Privacy Policy

PoopJob is a calm baby tracker. This page explains who we are, what personal data we process when you use the marketing site (poopjob.app) or the app (my.poopjob.app), why we process it, and what choices you have. We have tried to write it in plain English. If anything is unclear, write to us and we will explain it without lawyer-talk.

Who we are

MASTOROSTERGIOS VASILEIOS L.P. Napoleontos Zerva 10, 546 40 Thessaloniki, Greece VAT: EL802405222 · Γ.Ε.ΜΗ.: 175769406000 Email: [email protected]

We are the data controller for the data described below.

The competent supervisory authority for data protection in Greece is the Hellenic Data Protection Authority (HDPA / ΑΠΔΠΧ), Kifissias 1-3, 11523 Athens (www.dpa.gr). You can lodge a complaint with them at any time.

The short version

We collect the minimum data we need to make the app work and to keep it reliable. We do not sell your data. We do not run advertising. We do not share your data with anyone except a small number of carefully chosen service providers who help us host, monitor, and (with your consent) understand usage of the site. You can ask for a copy of your data or have your account deleted by emailing us.

What we collect, why, and on what legal basis

1. Account data

When you create an account we store your email address and a one-way hash of your password (argon2id; we never see your password in clear text).

• Purpose: authentication, account recovery, and contacting you about your account if needed.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2. Service data: the things you log

The records you create in the app: diaper logs, feeding sessions, bottle feedings, timestamps, notes, your preferred locale, and measurement-unit preferences.

• Purpose: providing the service. These are the notes the app exists to keep for you.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

We treat this data as your records. It is not health data in the clinical sense and PoopJob is not a medical device, but we hold it with the same minimum-access discipline we would apply to anything sensitive.

3. Technical telemetry (error monitoring and operational logs)

When something breaks in the app or on the site we record a small amount of context through our processor Sentry: error message, stack trace, browser and OS version, the URL where the error happened, and a coarse session identifier. We use this only to find and fix bugs.

In addition, the server side of the app forwards its operational log lines — the structured one-line records produced by the API as it handles each request (for example: “request received”, “request completed”, login outcome, an internal warning) — to Sentry alongside the error reports. Each log line is associated with the IP address that made the request. We use these only to investigate problems (a 500 error, a stuck flow, a suspicious traffic pattern) and to keep the small set of moving pieces accountable; we do not browse them otherwise. The session cookie and Authorization header are stripped from these records before they leave the server, so the logs cannot be used to impersonate you.

• Purpose: keeping the service stable and reliable.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The interest is operating a working product; we minimise what is sent and you can object at any time (see Your rights below).

4. Analytics (only with your consent)

If you accept the analytics category in the cookie banner, we use Amplitude to understand how people find and use the site and the app: which pages are popular, where people get stuck, which features get used. A small (~10%) sample of sessions includes a recording of page interactions; form inputs are masked in those recordings.

• Purpose: improving the product.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the Manage cookie preferences button on the Cookie Policy page.

The full inventory of analytics cookies and exactly what reaches Amplitude is in the Cookie Policy. That page is the authoritative reference.

5. Support enquiries

When you fill in the form at /support, or write to [email protected] directly, we receive the email address you give us, your message, the lane you selected on the form (so we know whether it’s a bug, an idea, an account question, or something else), and a small set of operational headers — your IP address, browser user-agent, and approximate country — which are written into the email body so we can triage bug reports. If you choose the “Account or data” lane, you may also tell us the email you signed up with; that field is optional.

• Purpose: answering the question you sent us, and where you’ve reported a bug, reproducing and fixing it.
• Legal basis: taking steps at your request before or during a contract (Art. 6(1)(b) GDPR), and our legitimate interest in operating user support (Art. 6(1)(f) GDPR).
• Recipients: the message is transmitted via our processor ZeptoMail (see Sharing with third parties below) and lands in [email protected], which is hosted on Cloudflare Email Routing and forwarded to a private inbox we read. The form itself is served by a small Cloudflare Worker that validates the submission and hands it off to ZeptoMail; the Worker keeps nothing — it processes the request in memory and forgets it.
• Bot-check: to keep the form from being abused by automated submissions, we use Cloudflare Turnstile. Turnstile collects browser characteristics, your IP address, and behavioural signals to determine whether you’re a human; it sets one short-lived cookie on a Cloudflare domain (see the Cookie Policy for details). This is a “necessary for the requested service” exemption from cookie consent under ePrivacy / PECR — we don’t ask you to accept it because without it the form can’t function safely.
• Retention: kept as long as the conversation is operationally useful (typically up to 24 months), then deleted. You can ask us to delete a specific thread sooner.

6. Donations

PoopJob offers an optional donation flow (the “Tip Jar”) inside the app. Donations are processed by Stripe, which receives the information needed to complete the payment: typically the donor’s email address, card details, billing postal code, and IP address. PoopJob itself never sees your card number. Stripe processes this data as an independent controller under its own privacy notice.

Donations are voluntary, non-recurring (one-time only — we will never debit you automatically), and not required to use the app.

Where your data is stored

The app and the database are hosted on Hetzner in Nuremberg, Germany. Your account data and your in-app records stay in the European Economic Area (EEA).

Four of our processors are based in the United States and store the data they process for us on US infrastructure: Sentry (error monitoring), Amplitude (product analytics, only with your consent), Cloudflare (DNS, edge network, the support-form Worker, inbound email routing, and the Turnstile bot-check on the support form), and ZeptoMail (outbound transactional email for support replies). Transfers to the US therefore happen for these limited purposes. We rely on:

• the EU Commission’s Standard Contractual Clauses (Art. 46 GDPR), and
• the EU–US Data Privacy Framework where the provider is certified,

as the legal basis for those transfers. The Amplitude transfer is additionally covered by your consent (Art. 49(1)(a) GDPR).

How long we keep it

If law requires us to keep something longer (for example, accounting records related to a donation), we will keep only the records that the law requires, for only as long as it requires.

Security

• Passwords are hashed with argon2id before storage. We never see them in clear text.
• All traffic between your browser and our servers is encrypted with HTTPS / TLS.
• Sessions are authenticated with HTTP-only, secure cookies.
• Access to production infrastructure is restricted to the people who need it.

No system is perfectly secure. If you believe your account has been compromised or you have found a security issue, please write to [email protected].

Sharing with third parties

We do not sell your data. We do not share it with advertisers or data brokers. We use a small set of data processors who act only on our documented instructions:

Each of these is bound by a data processing agreement under Art. 28 GDPR.

We will update this list if it changes. We will not introduce a new processor that handles your data in a meaningfully different way without first updating this page.

Your rights

As a data subject under the GDPR, you have the right to:

• Access the personal data we hold about you,
• Rectify anything inaccurate,
• Erase your data (“right to be forgotten”),
• Restrict how we process it,
• Object to processing based on legitimate interest,
• Portability: receive a copy of your data in a structured, commonly used format,
• Withdraw consent at any time, where processing is based on consent (this does not affect the lawfulness of processing before withdrawal),
• Lodge a complaint with a supervisory authority. In Greece, the HDPA (linked above); if you live elsewhere in the EEA, with your local authority.

How to exercise them

Email [email protected] from the address attached to your account. We will respond within one month as required by Art. 12 GDPR. Self-serve export and deletion are on our roadmap; until then we will run the request manually.

We do not charge a fee for these requests except where they are manifestly unfounded or excessive, as permitted by Art. 12(5) GDPR.

Children

PoopJob is for adults: parents and caregivers tracking their own children. Users must be at least 16 years old to create an account.

The app stores data about infants on behalf of the account-holder. PoopJob does not collect data from children directly. The account-holder is responsible for the records they create about their child and may delete them at any time.

If you believe a child under 16 has created an account, please email us and we will close the account.

Changes to this policy

We will update this page when our processing changes: new processor, new data category, different retention. The Last updated date below reflects the most recent material change. For minor wording fixes we may not update the date.

If a change materially affects you, we will tell you (in-app or by email) before it takes effect.

Contact

Questions, requests, complaints: [email protected].

Last updated: June 9, 2026

← Back to home