Privacy Policy

Gotta Go iOS Application

Effective Date: September 10, 2026

Gotta Go is published by Bearacle LLC ("we", "us", or "our"). This Privacy Policy explains what the app does and does not do with information when you use it on iOS.

The short version: finding a toilet works without ever creating an account. Signing in is only needed to add a toilet to the map or leave a rating, and what you contribute is shown to everyone without your name or email attached to it. We do not advertise to you, and the app carries no analytics or crash-reporting of any kind.

1. What We Collect

Your location: Requested only "while using the app" — iOS's own permission prompt names this — so Gotta Go can find toilets near you, show distance and walking time, and hand off directions. Gotta Go never asks for background or "Always" location, and has no reason to track where you are once the app is closed. If you would rather not share it, you can search for a city by name instead and browse there.
Your account, if you sign in: Your email address, received from Apple or Google when you choose to sign in. Sign-in is entirely optional — it exists only to add a toilet or leave a rating, and every other part of the app works without one.
Toilets you add: Location, an optional name, and whether it's free, wheelchair accessible, or has a baby-changing table. These are stored in our database and shown to every user of the app. Your account is linked to the entry only so the server can enforce a one-listing-per-day limit — the listing itself is never displayed with your name or email.
Ratings you leave: Hygiene, smell and accessories scores for a toilet, folded into a shared average shown to everyone. Individual ratings are not shown attached to your identity.
What's cached on your device: Nearby-toilet search results, so the app keeps working with no signal; a private note of what you personally added or rated, so the Profile screen can show your own counts; and your light/dark appearance choice. This stays on your phone — it is not sent to us, and deleting the app deletes it.

2. What We Do Not Collect

Tracking, in Apple's sense of the word. Gotta Go does not link your activity to data from other companies' apps or websites for advertising, so it does not show an App Tracking Transparency prompt — there is nothing to ask permission for.
Analytics or crash-reporting SDKs. The app ships with none. We do not know which screens you open or how long you spend in them.
Your contacts, photos, calendar, microphone, or camera.
Your browsing activity outside the app.

3. Where Toilet Data Comes From, and Where Your Requests Go

Gotta Go is a front end over open map data, not a service that routes everything through our own servers. A few requests go straight from your device to the infrastructure that runs OpenStreetMap:

Overpass API — queried with your coordinates to find toilet nodes nearby. Run by independent OpenStreetMap mirrors, not by us.
Nominatim — OpenStreetMap's geocoder, used when you search for a city by name or when the app looks up an address for a point on the map.
OpenFreeMap and Esri — supply the map tiles you see. Like any map, loading tiles for an area means that area is requested from the tile server.
ipinfo.io — used only as a fallback to estimate your location from your IP address if location permission is declined.

None of these calls carry your name, email, or account — they are the same anonymous requests any map app makes to load a map. Tapping "Get Directions" opens Google Maps outside the app; Google's own privacy policy covers what happens from that point on.

4. Why We Hold It

To perform our contract with you — showing you nearby toilets, and publishing what you choose to contribute.
For our legitimate interests — enforcing the daily limit on new listings, and investigating abuse of the shared map.

We do not rely on consent for advertising or profiling, because we do neither.

5. Who Else Processes It

Supabase — hosts our database and handles sign-in. Your account, contributed toilets and ratings live here, on servers in the European Union.
The OpenStreetMap Foundation's infrastructure — Overpass and Nominatim, as described above, under their own usage policies.
OpenFreeMap, Esri and ipinfo.io — supply map tiles and the IP-based location fallback.
Apple or Google — if you use their sign-in. Their own privacy terms apply to what they do.

We do not sell personal information, and we run no advertising to share it with. We will disclose data if we are legally required to, and we will tell you unless we are prohibited from doing so.

6. International Transfers

Bearacle LLC is a US company and our database is hosted in the European Union, so data moves between the two. Where transfers out of the EEA or UK occur, they rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

7. How Long We Keep It

Your account — until you ask us to delete it.
Toilets and ratings you contributed — kept as shared map data even after account deletion, the same way a correction made to OpenStreetMap itself outlives the account that made it. You can remove a toilet you personally added at any time from within the app.
Cached search results — refreshed after 24 hours automatically, and cleared whenever you delete the app.

8. Your Rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, or complain to your data protection authority.

If you are in California, you may request disclosure or deletion of your personal information and may not be discriminated against for doing so. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these, email info@bearacle.com, or use the Delete Your Account page. We respond within 30 days.

9. Security

Traffic between the app and our systems is encrypted in transit. Access to the database is restricted by row-level security, so contributing a toilet or a rating is possible only for a signed-in account, and each account can only touch what it is allowed to.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

10. Children

Gotta Go is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. If we do, we will update the Effective Date at the top of this page, and for a significant change we will tell you in the app.

12. Contact

Questions about this policy, or about the data we hold:

Email: info@bearacle.com

Bearacle LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA