Privacy Policy

This service is a log in which a parent or carer records a child's stools. There are no accounts, and nothing at all that identifies the child or the carer is collected. The child's name, date of birth, sex and photographs never reach us.

A record of a child's stools is information about health, so it is treated as sensitive, and the person it belongs to is the child, not the person writing. Handling personal data about a child under fourteen requires a legal guardian's consent; because this service handles no personal data, that procedure never arises. Whether to keep a record on the device is still the guardian's decision, so it is asked separately from the general notice about using the app, with a line asking that a parent or legal guardian be the one to turn it on.

Entries live inside this browser only and never reach our server. If this service were breached, there would be no child's records to take.

What we never send

• Photos. A nappy photo is read on a canvas inside your browser and dropped right there. It is not sent to a server or to any external AI, and neither the original nor the shrunk copy is stored. There is no upload feature at all.
• Entry content. The date, consistency step and colour you keep never leave this browser.
• IP addresses and device information (User-Agent) are not read, and no cookies are used.
• Notifications. None are sent, and permission for them is never requested. Nothing in this app nudges anyone about a child.
• Connections leaving this site are blocked at the browser level, so even code that tried to send something could not.

This site is served through Cloudflare, which automatically injects a visit-tracking script into our pages. We did not add it, so we have configured your browser to refuse it. That means the tracking call does not go out. The tag itself is still injected by that layer though, so we would rather you know about it than not. We do not use cookies.

What stays on this device

• Only if a carer turns the log on, this browser stores a date, a consistency step and a colour label. There is no free text field and no field for the child's name.
• It is off by default. With it off, entries only appear on screen and are not stored.
• Turning it off deletes what was kept, and a Delete now button is always on the log screen either way.
• The screen says not to turn it on for a shared computer, because whatever stays in the browser can be opened by the next person.

Anonymous signals the server receives

• Step names (visit, consistency picked, entry kept, share), the interface language, the channel label we wrote into our own link or the domain of the previous page (never the path or query), and the date you arrived (day only, no clock time).
• No entry content is included. Which step you picked and which colour you picked are not sent.
• If something breaks on screen, that fact reaches the same place: we send only the error name (TypeError, for example) and an eight-character fingerprint of where it happened. We never send the error message, the stack, or the address. At most three per visit.
• These signals live in short-term server logs only and are never shared with third parties. We may show Google AdSense ads to cover running costs; Google may then use cookies or ad identifiers under its own policy.

How to delete

Press Delete now on the log screen, turn the consent off, or clear this site's browser data. That finishes it, because no child's record exists on the server to request removal from.

Business registration details and a contact address will be posted here once registration is complete.