Pee Spot Privacy Policy

About this policy

Effective October 11, 2026. This policy describes how Pee Spot handles information in its app, website and Android closed beta. Pee Spot is operated by Ricardo Flores Sierra, an individual, who can be contacted at peespot2026@gmail.com for privacy questions, access, correction and deletion requests.

This release is intended for adults aged 18 and over. It is not directed to children. If you believe a child has provided personal information, contact us so that we can investigate and remove it where appropriate. Family-restroom information is provided for adult caregivers.

You can browse as a guest. Account-based, location, contribution, photo, notification and trip-sync features have the controls described below. Public paid subscriptions are not enabled in the current test release. Authorized license testers may make sandbox transactions, which are processed as described below.

Location and searches

Location is requested for actions you choose, such as nearby search. Searches and coordinates needed for discovery are processed by Pee Spot’s Supabase service. Routes send the necessary origin and destination to Google Routes. Pee Spot does not save a continuous navigation trail.

The website’s public editorial pages are hosted by Vercel and read published content from Sanity. Map features use Google Maps when enabled. These providers may process technical request information under their own policies.

Accounts and contributions

The app uses Supabase authentication and protected local storage. Favorites, reviews, selected photos, reports and business requests are associated with your account. Publication and moderation have separate permissions. The Sanity CMS contains editorial content, not functional account records.

Optional Google and Apple sign-in

When you choose Google or Apple sign-in, that provider authenticates you and sends basic identity details to Pee Spot through Supabase, including a provider account identifier, your email address and available profile details such as your name or profile picture URL. Your provider password is not shared with Pee Spot. Apple may provide a relay email address. Different email identities may create separate Pee Spot accounts. These details are used to create and maintain your account, protect access and connect your saved content. Signing in does not itself grant Premium. Existing account deletion and retention rules apply.

Photos and notifications

Selected review photos are verified and re-encoded to strip source metadata before serving. Access to private media is controlled with short-lived signed URLs. Android push is optional and disabled until you activate the phone. Lock-screen notices avoid private report details and restroom coordinates.

Control and deletion

The app offers data export, device notification controls, local-data removal and server account deletion. See Delete account for the email route if you cannot use the app. Offline & sync sends pending changes explicitly.

Current scheduled cleanup includes eligible withdrawn photo files and completed deletion receipts after 30 days. Notification inbox records expire after 90 days. Provider backups/logs and exported copies have separate treatment; no promise is made that live deletion instantly removes every copy.

Private content checks and appeals

Review text is screened before a team member can publish it. Selected, normalized review photos are sent privately to Google Cloud Vision for safety, visible-text and people checks. The checks may flag sensitive material; they do not establish that a photo is safe. Pending photos stay private, and publication still requires independent human review.

The service stores the current content fingerprint, limited safety categories, decision and review history. It does not retain the extracted OCR transcript as a separate analysis record. You can request another review of a rejected item from its content status in the app. A disputed automated decision requires independent reviewers before it can be overridden.

Optional cleaning notices and service requests

Verified business contacts can opt into cleaning notices. Pee Spot uses its brand Gmail account to send them; it does not request access to read or delete your inbox. Emails describe a possible issue, not a verified finding, and omit visitor identity, private photos and access codes. Manage preferences in Profile → Pee Spot for Business → Cleaning & service network.

Cleaning providers enroll voluntarily and are reviewed before becoming available. Their service area and availability support nearby matching. A business chooses whether to share an approximate area for quotes and separately authorizes direct contact with one selected provider. Contact and private message records are available only to the authorized participants. No cleaning service is booked or paid for automatically.

Account export includes your appeals, email preferences and delivery history, service profile, requests, quotes and your own messages. Live account deletion removes linked private records. Provider logs, backups and previously exported copies are subject to the retention limitations below.

Optional private trip sync

Together Trips keeps saved plans on your device. Choosing Sync saved trips uploads the saved trip names, selected stop locations, access notes and snapshot dates to private storage associated with your Pee Spot account. The same account can retrieve them on another device. Unsaved drafts are not uploaded. This feature does not record a continuous location history or publish your travel plans.

Sync runs only when you choose it. Edits and deletions transfer when each device syncs; conflicting versions require your choice. Your account export includes saved cloud trips and local collections from the exporting device. Account deletion removes linked cloud trip records and the local collections on that device. Previously downloaded copies on other offline devices and backup retention follow the limitations described in this policy.

Stop cards describe information saved at a particular time. Sync does not confirm current opening hours, access, cleanliness, arrival conditions or indoor directions. Refresh the listing before visiting.

Optional saved-trip updates

You may choose to watch a synced trip for 30 days. Pee Spot privately links the selected stop identifiers to your account to notify you about moderator-approved listing changes. This is optional; syncing a trip does not automatically activate updates. Editing the set of watched stops or deleting the trip after syncing turns that watch off until you choose it again.

Watch records expire after 30 days. Private update associations are retained for up to 30 days, queued change events for up to 7 days, and notification inbox items follow the existing 90-day retention. You can turn a watch off, export these records or request account deletion. Turning updates off cancels outstanding deliveries where possible; a push already accepted by the delivery provider may still arrive.

Notifications omit trip names, selected places, coordinates and access codes from the lock screen. Push delivery additionally depends on your device permission and Safety & trip updates settings. Updates do not guarantee live opening, cleanliness, accessibility, entry permission or indoor guidance. Check the current listing before visiting.

When you explicitly compare route stops, Pee Spot requests a direct route and up to three stopover routes from Google. The requested endpoints and intermediate coordinates are used to calculate travel estimates. This comparison does not continuously track your location, reserve entry or guarantee the fastest itinerary.

Google Maps technical data

The Android map uses Google Maps. In addition to coordinates used for nearby search and routes, the Maps SDK processes technical information such as device and SDK metadata, IP address, a pseudonymous Maps identifier, map interactions and SDK crash diagnostics. Google uses this information to operate and improve its services under its privacy policy. Pee Spot does not use an advertising SDK or Firebase Analytics in this Android version.

Optional push notifications use Firebase Cloud Messaging and a device registration token. Turning Pee Spot notifications off stops its notification subscription; it does not turn off the separate technical processing required by the map. Map, network and service providers may retain operational logs under their own retention settings.

Optional AI search assistance

Where AI assistance is enabled for your account, choosing Send to AI or Find my stop, or completing a spoken search with Talk & find or Start voice chat, sends your request text to Pee Spot and OpenAI to translate it into search filters. Completed spoken search requests are submitted automatically after recognition finishes, including each search turn of a voice chat; partial transcripts are not sent. Do not include names, contact details, medical information or access codes. Pee Spot does not add your GPS coordinates, saved trips, email or profile to the model request. Information you say or type yourself is still part of the text sent.

The Pee Spot AI handler does not save the prompt text and requests that model responses are not stored. OpenAI may retain service or abuse-monitoring logs under its API policies; this is not a promise of zero retention. Pee Spot retains account-linked daily usage counters to enforce access and request limits. The model is not allowed to invent places, opening hours, floor numbers, cleanliness or journey times; results come from the separate place and routing services.

AI currently has limited preview access. Paid subscriptions are not available in the present test release. Enabling commercial subscriptions will require an updated disclosure for verified purchases and account entitlements before sale.

Optional voice chat, Floating Spot and navigation handoff

Voice is optional. Tap Talk & find for one request or Start voice chat for turn-taking in a visible assistant window. After a reply ends, voice chat listens for your next turn. Your device's speech recognition provider may process audio online. Pee Spot does not save audio recordings. End voice chat, close the window or lock your phone to stop. Leaving the window, silence or an error also ends the session; the next-turn limit is five minutes or twenty turns. Completed search requests are submitted automatically to Pee Spot and OpenAI; partial transcripts are not sent. Navigation commands for a selected stop and supported local controls do not require another AI search. You may type instead. Pee Spot does not save prompt text or add GPS, email or profile information to the model request. What you say or type yourself is still part of the text sent. OpenAI may retain text for abuse monitoring for up to 30 days by default, with longer retention possible for legal obligations or preventing harm. Your selected voice language is stored locally; installed recognition and speech-output languages vary by device.

Nearby discovery still sends coordinates to Pee Spot. The optional notification shortcut simply reopens the app; it does not listen or track your location in the background. Choosing to open Google Maps shares the selected stop and any onward destination you enter with Google. This starts a new route request; Pee Spot cannot read or silently change a route already active in another app.

On Android, you can enable Floating Spot and grant Appear on top and notification permissions. Tapping the movable face opens a separate, visible Pee Spot voice window over your current screen. It does not read other apps or capture their screens. The shortcut service itself never uses the microphone or location. A voice control in the visible window starts the microphone; a nearby search uses your location under the normal location permission. The full map opens only when you choose navigation or another full-app action. The service notification, a long press on the face or the in-app control turns the shortcut off. The shortcut hides while the phone is locked and does not restart after a reboot or force-stop. Only its position and a pending-open flag are stored locally; voice search state is held in memory. You can revoke Appear on top in Android settings.

Retention, deletion and your choices

We retain account records and associated content while needed to provide the features you use, until you remove the content or request account deletion, subject to security, dispute-resolution and legal obligations. The specific scheduled cleanup periods described above apply to those record types. Service providers may retain security logs and backups under their own policies; deleting a live record does not instantly remove every backup, delivered email, exported file or copy already stored on another device.

In the app, use Profile and the privacy controls to export your data or request account deletion. If you cannot sign in, visit https://peespotapp.com/delete-account or email peespot2026@gmail.com. We may need to verify that you control the account before fulfilling a request. You can also revoke device location, microphone, photo and notification permissions in Android settings.

Pee Spot does not sell your personal information or use it for targeted advertising in this release. Privacy rights vary by jurisdiction; contact us to request access, correction or deletion or to ask about how we handle your information.

Service providers and security

Supabase provides authentication, application data and media storage; Google Maps and Routes provide maps and directions; Google Cloud Vision checks submitted photos; Firebase Cloud Messaging delivers optional notifications; OpenAI processes optional AI text requests; Gmail delivers requested service messages; Vercel hosts the website and Sanity supplies editorial content. These providers may process information in the United States and other countries where they operate. Their privacy policies apply to processing they control independently.

Data is transmitted to Pee Spot services using HTTPS. We use account-scoped access controls and moderation permissions, and restrict private media access. No system or transmission method is completely secure. Do not post sensitive personal information, images of people using restrooms, or private access codes. Approved public contributions may be visible to other users; private service conversations are limited to authorized participants.

We may disclose information when required by law or necessary to investigate abuse and protect users and the service. We will update this page when practices change and update store disclosures before enabling materially different processing. Contact peespot2026@gmail.com with questions about any change.

Premium purchase and restoration data

When you purchase or restore Premium, Pee Spot sends the product identifier, purchase token and an opaque billing-account identifier to its protected backend and verifies them with Google Play. It stores subscription status, expiry and necessary verification records to provide access, reconcile renewals and prevent fraud. This also applies to authorized sandbox purchases. Purchase tokens are encrypted in private storage and are not included in public profiles or ordinary account exports.

Pee Spot does not collect payment-card or bank-account numbers through app checkout. Google handles store payment details under its own policies. Deleting a Pee Spot account does not cancel a store subscription or delete payment records held by Google. Account deletion removes the Pee Spot billing records under the existing deletion process.

Scheduled cleanup removes stored purchase-token ciphertext after the configured 60-day post-expiry window and event records after 30 days. Provider backups and logs have separate retention as described in this policy; deletion does not instantly remove every backup copy.