Plunk Privacy Policy

Effective date: October 20, 2026

This Privacy Policy explains how 18246955 Canada Inc., operating as Babanorth Labs ("we", "us"), handles information when you use Plunk: Poop Tracker, our app for Android (the "App").

We are a federal corporation based in Mississauga, Ontario, Canada. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Summary

• No account. There's nothing to sign up for, and we never learn who you are.
• Your logs stay on your phone. We don't have a server for them. We never receive your logs, sessions, notes or settings.
• No analytics or crash reporting. The App doesn't include any tracking or analytics tools.
• Ads only when you ask. The App shows only rewarded ads, and only after you tap a button to watch one. The ad provider, Google AdMob, receives standard device information to show the ad, never your logs.
• Purchases go through Google Play. We never see your payment details.
• We do not sell your personal information.

2. Information stored only on your phone

Everything you put into the App is saved in the App's private storage on your phone:

• Logs: the date and time, the Bristol type, and any color, amount, kind of place, tags or note you add. You can also type a place name (for example "Grandma's") and pick a country for the Throne Passport. These are only words you type: the App never records your location.
• Sessions: when they started and ended, and which soundscapes you played.
• Your setup and progress: presets, custom tags, saved places, streaks, levels, badges, unlocked items, reminder times, your chosen language and other settings.

We cannot see any of this. It isn't sent to us or to anyone else, and the App turns off Android's cloud backup and phone-to-phone transfer for its data, so it isn't copied to Google's backup either. It stays on your phone until you delete it or uninstall the App.

Exports and backups you make

You can choose to export your logs as a CSV file, share a PDF summary, or create an encrypted backup. These files are saved or shared wherever you choose, using Android's own file picker or share sheet. We never receive them. Backups are encrypted with AES-256 using a password you choose. We don't know the password and can't open a backup or recover a forgotten password.

Once you share an export with someone or save it to another app or cloud service, that copy is handled under their policies, not ours.

Automatic backup (optional, off by default)

If you turn on automatic backup, you pick a folder once in Android's folder picker and choose a password. The App then saves an encrypted backup into that folder every day or every week, even when the App is closed. The folder can be on your phone, on an SD card, or a folder from a cloud storage app that appears in the picker. Files go only to that folder. We never receive them.

• Your password is never stored. The App keeps an encryption key made from it, protected by Android's hardware-backed Keystore, so backups can run in the background. Each file opens with your password alone, using "Import backup".
• If the folder belongs to a cloud storage provider, that provider stores the encrypted file under its own privacy policy. It can see the file's name, size and dates, but not what's inside.
• The App keeps its 4 most recent automatic backups and deletes only older backup files it created itself. It never touches anything else in the folder.
• Turning automatic backup off, or using "Delete all data", deletes the key and the App's access to the folder. Backups already saved stay in the folder until you delete them.
• It needs no storage permission (the App can reach only the folder you picked) and makes no network connection of its own.

Share images

When you tap Share on a streak, badge, monthly stamp, level or recap, the App creates an image on your phone and opens Android's share sheet. Nothing is sent unless you choose where to send it. Share images show only things like a streak count, a badge name, a month or a level, never your logs, places or notes, plus a link to Plunk on Google Play.

3. Advertising

The App uses Google AdMob to show rewarded ads: optional videos you can choose to watch to unlock something for a while. Ads never appear on their own, never during a session or while you're logging, and never when the App opens. The ad software isn't started until you open the App's Store or tap a "Watch an ad" button.

We have set up ads to collect as little as possible:

• Non-personalized ads only. Every ad request asks for an ad that isn't based on a profile of you.
• No advertising ID. The App removes the permission that would let AdMob read your device's advertising ID.
• Nothing about your logs. We never pass anything you've logged, or anything about how you use the App, to the ad provider.

To fetch and show an ad, Google necessarily receives standard technical information such as your IP address, device type, operating system and App version, and may use it, for example, to estimate your general location, measure the ad and prevent fraud. Where the law requires it (for example in the EU, UK and Switzerland), the App asks for your consent through Google's consent form before any ad is requested.

Learn more in How Google uses information in ads.

4. Purchases

Plunk Plus is sold through Google Play, as a monthly subscription or a one-time Lifetime purchase. Google handles the payment. We don't receive your name, email address or payment details. The App asks Google Play whether you have Plus and stores the answer, and a reference to the purchase, on your phone. To manage or cancel a subscription, use Google Play.

5. Permissions

• Notifications: for the reminders you turn on, the timer shown while a session is running, a heads-up the day before a free trial ends, and a notice if automatic backups stop working. All are scheduled on your phone. By default they never say what the App is for.
• Media playback in the background: so a soundscape keeps playing with the screen off during a session.
• Run at startup: so your reminders and automatic backups are set again after your phone restarts.
• Vibration: for small haptic touches.
• Internet access: used only to load ads you choose to watch and to talk to Google Play about purchases. The App never uses it to send your logs anywhere.

The App does not ask for your location, contacts, photos, camera, microphone or files. When you export or import a file, or choose a folder for automatic backup, you pick it yourself in Android's file picker.

App Lock uses Android's own fingerprint, face or screen-lock check. The App only learns whether the check succeeded. It never sees your fingerprint, face or PIN.

6. Third-party services

• Google AdMob (rewarded ads): Google Privacy Policy and AdMob data disclosure.
• Google Play (download and purchases): Google Privacy Policy.

7. Sharing

We don't collect your logs, so we have none to share or sell. The only information that leaves your phone is described in sections 3 and 4, and only Google receives it.

8. Data retention and deletion

• Delete everything in the App: go to Settings → Your data → Delete all data. This erases every log, session, badge and setting on your phone. It can't be undone.
• Delete a single log: open it and tap Delete log.
• Uninstall: uninstalling the App also removes all of its data from your phone.
• Exports and backups you made, including automatic backups, are separate files. Delete them wherever you saved them.
• Ad data collected by Google is kept according to Google's policies.
• Support emails you send us are kept as long as needed to help you, and then deleted.

Because we hold no data about you, there is no account to delete and nothing for us to remove on our side.

9. Not medical advice

Plunk is a personal diary and habit tracker. It isn't a medical device, and the stats and patterns it shows describe what you logged, not what it means. Not medical advice.

10. Children

The App is not directed at children under 13, and we don't knowingly collect personal information from anyone. If you believe a child has sent us personal information, for example in a support email, contact us and we will delete it.

11. Your rights

Under PIPEDA and other applicable laws, you can ask us about any personal information we hold about you, and ask us to correct or delete it. In practice the only information we might hold is a support email you sent us. Write to info@babanorthlabs.com and we'll reply within 30 days.

If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

12. Changes to this policy

If we change how the App handles information, we'll update this page and the effective date above before the change reaches the App.

13. Contact us

18246955 Canada Inc. (Babanorth Labs)
448 Gibraltar Dr, Unit 9, Mississauga, Ontario L5T 2N8, Canada
info@babanorthlabs.com