Last updated 13 August 2026
Toilet SOS helps you find a restroom you can actually get into. This policy describes what the app collects, why, and what it does not do. It describes the app as it exists today, not as it might work later.
An anonymous account. The first time you open Toilet SOS it creates an anonymous account for you. It has no name, email address, phone number, or password — it is identified only by a randomly generated code. It is what lets your saved codes and your subscription persist.
Your location, while you are using the app. If you grant permission, the app sends your precise location to find restrooms near you and sort them by distance. It is used to answer that search and is not written to our database — we keep no record of where you have been. The app only requests location while you are using it; it does not track you in the background. If you decline permission, the app still works: it falls back to a fixed downtown Portland location and reads nothing from your device.
Basic information about your device. When the app first registers your device it sends the platform (iOS), a generic device type (simply "iPhone" — not your specific model), your iOS version, the app version, your language, and your timezone. This is stored and used to operate the service.
A device identifier. The app creates a random identifier and stores it in your device's secure keychain. It is how the free tier counts the three door codes you can view before subscribing. Two things worth being clear about: it deliberately survives deleting and reinstalling the app, which is what stops the free limit from resetting; and it stays on the one device, so it does not follow you across your other devices. It is not an advertising identifier and it is never shared.
How you use door codes. When you reveal a door code, save one to your vault, or tell us whether a code worked, we record that action against your anonymous account. Revealing codes is what the free-tier count is based on, and code-worked reports are how the codes stay accurate for everyone else.
Subscription status. If you subscribe, Apple tells our servers that a subscription exists, which product it is, and when it starts, renews, lapses, or is refunded, along with Apple's transaction identifiers. We keep that so the app knows you are subscribed.
Two things, both in the iOS keychain: the device identifier described above, and your anonymous login token. The app writes nothing else to your device — no cached restroom data, no local database, no logs.
Supabase hosts our database and handles the anonymous sign-in. The data described above is stored there on our behalf. Like any web service provider, Supabase's infrastructure processes the IP address your requests come from.
Apple processes subscription purchases and notifies our servers about subscription status. Apple's handling of your purchase is governed by Apple's own privacy policy.
We do not sell or rent your data, and we do not share it with advertisers or data brokers.
Your anonymous account and the data attached to it are kept while you use the app. If you want it deleted, email us and we will delete it.
Toilet SOS is not directed at children under 13, and we do not knowingly collect personal information from them.
If this policy changes in a way that affects what we collect or how we use it, we will update the date at the top of this page.
Questions, or a deletion request: info@toiletsos.app