MR. TOOTS
EN
ENDEESFRITPLPTTR

Privacy Policy

Protecting your personal data is important to us. This Privacy Policy informs you in accordance with the General Data Protection Regulation (GDPR) about which data the Mr. Toots app (the App) processes and which rights you have.

Controller

The controller within the meaning of the GDPR is Patrick Sieber. The full postal address and contact details can be found in the Provider & Contact section at the end of this Privacy Policy.

Principle: Anonymous Use

The App is designed for data-minimising, anonymous use. Sign-in is based on anonymous Firebase authentication. No name, email address or registered account is required. You may optionally link an email address; only in that case do we process that address.

Processing of the Stool Photo

When you take a stool photo for analysis, the photo is transmitted encrypted to a Google Cloud Function of the Provider operated in the EU, analysed there using Google Vertex AI (Gemini), and then immediately discarded. In the standard analysis flow, the photo is not kept in your diary or on a server beyond the moment of analysis; server-side security rules enforce its immediate disposal. The separate optional photo donation is described below.

The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract), as the analysis is a core function of the service you requested.

Optional Photo Donation

Separately from standard analysis, you may explicitly choose to donate a copy of the photo together with your confirmed stool type to help improve the image model. Donation is never automatic, is not required to use the App, and is requested separately before upload. Donated copies are used only for training and quality improvement and are uploaded without a link to your account. You can disable future donations at any time in the profile. Because the Provider cannot later assign a donated copy to you, it cannot be individually retrieved or deleted after donation. The legal basis is your consent under Art. 6(1)(a) GDPR; withdrawal applies to future donations.

Stored Data

Only the anonymous result of the analysis is stored, namely Bristol type, Gut Score, colour, tags and timestamp, together with the meals you log manually and the insights computed from them. Apart from a separately consented photo donation described below, no photo data is stored.

This data is first stored locally on your device. Only if you expressly enable cloud sync (opt-in) is it additionally stored in Google Firestore in the EU region (europe-west3).

The legal basis for local processing is Art. 6(1)(b) GDPR. The legal basis for optional cloud sync is your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

Subscription

For the Mr. Toots Plus subscription we use RevenueCat to manage the subscription status. Payment is processed exclusively by the Apple App Store or Google Play. The Provider receives only the subscription status, never your card or payment data. The legal basis is Art. 6(1)(b) GDPR.

Usage Analytics

To improve the App we process only anonymous in-app usage events. These do not allow any conclusions about your identity. The legal basis is our legitimate interest in a functioning and improved App under Art. 6(1)(f) GDPR.

Processors and Recipients

To provide the service we use carefully selected service providers as processors:

Where a transfer to a third country takes place in an individual case, we base it on appropriate safeguards within the meaning of the GDPR, such as the standard contractual clauses.

Storage Period

Locally stored data remains on your device until you delete it or uninstall the App. Data synced to the cloud is stored until you disable syncing or delete your data.

Your Rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21). Any consent given can be withdrawn at any time with effect for the future (Art. 7(3)).

You can delete all data linked to your use of the App at any time in the profile screen. Anonymously donated copies are excluded because they can no longer be linked to your account after donation.

Right to Lodge a Complaint

Without prejudice to other remedies, you have the right to lodge a complaint with a supervisory authority. The competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Provider & Contact

Patrick Sieber
Lange Gasse 5
6165 Telfes
Austria

Email: support@mrtoots.app