Ploft Privacy Policy

Last updated: October 14, 2026

Ploft is an app to find, rate and check in at bathrooms. This policy explains which data leaves your device, where it is kept, what it is used for and how to delete it. The data controller is Lucas Buchalla Sesti, Ploft's developer, based in Spain. Contact: contato@seeken.com.br.

Summary

• You need an account to use Ploft.
• We store what you create in the app: profile, check-ins, reviews, photos, groups and friends.
• The app shows Google AdMob ads, which use device data according to your consent.
• Ploft does not sell your data. It uses Google Analytics for Firebase and Crashlytics to understand how the app is used and to fix crashes. In the EU/EEA, the UK and Switzerland this only happens if you agree (the app asks the first time you open it); anywhere, you can turn it off in Settings → Share usage data.
• You can delete your account and all your data at any time, inside the app.

Data that leaves your device

Account (Firebase Authentication, by Google)

• Email and password, if you sign up with email. Firebase stores the password in hashed form; we never see it.
• Your Apple or Google account identifier, plus the name and email those services send, if you sign in with them.
• An internal account ID and the IP address used to sign in, which Firebase keeps to prevent abuse.
• Purpose: creating and maintaining your account and keeping the service secure.

Profile and content (Cloud Firestore, by Google)

• Name, @username, city, avatar or profile photo, level, XP and medals.
• Check-ins: bathroom, date and time, neighborhood, city and the device's exact location at check-in time (it must be within 50 m of the bathroom). Home throne check-ins store no location.
• Reviews: ratings, tags, comment and bathroom photos.
• Bathrooms you add: name, address, category and location.
• Groups you create or join, your friends list and your "helpful" votes.
• Reports you send.
• Settings: private mode, hide history and flush sound.
• A Firebase Cloud Messaging token, used to send alerts if you allow notifications.
• Purpose: making the app work (map, check-ins, rankings, medals, groups, friends and moderation).

Who sees what. Other people with a Ploft account can see your name, @username, city, avatar or photo, level, medals and published reviews. Your friends and groups see your check-ins (bathroom and time) unless you turn on private mode or hide history in Settings.

Ads (Google AdMob)

• The Google Mobile Ads SDK collects the device's advertising ID, IP address (from which an approximate location is inferred), ad interactions and diagnostic and performance data.
• Purpose: showing ads, measuring results and preventing fraud. Google processes this data as an independent controller under its own privacy policy (policies.google.com/privacy).
• In the European Economic Area, the UK and Switzerland, the app asks for your consent before personalized ads. You can review your choice in Settings → Ad privacy. On iPhone, the advertising identifier (IDFA) is only used if you allow it in the iOS prompt. On any device, you can reset or limit the identifier in the system settings.

App usage and crashes (Google Analytics for Firebase and Firebase Crashlytics)

• Analytics receives usage events (for example: finished sign-up, opened a bathroom, checked in, opened the Shop), your internal account ID, device model and OS, language, approximate country (from your IP) and app version. It does not receive your name, email, photos, review text or exact location.
• Crashlytics receives reports when the app crashes: the error, device model and OS, and app version.
• Why: to learn which parts of the app work, where people give up, and to fix bugs. Google keeps this data for up to 14 months (Analytics) and 90 days (Crashlytics).
• You can turn both off in Settings → Share usage data.

Purchases (App Store and Google Play)

• Payments for Ploft+, "no ads", bigger groups and streak savers are handled by Apple or Google. Ploft never sees or stores your card details.
• The app keeps what you unlocked and how many streak savers you have, on your device and in a document in your account that only you can read.

Map (third-party services)

• To show public bathrooms, the app sends the map area you are viewing to OpenStreetMap's Overpass API (overpass-api.de). The result is kept on the device for up to 7 days.
• Map images come from OpenFreeMap (openfreemap.org), which receives requests for the map parts on screen.
• These services receive your IP address, like any website. Ploft does not send them your name or account.

Data that stays on your device

• Your location, used for the map, distances and to verify check-ins. It only leaves the device in the cases described above.
• Camera or gallery photos you don't upload.
• Scanning friends' QR codes.

Where data is kept and for how long

Account and content data is stored on Google Firebase servers. All connections use HTTPS (TLS). We keep the data while the account exists. When you delete your account, everything is erased right away, except the summed bathroom ratings, which identify no one.

Legal bases

We process data to provide the app you signed up for (account and features), with your consent (location, camera, notifications, personalized ads, and usage stats and crash reports) and for legitimate interests (security, fraud prevention and moderation). You can withdraw consent at any time in Settings.

How to delete your data

• In the app: Profile → Settings (gear icon) → Delete account. This erases your profile, check-ins, reviews, photos, reports, groups you created, votes and friendships, and closes your sign-in account. Bathrooms you added stay on the map without your name.
• Without the app: email contato@seeken.com.br from your account's email address, with the subject "Delete account" and your @username. We erase everything within 15 days and reply to confirm.
• To delete only your profile photo, use Settings → Remove. To change your name or city, use Settings → Edit profile.

Your rights

You can ask to access, correct, export, delete or restrict your data and object to its processing by writing to contato@seeken.com.br. We reply within 15 days. If you think we haven't solved it, you can complain to your country's data protection authority (in Spain, the AEPD; in Brazil, the ANPD).

Children

Ploft is not made for children under 13 and does not knowingly collect children's data. In the European Union you must be old enough to consent in your country (for example, 14 in Spain). If you know of a child's account, write to us and we will delete it.

Changes

Whenever the app starts collecting something new, we update this page and the date at the top.