr, 118), or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972). You may also contact your local data protection authority where applicable.

Effective October 2, 2026. We will update this page's effective date and describe material changes when the policy changes. Where separate notice or consent is legally required, we will follow that process.