---
title: Privacy policy · Stool Log
url: https://stoollog.com/privacy
description: How Stool Log handles your information: no account, your diary on your devices and private iCloud, optional Apple Health, analytics you can turn off.
---

# Privacy policy

Last updated: 5 November 2026

Stool Log is provided by Kok Keong. This policy explains how information is handled when you use the app, including its Apple Watch app, widgets, Siri and Shortcuts actions, and optional features. Available features depend on your app and operating system versions.

You do not need to create a Stool Log account. Your diary is stored on your device and, when available and enabled in your Apple settings, synced through your private iCloud database. Some information also leaves your device for medicine search, usage analytics, Apple Ads attribution, purchases or sharing you start, as explained below. Stool Log shows no ads and contains no advertising SDKs. It does not use AdMob, Google Play Services or Firebase Crashlytics.

1. [Information you put in your diary](#diary)
2. [iCloud and your other devices](#icloud)
3. [Apple Health](#health)
4. [Medicine search and the US National Library of Medicine](#medicine-search)
5. [Photos and camera access](#photos)
6. [Usage analytics](#analytics)
7. [Apple Ads attribution](#ads)
8. [Purchases, reminders, widgets, Apple Watch and app lock](#purchases)
9. [Reports, exports and information you share](#sharing)
10. [Keeping and deleting information](#deleting)
11. [Other people, support and privacy requests](#others)
12. [This website](#website)
13. [Policy updates and contact](#contact)

## 1. Information you put in your diary

Stool Log stores the information you choose to enter: stool dates and details, symptoms, food, drinks, medicines and doses, daily medicines, notes, photos, days you mark as having had no stool, daily goals and their ticks, and names or other details for people you log for. If you choose to, you can also add a year of birth and sex for each person, and track period days.

The app uses these records to show your diary, calculate summaries and possible patterns, schedule reminders and prepare reports. A planned doctor visit and the changes you choose to compare under "Did it help?" are kept on that device only and are not synced.

These records are not uploaded to a server operated by Kok Keong. They are not sold or used for advertising. If you choose to send a report, screenshot or message to us, we receive the information you include.

## 2. iCloud and your other devices

When iCloud is available and enabled for Stool Log, the app uses Apple's CloudKit service to sync its saved records through the private database associated with your Apple Account. This can include diary entries, people and their details, period days, daily goals, daily medicines and attached photos. The records can become available on your other devices signed in to that account. This is not a public database, and Kok Keong cannot read it.

You can manage iCloud access for Stool Log in Apple's Settings app. Turning off sync does not itself delete information already stored in iCloud. Apple device backups are separate from the app's sync feature and may keep app data according to your backup settings. Apple describes its handling of iCloud and backups in its privacy information: [apple.com/legal/privacy](https://www.apple.com/legal/privacy/en-ww/).

## 3. Apple Health

Apple Health is optional. Each connection is off until you turn it on in Settings > Apple Health and grant the matching Apple permission. Only entries for you ("Me") are sent or read; entries for other people you log for never go to your Health record.

### What Stool Log can add to Health

- **Water**: each glass, using the glass size you set.
- **Symptoms**: bloating, abdominal cramps, nausea, heartburn/reflux and appetite changes, with mild, moderate or severe.
- **Stools**: hard stools (Bristol types 1–2) as Constipation and loose stools (types 6–7) as Diarrhea. Nothing else about a stool is sent, and types 3–5 send nothing.
- **Alcohol**: the number of alcoholic drinks.
- **Periods**: the period days you track, as menstrual flow.

Food, other drinks, notes, photos and medicine doses are not written to Health.

### What Stool Log can read from Health

- **Medicines** (on supported versions of iOS): medicines you choose to share and the doses marked as taken, shown alongside your diary, as name suggestions and in reports you create.
- **Steps and sleep**: today's steps and last night's sleep, for a Steps or Sleep daily goal.
- **Menstrual flow**: period days, when you track periods.

Information read from Health is held in memory while the app runs; it is not saved into the diary database or synced to iCloud. A copy of today's steps and last night's sleep is kept on your iPhone so the Goals widget can show it, and is removed when you turn reading off. If you pick a medicine name from Health and save it as a Stool Log entry or daily medicine, the name becomes part of that saved record and can sync with iCloud. A report you create can also contain medicine information from Health.

Stool Log does not send Health records or health measurements to Firebase Analytics and does not use Health information for advertising or marketing. You can turn these features off in Settings > Apple Health and revoke permissions in Apple's Health privacy settings. Turning access off does not erase information already saved to Health, to your diary or to an exported report. Apple's Health privacy information: [apple.com/legal/privacy/data/en/health-app](https://www.apple.com/legal/privacy/data/en/health-app/).

## 4. Medicine search and the US National Library of Medicine

From three letters, medicine suggestions come from your own medicines and a built-in list on your device. From four letters, after a short pause, the app also asks the RxTerms Clinical Tables service run by the US National Library of Medicine (NLM).

The request contains only the text in the medicine-name field and the settings needed to return suggestions. It does not include your diary, notes, photos, profile details, dose history or any account identifier. The text can include a name picked from Health or read from a medicine-box photo, and any other words you type there. The connection also exposes your internet address and ordinary request details to NLM. Searches go straight from the app to NLM over HTTPS, not through a Kok Keong server.

Stool Log keeps search results in memory only, does not send the search text to Firebase Analytics and keeps no search history file. NLM handles requests under its own policies and may keep service logs. See [clinicaltables.nlm.nih.gov](https://clinicaltables.nlm.nih.gov/) and [NLM's privacy policy](https://www.nlm.nih.gov/web_policies.html#privacy_security).

Online medicine search is separate from the "Share usage data" setting. You can still type and save any medicine name offline. Please don't type names, contact details or other identifying information in the medicine-name field.

## 5. Photos and camera access

You can choose a photo or allow camera access to add one. Food-photo suggestions and reading text from medicine packaging run on your device using Apple's image tools; the image is not sent anywhere for this. A medicine name placed in the search field may be searched online as described above.

Photos saved with diary entries are stored with the app's data on your device and can sync through your private iCloud. They are not sent to Kok Keong, NLM or Firebase. Stool photos are blurred in the app until you reveal them; this is a display feature. Taking a photo in Stool Log does not add it to your Photos library, and deleting an entry does not delete an original you chose from Photos.

## 6. Usage analytics

Stool Log uses Google Analytics for Firebase to understand which features are used and to improve the app. "Share usage data" is on by default. You can turn it off at any time in Settings > Privacy > Share usage data without losing any feature.

When it is on, the app sends events such as screens opened, the kind of entry added or edited (for example "food" or "medicine"), logging milestones, whether a photo or note was used, settings switched on or off, which daily goals are turned on, report options, widget, control or Watch setup, paywall and purchase steps, and technical error codes. These events can show that you used a health-related feature and when.

Events never include what you logged: no stool types, colours, pain or urgency, no symptom names or strength, no medicine or food names, no notes, photos, search text, goal numbers, period information or Health records. Google also processes an app-instance identifier, app and device information, usage times, purchase events (the product and price, through Firebase's purchase event) and an approximate location derived from your internet address. Stool Log sets no user ID, does not collect the advertising identifier and denies advertising consent, so this information is not used to track you across apps or for ads. We don't call it anonymous: events from the same app installation can be linked together.

Turning the switch off stops future collection; it does not erase what Google already received. The data is kept for two months under the property's retention setting and Google's policies. See [Google Analytics data retention](https://support.google.com/analytics/answer/10285841) and [Google's privacy policy](https://policies.google.com/privacy).

## 7. Apple Ads attribution

Stool Log is sometimes advertised in App Store search through Apple Ads. To learn whether an install came from one of these ads, the app asks Apple's AdServices framework for a token once per installation and sends it to Apple, which answers yes or no and, for a yes, the campaign number. That answer is sent as an analytics event. This happens only while "Share usage data" is on. It uses no advertising identifier, does not need App Tracking Transparency, and nothing you logged is sent with it.

## 8. Purchases, reminders, widgets, Apple Watch and app lock

Apple handles purchases and payments. Stool Log uses Apple's StoreKit transaction information to unlock or restore Stool Log Plus. Kok Keong does not receive your payment details. Purchase steps and purchases can be sent to Firebase Analytics as described above when usage sharing is on.

Reminders are scheduled on your device through Apple's notification system. Widgets, Lock Screen and Control Center controls, Siri actions and the paired Apple Watch use your diary to show status and let you log. Between your iPhone and Apple Watch, the app sends recent stool times and types, the names of symptoms, foods, drinks and medicines, today's doses, water and goals, and the name of the person shown; never notes, stool colour, blood, photos or Health information. Notifications, widgets and the Watch may show personal information on visible screens; Discreet mode hides most of it.

If you turn on the app lock, Apple's system checks Face ID, Touch ID or your passcode. Stool Log receives only the result. The app lock does not protect reports you share or what notifications and widgets show.

## 9. Reports, exports and information you share

Doctor reports (PDF or CSV) and Export all data (a file of all your logs, with photos if you include them) are created on your device. Depending on what you choose, they can include diary entries, people's details, period days, medicines, information read from Health and questions you typed for a clinician. When you save or send a file, the place you choose receives it and applies its own privacy practices. Deleting information in Stool Log does not remove copies already saved or shared elsewhere.

## 10. Keeping and deleting information

Your diary stays on your device and, where applicable, in your private iCloud until you delete it. You can edit or delete any entry in the app.

Settings > Delete all data > Delete everything removes every person you added (with their names and details), and everyone's stools, other entries, daily medicines, period days, About you details, daily goals and goal ticks, plus the doctor visits and "Did it help?" comparisons kept on that device. When iCloud sync is working, these deletions sync to your other devices; this can take time and needs a connection. It does not reset your preferences, and it does not erase exported files, originals in your Photos library, device backups, purchase records, NLM logs or analytics already sent.

When you delete entries or use Delete everything, Stool Log also tries to remove the samples it added to Apple Health. This depends on Apple's permissions; check the Health app for any that remain. Information first entered in Health or another app is not deleted by Stool Log.

Uninstalling the app or turning off sync does not delete cloud records, backups or shared copies. We cannot see or erase your diary ourselves, because it is not on a server we run. Contact us for help using these controls.

## 11. Other people, support and privacy requests

If you keep records for a child or another person, enter and share only information you are allowed to handle. Their records are kept under your device and Apple Account, not in a separate account for them.

If you contact us, we receive your email address, your message and anything you attach, and use them to reply. Send feedback in the app starts an email with only the app version, iOS version and iPhone model filled in; nothing you logged is added. You don't need to send health information to ask a question. You can ask us about access to, correction or deletion of information we hold; your rights depend on the law where you live.

Apple, Google, NLM and any services you choose for sharing may process information outside your country under their own policies. No storage or transmission system can guarantee complete security.

## 12. This website

This website, stoollog.com, is hosted on Google's Firebase Hosting, which processes your internet address and browser details to deliver the pages.

The website asks before using Google Analytics. If you choose Allow, Google Analytics counts the pages you view and taps on the App Store buttons, using a cookie that identifies your browser, together with device and browser information and an approximate location worked out from your internet address. Google signals and ad personalization are off. If you choose No thanks, or don't answer, the analytics script isn't loaded and no analytics cookie is set.

The appointment summary page never loads Google Analytics, and nothing you type on any page of this website is sent anywhere: the summary is made in your browser and is gone when you close the page.

You can change your choice at any time with Analytics settings at the bottom of each page. Choosing No thanks after Allow removes the analytics cookies from your browser; it doesn't erase what Google has already received. The website's analytics are separate from the app's, and nothing you log in Stool Log is sent by the website.

## 13. Policy updates and contact

We will post an updated policy with a new date here when our practices change.

Developer and privacy contact: Kok KeongEmail: [kokk97799@gmail.com](mailto:kokk97799@gmail.com)