Privacy Policy

Last updated: August 2, 2026

PlopPilot is operated by 2462812 Ontario Inc. o/a CrossDynamix. It is a novelty wellness screen for user-selected stool photos and optional context. It is not a medical device, diagnosis, treatment, or substitute for professional care.

Information We Process

When you choose to run an analysis, PlopPilot processes the stool photo you select and any optional text context you enter, which may include symptoms, foods, medications, timing, travel, or other health-related details. PlopPilot stores the text context and result metadata, including the AI-generated result, score, recommendations, safety flags, timestamp, and payment/pass identifier. Raw stool photos are not stored in the PlopPilot database, history, analytics events, or notification emails.

We also process StoreKit transaction identifiers needed to issue and consume a Plop Pass; product-interaction and reliability events; affiliate-link impressions and clicks; and information you voluntarily submit through support or advertiser forms, such as name, email, company, website, and message.

Required Email Verification and Optional Cross-Device Sync

Before accessing the PlopPilot app, you must verify an email address with a six-digit code. If you entered an address you cannot access, you can choose Use a different email and restart verification with another address. We process the verified email address, optional display name, a one-way hash of the verification code, and a one-way hash of your account session token. Verification codes expire after 10 minutes and account sessions expire after 90 days.

If you turn on cross-device sync, PlopPilot may sync your display-name profile, app settings, and up to 12 saved result records, including result metadata, optional context, timer duration, and notes. Sync uses last-write-wins timestamps and deletion records so clearing an item on one device also clears it on another. Raw stool photos and payment credentials are never included in cross-device sync. Your verified email is used to connect your profile across devices but is not embedded in each synced result.

Your Permission and OpenAI Processing

PlopPilot does not send a selected photo or context to an AI provider until you turn on the consent switch beside the analysis button. If you consent, the selected photo and text context are sent through PlopPilot's server to OpenAI, L.L.C. using the OpenAI API solely to generate the requested wellness screen. You may leave consent off and continue using non-analysis parts of the app.

OpenAI acts as our AI processing service provider under its business/API terms and data protection commitments. OpenAI states that API inputs and outputs are not used to train its models by default. The request is sent with application storage disabled; however, OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, or longer when legally required. Learn more in OpenAI's API data controls and business data privacy information. We require service providers to protect personal data to a level consistent with this policy and applicable law.

We do not send stool photos or private analysis text to advertisers, affiliates, Apple, or content creators. Do not submit information you do not want PlopPilot and OpenAI to process for this purpose.

Payments

On iOS, Plop Pass purchases are handled by Apple through StoreKit. PlopPilot stores transaction metadata needed to issue and consume one analysis pass. PlopPilot does not receive or store your full payment card details.

Affiliate Links and Sponsors

PlopPilot may show clearly labeled links to third-party products, books, apps, courses, creator content, or sponsor pages. Some links may be affiliate or sponsored links, which means PlopPilot may earn a commission or fee if you click or purchase. We may log affiliate link impressions and clicks, such as the product clicked, placement, timestamp, and referrer, but we do not share your stool photos or private analysis text with advertisers.

How We Use Information

We use information to verify access to the app, provide the analysis result you request, display and maintain your history, synchronize the profile data you choose, enforce one-use Plop Pass access, operate affiliate disclosures, improve reliability, prevent fraud or abuse, and respond to support or privacy requests. We do not sell stool photos, health context, or analysis results and do not use them for targeted advertising.

Retention

Raw photos are not retained by PlopPilot after the analysis request is processed. Synced profile and history data remains until you disable sync, delete individual history, or delete your account. Account deletion removes the verified email, display name, sessions, profile, and sync records. Text context, analysis results, event records, and payment/pass records are otherwise kept only as long as reasonably needed for app functionality, support, security, fraud prevention, accounting, or legal obligations; limited de-identified or legally required records may remain. OpenAI retention is described above. You may also request deletion by emailing info@ploppilot.com.

Your Choices

You must verify an email before using the app, but you may replace an inaccessible or mistaken address before completing verification. After verification, you can decline AI processing by leaving the consent switch off, omit optional text context, leave cross-device sync off, clear history inside the app, sign out, disable sync, or delete your verified account from the Profile tab. The app's arcade, learning, and catalogue areas remain available without submitting a stool photo to OpenAI.

Safety

If you see blood, black or tarry stool, severe pain, fever, dehydration, dizziness, or symptoms that persist or worsen, contact a clinician or seek urgent care. Do not rely on PlopPilot for medical decisions.

Contact

For privacy or support questions, email info@ploppilot.com or visit PlopPilot Support.