Is Poop Scanning Private? How Stoolio Handles Your Data

If you’re going to scan your poop, you deserve a straight answer to the obvious question: who else can see this? With Stoolio, the short version is: your scans exist to generate your insights — your data is never sold, it’s encrypted in transit and at rest, and you can delete it. The longer version is below, in plain language.

Gut data is about as personal as personal data gets, and we built Stoolio knowing that. Here’s exactly how it’s handled — everything on this page is drawn from our Privacy Policy, which remains the authoritative document.

Why privacy matters more for gut data

Most app data is boring. A to-do list leaking is annoying; a bathroom log leaking feels like a violation. Scan data is sensitive by nature — our own policy says so explicitly — which means the bar for handling it has to be higher than for a generic app. That’s the standard we hold ourselves to, and the standard you should hold any tracking app to before trusting it with this part of your life.

What does Stoolio collect?

Roughly what you’d expect from the app doing its job, and nothing exotic:

• Your account basics. Name, email, and the settings you choose.
• Your scans. The images and inputs you submit — this is the raw material your insights are generated from.
• Anything you add yourself. Notes, tags, and journal entries.
• Standard app telemetry. Device type, crash reports, and usage analytics that tell us what’s working and what’s broken.

Two things Stoolio deliberately doesn’t hold: your payment card (subscriptions run through Apple, and we never directly collect or store card numbers) and your precise location (no GPS tracking unless you explicitly grant it — only the rough city-level location any website infers from an IP address).

What Stoolio never does with your data

• Sell it. Our policy states it plainly: we do not sell your personal information. Your scans generate your insights — they don’t feed an ad machine or target you.
• Show it to anyone by default. There’s no social feed, no sharing, no public anything. Your history is yours.
• Store it carelessly. Data is encrypted in transit (TLS) and at rest, with access controls and regular security reviews behind it.

Where your data does help beyond your own readouts, it’s in de-identified, aggregated form — stripped of anything that can identify you — to make the analysis better for everyone.

What controls do you have?

Real ones, not buried ones:

• Delete your account and data straight from the app, or by emailing info@stoolioapp.com. Verifiable deletion requests are honored within 45 days.
• Scan images are deleted within 90 days of account deletion (de-identified derivatives that can’t identify you are the exception).
• State privacy rights — California, Washington, and a growing list of states grant additional rights over health-adjacent data, and the Privacy Policy spells out how to exercise them.