Privacy Policy
Effective October 25, 2026
Your poop log stays on your device unless you choose to share it or turn on cloud save. Shares and cloud copies are encrypted on your device. We have no ads, no analytics trackers, and no accounts.
This policy explains how Tensor Group LLC (“Tensor Group,” “we,” “us”) handles information when you use the Stool Stats mobile apps and stoolstats.fyi (together, the “Service”).
Information you enter
Stool Stats lets you record bowel-movement events and related details, which may include time, size, consistency, shape, color, blood, discomfort, other observations, and notes. This can reveal information about your health. Your log is stored locally on your device. We cannot access it unless you affirmatively create a share or enable cloud save, and even then the content you choose to send is encrypted before it leaves your device.
Local storage, export, and deletion
The Service uses local app or browser storage to save your log and settings. You can export or import your log as JSON. You can delete individual events or all local data through the app. Backups made by your device or operating system are controlled by you and your device provider.
Encrypted share links
If you create a share, the selected stats or events are encrypted on your device with a fresh key. The decryption key is placed in the link’s fragment, which is not sent to our server. Cloudflare stores the encrypted payload and related operational metadata, including the share identifier, owner-token hash, creation and expiration times, and approximate payload size.
Anyone with the complete link can decrypt and view that shared content until the link expires or you revoke it. Revoking a link prevents future access through the Service but cannot erase copies someone already downloaded or saved.
Optional encrypted cloud save
Cloud save is off by default. If you turn it on, your log is encrypted on your device using key material derived through a compatible passkey. We store ciphertext, a vault identifier, your public key, timestamps, revision information, and approximate payload size. We do not receive the passkey’s secret or the decryption key and cannot read your cloud log.
If you lose access to the required passkey, we cannot recover the encrypted copy. Cloud copies that are not synced for 400 days expire. When you delete a cloud copy, its encrypted payload is deleted promptly; a tombstone containing the identifier, public key, and timestamps is retained so the identifier cannot be reused. Cloudflare point-in-time database backups may retain deleted data for up to 30 days.
Technical and security information
We use salted hashes of IP addresses for rate limiting and do not store raw IP addresses in our application database. Cloudflare and your device, browser, or app-store provider may independently process standard connection and security data under their own privacy policies. Worker invocation logs containing request headers are disabled for the Service.
Optional tips and payments
Native-app tips are processed by Apple App Store or Google Play billing. Tips on the web, if offered, are processed by Stripe. We do not receive your full payment-card number or store a tip history in the app. Those providers may process transaction, device, and contact information under their own privacy policies. Tips support development; they are not charitable donations and unlock no features.
Service providers
We use Cloudflare to host the website, API, encrypted shares, and encrypted cloud copies. Apple, Google, and Stripe provide platform or payment services when you choose to use them. We do not sell your personal information or share it with advertising networks.
Data retention
Local data remains on your device until you delete it, remove the app, clear browser storage, or a device backup restores it. Shared content remains until it expires or is revoked, subject to backup retention. Cloud-save retention and deletion are described above. Operational records and tombstones may be retained as needed for security, integrity, and abuse prevention.
Children
The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information directly from children.
Your choices
You can use the core log without an account, avoid sharing and cloud save, revoke share links, delete cloud copies, export your data, and delete local data. Because we cannot read encrypted content or link local logs to an identity, you generally must exercise these choices from your device or with the relevant link or passkey.
Security
We use client-side encryption and other safeguards designed for the Service’s local-first model. No method of storage or transmission is completely secure. Protect your device, passkeys, exported files, and complete share links.
International use and changes
The Service relies on providers that may process information in countries other than yours. We may update this policy as the Service changes. We will post the revised policy here and update its effective date.
Contact
Questions or privacy requests: privacy@stoolstats.fyi
Support: support@stoolstats.fyi
Tensor Group LLC
Stool Stats is for personal tracking and entertainment and does not provide medical advice, diagnosis, or treatment.