Privacy Policy

1. Scope and operator

This notice describes BellySignal’s current app data handling. The operator is Picko (픽코), represented by Jeonghyeon Yu. Contact: [email protected]. Features can vary by installed version and platform.

Your diary is stored locally, but selected health values are also sent in analytics events. The app is therefore not an exclusively on-device service. An account is not required to record entries.

2. Records on your device

The local database contains stool and urine observations, water intake, food and habits, symptoms, manually entered or imported weight, notes and timestamps. Settings include language, appearance, reminders and water-goal preferences. Signing in does not currently synchronize the diary between devices.

3. Analytics and diagnostics

The app uses PostHog and Google Analytics for Firebase to measure usage and analyze recorded patterns. Events can include:

• Stool type and color, blood or mucus, pain, bloating, urgency, incomplete evacuation and straining.
• Urine color, the selected hydration level and foam; water amounts; symptom scores, sleep-quality and stress ratings; and manually entered weight.
• Screen and feature usage, entry counts, language, settings, app/OS/device information and device or app-instance identifiers. PostHog also receives error reports and stack traces.

Free-text diary notes and food-trigger names are not attached to these analytics events. Weight imported from Apple Health or Health Connect is not sent as a weight value in analytics. Device identifiers allow events to be associated over time; we do not describe this data as completely anonymous.

Both analytics services are enabled by default in the current implementation. The analytics switch in Settings controls PostHog only. Firebase Analytics remains active when this switch is off; there is currently no separate in-app switch to stop it.

4. Optional accounts and sharing

• Sign-in: Google or Apple sign-in uses Firebase Authentication. Account identifiers, email and profile information provided by the sign-in service, authentication tokens and technical access data are processed for authentication. Account deletion is available in Settings and is separate from deleting diary entries.
• Health platforms: with permission, the app writes water entries to Apple Health or Health Connect and reads supported sleep and weight data. Permissions can be managed in the operating system. These integrations do not upload your full diary to a BellySignal sync service.
• Exports: PDF reports and backups are sent to the location or recipient you select using the device’s sharing tools. Copies you export are outside the app’s local deletion controls.
• Feedback: when you submit feedback, your message, optional contact information, selected images, app/OS version and language are sent to our support channel through Discord. Include only information you want to send; diary records are not automatically attached.

5. Purposes, providers and transfers

We process data to provide the diary and requested integrations, authenticate optional accounts, handle feedback, measure usage and recorded patterns, and diagnose errors. PostHog handles analytics and diagnostics on its US cloud. Google/Firebase handles analytics and authentication; Apple and Google handle platform integrations and sign-in; Discord handles submitted feedback. Provider infrastructure may process data outside your country, including in the United States. Turning off PostHog does not stop Firebase transfers. We do not sell your data.

6. Retention and deletion

You can view, edit and delete local diary entries in the app. Removing local records or uninstalling the app does not automatically erase previously transmitted analytics, account information, feedback or copies you exported. Accounts can be deleted separately in Settings. Analytics and support information are retained according to service settings and the purposes described above. Contact us to request access or deletion of information we hold; we may need information to locate the relevant records.

7. Your controls and rights

You can use the diary without signing in, choose exports, revoke health-platform permissions and disable PostHog in Settings. The PostHog switch is not a withdrawal control for all processing. Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability and withdrawal of consent. Contact [email protected] to exercise them. You may also complain to the competent data-protection authority. We do not discriminate against you for exercising your rights. This notice does not waive rights or replace consent where law requires it.

8. Security and children

Local records are protected by the operating system’s app sandbox. Keep your device and exported files secure; no system is completely secure. The app is not directed to children under 16 or the minimum age required in their country. Contact us if you believe a child’s information has been submitted.

9. Changes and contact

This update corrects descriptions of existing analytics, account and sharing features. It does not activate new collection by itself. We will post further updates here and give notice of material changes. Privacy and deletion requests: [email protected].