🇳🇱 Lees deze verklaring in het Nederlands

🚽 PottyRoyale Privacy Policy

Version 1.1 — last updated 5 September 2026

PottyRoyale is an app that lets you compete with friends, coworkers or classmates over who spends the most time on the toilet. To make that work, we process some personal data. This policy explains what we collect, why, and what rights you have. We comply with the EU General Data Protection Regulation (GDPR).

1. Who is responsible?

2. What data do we process?

• Account data: your email address, chosen display name and an encrypted (hashed) password. Your display name, your side (work or school) and your language are also stored with your account, so your profile is correct when you log in on another device.
• Profile data: your side (work or school), your language, your currency and — if you enter it — your gross hourly wage. You choose your side once when creating your account; after that it is fixed (see section 4).
• Usage data: your "sittings" (start time, duration, whether they were auto-stopped), the calculated "earned" amount, the number of minutes within school hours and, in school mode, the subject you selected. A running sitting is kept temporarily on your own device; if you have no signal when you finish, the app keeps the sitting on your device and sends it as soon as you are back online.
• Group data: the groups you are a member of, group names, the group's side and invite codes.
• Notification data: if you allow push notifications, a device token and your language preference so we can deliver notifications. When you log out, we unlink that token from your account.
• Technical data: security and error logs at our hosting provider (such as IP address and time of requests), and, if the app crashes, a crash report containing the device model, the operating system and app versions, and a technical description of the error. Crash reports never contain passwords or your hourly wage.

About your hourly wage: we use it solely to calculate your personal "earned on the toilet" counter. The exact wage and your earned amounts are visible only to you, cannot be derived by group members, and are not shared with third parties.

3. Why do we use this data?

• To make the app work (performance of our agreement): accounts, leaderboards, groups and the competition itself.
• To send you notifications (consent): for example when a group member "takes the throne". You can turn this off at any time in your phone's settings.
• To send account-related emails (performance of our agreement): confirmation codes and password resets. We do not send newsletters or marketing emails.
• To keep the app safe and fair (legitimate interest): preventing abuse, rejecting technically impossible sittings, and finding and fixing errors.

4. What do other users see about you?

PottyRoyale is a competition app played in small groups of at most ten people. Members of your group(s) can see on the leaderboard: your display name, your rank, your total sitting time, the number of sittings and your longest sitting. What they cannot see: your email address, your hourly wage, your earned amounts and your dodged lesson minutes — those appear only on your own screen. The database only gives group members these totals, never your individual sittings. People outside your groups see nothing about you. Choose your display name accordingly.

Your account belongs to one side: work or school. You choose it when creating your account and it cannot be changed afterwards; groups have a side too, so work and school groups never mix. If you want the other side, you create a new account.

5. Who do we share data with?

We never sell your data. We use a small number of processors to run the app:

• Supabase — hosting, database and authentication. Our data is stored on servers in the EU (Ireland).
• Brevo — delivery of account emails (confirmation codes, password resets). Based in the EU.
• Sentry — crash reporting when the app fails, with data stored in the EU, so we can fix problems quickly.
• Expo (EAS) — delivery of push notifications. A device token may be processed on servers in the US, based on the EU Standard Contractual Clauses.
• Apple and Google — distribution of the app via the App Store and Google Play, and the technical delivery of push notifications to your device.

6. Advertising

PottyRoyale currently shows no third-party advertising. We plan to add advertising in the future (via Google AdMob). When that happens, we will update this policy and, where required, ask for your consent first. For users we know or suspect to be minors (for example in school mode), we will only show non-personalised, age-appropriate ads.

7. How long do we keep your data?

• We keep your data for as long as your account exists.
• If you delete your account (which you can do directly in the app via Profile → Delete account, or via this page), your account, profile, sittings, group memberships and notification tokens are permanently deleted.
• If you leave a group, the group remains for the other members; when the last member leaves, the group is deleted automatically.
• Technical logs and crash reports at our processors are cleaned up automatically after a short period.

8. Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Much of this can be done directly in the app (edit your details via your profile, delete your account). For anything else, email info@pottyroyale.com — we respond within 30 days. If you are unhappy with how we handle your data, you can lodge a complaint with your local data protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

9. Minors

PottyRoyale is intended for users aged 13 and over. Depending on your country, if you are under 16 you may need permission from a parent or guardian to create an account (in the Netherlands the threshold is 16). If we suspect an account was created without that permission, we may delete it. Parents or guardians can contact us at info@pottyroyale.com.

10. Security

All connections to our servers are encrypted (TLS/https). Passwords are never stored in readable form. The database is configured so that users can only access data intended for them (row level security): your individual sittings, your hourly wage and your earned amounts can only be retrieved by you; group members only receive the totals needed for the leaderboard.

11. Changes

We may update this policy, for example when the app gains new features (such as advertising). The current version is always available on this page; we will inform you in the app about important changes.

What changed in version 1.1 (5 September 2026): the side (work/school) is fixed per account and per group; groups are limited to ten members; earned amounts and lesson minutes are now visible only to you and can no longer be retrieved by group members; the chosen icon was removed from the app; empty groups are deleted automatically; added: temporary storage of sittings on your device when offline, unlinking of the notification token on logout, and Sentry as a processor for crash reports.