PoochievementsThe Golden Throne of Gut Health

Privacy policy

Last updated 15 October 2026

Poochievements (“we”, “us”) is a bowel-health tracking service. Because what you log is health data — a special category of personal data under UK GDPR — we keep collection to the minimum needed and never use it for advertising.

What we collect

  • Account data: username, email address, a one-way hash of your password (Argon2id or bcrypt — we can never see your password), time zone and theme preference.
  • Health logs you enter: stool type, colour, volume, pain, time on the toilet, float/sink, fluid intake, medication notes, symptoms, food triggers, free-text notes and the time of each entry.
  • App activity: XP, levels, trophies and quiz results.
  • Security data: a session cookie to keep you signed in, and a salted hash of your IP address used only to limit repeated sign-in and password-reset attempts.

Why we use it (lawful basis)

We process account data to provide the service you sign up for (contract). We process health data only with your explicit consent, which you give when you create an account and can withdraw at any time by deleting your account.

What we never do

  • Sell or rent your data
  • Show ads or use advertising or analytics trackers
  • Share your health data with anyone unless you choose to (for example by printing a report for your doctor) or the law requires it

Cookies

We use one strictly necessary session cookie (pooch_sid) and, if you switch themes before signing in, a pooch_theme preference cookie. No consent banner is needed because we use no non-essential cookies.

Third parties

  • Hosting provider — stores the database and serves the site.
  • Email delivery — sends welcome, password-reset and account emails.
  • Content delivery networks — fonts (Google Fonts) and the chart and confetti libraries (jsDelivr) are loaded from CDNs, which receive your IP address as part of a normal web request. They do not receive any of your health data.
  • Donation providers (Stripe, PayPal, Ko-fi, Buy Me a Coffee) — only if you choose to donate, on their own sites and under their own privacy policies. Donations are never linked to your health data.

How long we keep it

Until you delete it. Deleting a log removes it immediately; deleting your account permanently removes your account and every associated log, trophy, quiz result and reset token. Server backups roll over within 30 days.

Your rights

You can access and export your data (CSV or JSON) from Reports, correct it by editing logs or settings, and erase it from Settings → Delete my account. You can also object, restrict processing, or complain to the UK Information Commissioner’s Office (ico.org.uk). Contact us at info@poochievements.co.uk.

Security

HTTPS everywhere, hashed passwords, CSRF protection, rate-limited sign-in, security headers, and server-side access checks so you can only ever see your own records.

Age

Poochievements is intended for people aged 16 and over.