Your diary.
Your choices.
Controller and contact
Gennaro Francesco Colasuonno, who uses Xeryon as an alias, is the data controller for ploP and these pages. For support and data requests, email contact@noyrex.com. Last updated: 19 September 2026.
Advertising: which versions this applies to
Version 1.0.0 of ploP does not integrate AdMob. The advertising sections of this notice apply to later versions that enable Google AdMob and its consent module. Publishing this notice does not activate ads in the version already installed. In later versions, when advertising is disabled, ploP does not initiate Google consent or ad requests. Builds using test ads may still contact Google.
Your diary on your iPhone
You can use the diary without an account. Entries, notes, language and preferences are stored on your device. Widgets use local data and, when connected to a group, leaderboard data. This information may be visible to anyone who sees your screen. Personal notes are not synchronised. ploP does not request GPS access; coordinates recorded by older versions remain local. Device backups and exports you choose to share depend on your settings and chosen services.
Account and optional synchronisation
Accounts use an email address, user identifier, nickname, avatar choices and group memberships. Supabase manages credentials and sessions; Sign in with Apple may use your chosen Apple relay address. Connecting your diary uploads entry identifiers, dates and times, consistency, comfort, any general home/away category, and modification or deletion timestamps. Notes and coordinates are not uploaded. These records may reveal health information.
Purposes and legal bases
Accounts, group features and requested support provide the service (GDPR Article 6(1)(b)). Optional online processing of health data requires your explicit consent (Articles 6(1)(a) and 9(2)(a)). You can decline and keep using the local diary. Security, abuse handling and recording consent choices serve our legitimate interest in protecting users and the service (Article 6(1)(f)). Legal obligations, where applicable, rely on Article 6(1)(c). We do not use the diary for advertising or automated decisions with legal or similarly significant effects.
Consent and groups
You can connect your diary after signing in, or from Profile or Groups, by giving consent. When creating or joining a group, the button explicitly states that you will share statistics with members. You can hide them in group settings. Members can see shared nicknames, avatars, counts and awards, but not personal notes. Keep invitation codes private. You can disable sharing or leave a group without deleting it for others. Withdrawing consent from Profile stops synchronisation and group sharing and deletes entries from the active online database. Your account, memberships and local diary remain. Withdrawal does not affect earlier lawful processing; we retain the version and dates of your choices while the account exists. We cannot retrieve copies already saved by other members.
Support, reports and blocks
Support requests contain your address and whatever you choose to write. Do not send passwords, sign-in links or unnecessary health information. Group reports record the reporter account, group, optional reported member, reason, optional text, dates and case status. Other members cannot view reports. We review the queue daily. A block records both accounts, the nickname at the time of blocking and the date, and restricts visibility reciprocally in groups. It does not remove memberships. Blocks are removed when unblocked or when an involved account is deleted.
Retention and deletion
The online diary and profile remain while you use your account, unless deleted or consent is withdrawn. Deleting an entry excludes it from counts, but its record, including details and deletion timestamp, remains to synchronise the change. Withdrawing consent or deleting the account removes it from the active database. Account deletion removes the online account, entries, consent and memberships; groups may remain for other members. Signing out or deleting the online account does not erase the local diary. Support emails and closed reports are manually deleted within 90 days of closure, except for ongoing disputes or legal obligations; exceptions are reviewed. Account deletion removes direct account references in reports, but report text remains subject to this retention period.
Providers, logs and technical copies
Supabase provides authentication and the database configured in Frankfurt, Germany. Namecheap Private Email handles support and authentication email delivery. Cloudflare Pages hosts this website. Network requests may generate technical logs containing IP addresses, times, request paths, results and client information for operation and security. We do not use them for advertising. The current Supabase Free plan makes API/database logs available for one day; this does not describe every internal provider log. It does not include the customer-accessible daily database backups offered on paid plans. Namecheap documents daily email backups retained for 14 days on its legacy platform and up to four weeks on its new platform. Deleting active data does not necessarily remove technical copies immediately. Other provider logs and copies follow retention criteria related to security, continuity and legal requirements under their respective terms.
International providers and purchases
Even with a German database region, providers may involve companies or subprocessors outside the European Economic Area. Their processing agreements provide transfer safeguards, including standard contractual clauses where applicable. You can request information about relevant safeguards from us. See the Supabase agreement, Cloudflare agreement and Namecheap terms. Apple handles payment and distribution under its own terms; ploP does not collect payment card details.
Optional reminders and alerts
In versions that include notifications, the optional daily reminder is scheduled on your iPhone at your chosen time; its preference stays on the device. Group alerts require a per-group choice and iOS permission. When enabled, the server stores the device delivery token linked to your account and session, language, time zone and preferences. Expo Push Service and Apple APNs receive the token and a generic message, without nicknames, group identifiers, diary details or content. Processing provides the alerts you request (GDPR Article 6(1)(b)); system permission can be withdrawn in iPhone settings. Providers handle technical data under their own notices, including the Expo privacy policy. This feature is in preparation: its inclusion in this notice does not mean it is already enabled in your installed version.
Group activity and notification retention
Sharing new entries with a group is separate from the leaderboard and requires optional explicit consent (GDPR Articles 6(1)(a) and 9(2)(a)): authorised members see your nickname with a phrase revealing that an entry was logged. It respects blocks and visibility and can be disabled within the group. The server retains the entry and group reference, phrase variant and timestamp for up to 7 days. Withdrawing activity sharing deletes these items; leaving the group or deleting the online account/entries removes them according to synchronisation rules. Choice timestamps remain with your preferences while membership exists. Queued alerts expire after 12 hours. Tokens are removed after 30 days without renewal, when invalid, on session sign-out or account deletion; delivery receipts are removed after checking. We cannot recall a notification already delivered to a device.
Choices in the United States
For users in supported US states, Ad preferences provides access to the Google module’s options concerning sale or sharing of advertising data, where applicable. Sale and sharing may have specific meanings under state laws and do not necessarily involve payment. We do not provide diary content to advertisers. To make requests about ploP data, or if you cannot access the options, email contact@noyrex.com. Your diary and groups remain usable regardless of your advertising choices.
Google AdMob and advertising data
Versions with advertising enabled use Google AdMob for full-screen ads. We request non-personalised ads and do not send diary content, notes, consistency, comfort, nicknames, email, account identifiers or group data to the service. The service may collect IP addresses, approximate location inferred from IP, app/device identifiers, ad and interaction data, crashes and performance data for delivery, measurement and fraud prevention. Non-personalised does not mean anonymous or without collection. See Google’s SDK data disclosures and how Google uses information from partner apps.
Your ad choices
Advertising consent is separate from consent to synchronise your diary. Where required, Google’s form lets you accept, decline or manage options before ad requests. Non-essential access to or storage of information on your device requires applicable consent; consent-based processing relies on GDPR Article 6(1)(a). The form explains purposes, providers and other relevant legal bases. To revisit your choices, open Settings → Advertising → Ad preferences in versions offering this feature. Declining does not block the diary or groups: depending on your choices and service availability, you may see no ads or limited ads. Declining does not mean every technical operation involves no processing. We do not request Apple’s tracking permission in this configuration; advertising consent does not replace that permission.
Advertising retention and providers
Your device stores consent preferences managed by Google’s module and a daily ad counter used to limit frequency. The local counter is updated when the advertising service is next used; it contains no diary entries and is not sent to our database. Google’s retention and deletion periods depend on purpose, data type, settings and security or legal requirements. See Google’s privacy policy, retention criteria and international transfer safeguards. Google and providers listed in the form may process data outside the EEA. Deleting your ploP account does not automatically erase data Google already holds; to exercise your rights, contact us and use the channels in Google’s policy. Withdrawing consent does not invalidate earlier processing.
Your rights and updates
Where applicable, you may request access, correction, deletion, restriction and portability, withdraw consent and object to processing based on legitimate interests by contacting us. Profile includes diary export and account deletion. You may complain to the Italian data protection authority or another competent supervisory authority. This website has no analytics tools, advertising cookies or forms collecting diary entries. We update this notice when processing changes and request fresh consent where needed. ploP does not provide medical advice or diagnosis.