Privacy Policy

Pottle ("we", "us", "our") runs pottleapp.com and the Pottle app. We help first-time parents through potty training with a phase-based guide, a readiness quiz, and progress tracking. This policy explains what personal data we collect, why, who we share it with, and what rights you have over it. It follows India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

When you create an account or use Pottle, you consent to what's described here. If you don't agree, please don't use the service.

Information we collect

• Account information. When you sign in with Google or with a one-time email code, we receive your email address, your name, and (for Google) your profile photo. We never receive or store your Google password.
• Potty-training and child progress data. Whatever you record in the app: readiness-quiz answers, the phase you're in, progress check-ins, regression-protocol notes, and any photo you upload. This is information a parent records about their own child. We treat it as sensitive and never sell it.
• Payment and subscription data. If you subscribe, our payment provider (Dodo Payments) handles the payment and tells us your subscription status, plan, and a customer reference. We never see or store your full card number.
• Usage and device data. Through analytics we collect things like pages viewed, approximate location (from your IP address), device and browser type, and how you use features, so we can understand and improve the product.
• Communications and waitlist. If you join the waitlist or take the readiness quiz, we store your email (and, if you ask for the emailed roadmap, your quiz result) so we can send what you asked for. If you contact support, we keep that correspondence.

How we use it

• To run your account and provide the Pottle service.
• To process subscriptions and payments and manage your plan.
• To send transactional email: sign-in codes, receipts, and account or security notices.
• To send product updates and marketing only where you've opted in. Every such email has a one-click unsubscribe.
• To understand usage, fix problems, keep the service secure, and prevent abuse.
• To meet our legal obligations.

Legal basis

We process your data with your consent, which you give when you sign up, opt into marketing, or submit the quiz. We also rely on the "legitimate uses" the DPDP Act allows: for example, to provide a service you asked for, to keep our systems secure, and to meet our legal obligations. You can withdraw consent at any time (see "Your rights" below). Withdrawing it doesn't undo processing we've already done.

How we share it

We don't sell your personal data. We share it only with the providers that run Pottle, each bound by contract to keep it confidential and secure:

• Google — sign-in (OAuth) and analytics (privacy policy).
• Dodo Payments — payments and subscription management (dodopayments.com).
• Amazon Web Services — hosting, database, file storage, and email delivery (privacy notice).

We may also disclose data when the law requires it, to enforce our terms, or to protect our users or the public. If Pottle is ever part of a merger or acquisition, your data may pass to the new owner under this policy.

Cookies and analytics

We use cookies for essential things, like keeping you signed in, and for analytics (Google Analytics and Firebase) to see how the app is used. You can block or delete cookies in your browser settings, but the essential ones are needed for the service to work.

How long we keep it

We keep your account and progress data for as long as your account is active. When you delete your account, we delete your user and subscription records along with the data tied to them (cancel any active subscription first). Waitlist and quiz records stay until you unsubscribe. We may hold limited information longer where the law requires it or to resolve a dispute.

Security

Your data lives on Amazon Web Services, protected with encryption in transit and at rest, access controls, and httpOnly session cookies. No system is ever perfectly secure, but we take reasonable measures to protect your information, and we'll notify you and the relevant authority of a breach where the law requires it.

Your rights

Under the DPDP Act you can:

• See the personal data we hold about you and how we use it.
• Correct data that's wrong or incomplete.
• Erase your data by deleting your account from the dashboard at any time.
• Withdraw consent, including unsubscribing from marketing email.
• Nominate someone to exercise your rights if you die or can't act for yourself.
• Raise a grievance and have it addressed (see below).

To do any of these, use the dashboard or email support@pottleapp.com.

Children's privacy

Pottle is for parents and guardians, who must be at least 18. The service isn't aimed at children, and a child doesn't hold an account. Any information about a child is entered and controlled by the parent or guardian who holds the account. We don't knowingly collect data directly from children.

Where your data is processed

We host data on Amazon Web Services, which can mean it's processed or stored outside your country. We rely on our providers' safeguards for those transfers and only send data to places allowed under applicable law.

Changes to this policy

We may update this policy now and then. We'll change the "Last updated" date above and, for anything significant, tell you directly, such as by email or a notice in the app. If you keep using the service after a change takes effect, you accept the updated policy.

Contact and grievances

For any question, request, or grievance about your data, write to our Grievance Officer at support@pottleapp.com. We aim to reply within the timelines the DPDP Act sets.