PottiPing

Privacy Policy

Last updated: July 30, 2026

The short version: we collect the minimum we need to run the waitlist, the app, and your button — we don’t sell your data, we don’t use advertising trackers, and we never store your WiFi password. The detail is below.

Who we are & what this covers

PottiPing is operated by (Un)Cubed, LLC, doing business as PottiPing (“PottiPing,” “we,” “us,” “our”). This Privacy Policy explains how we handle information across everything we offer:

  • The website at pottiping.com (including the waitlist);
  • The PottiPing mobile app; and
  • The PottiPing button (the hardware device) and the service that connects it to the app.

Questions? Email hello@pottiping.com.

1. What we collect

When you join the waitlist

  • Your email address. That’s the only thing the waitlist form asks for.
  • Anti-bot signals. When you submit the form, our bot check (Cloudflare Turnstile) reviews technical signals — including your IP address and browser characteristics — to confirm you’re a person. We don’t store these; they’re processed by Cloudflare for the check.

When you create an account in the app

  • Sign-in details. Depending on how you sign in: your email address; your name (if you provide it or your provider shares it); and, for Sign in with Apple or Google, a provider-issued identifier used to recognize you. If you use email + password, we store your password only as a secure one-way hash (we can’t read it).
  • Household & members. A household name (often just your name), your role (owner or member), on/off-duty settings, and — if you invite a co-parent or sitter — the membership links between accounts.

When you set up and use your button

  • Button details. A room label you choose (e.g. “Upstairs bathroom”), a hardware identifier for the device, and technical status such as coarse battery level, firmware version, and last check-in time.
  • Presses (“pings”). When the button is pressed, we record the time, the notification that was sent, who acknowledged it, and — if a caregiver marks it — whether it was a real trip or a false alarm. This history powers the ping log and the optional potty-training view. See Children & families.
  • Push notifications. To send you a ping, we store your device’s push token and time zone (so times show in your local zone).
  • Network diagnostics. If the button fails to join WiFi, it may report a numeric error code and its network’s security type (e.g. “WPA2”). These are integer codes only — see “What we don’t collect.”

Setting up WiFi (important)

When you connect the button to your home WiFi, your network name and password are sent directly to the device over a local Bluetooth connection and are never stored — not on the button’s account, not on our servers, and not in the app after setup. We keep only a non-identifying network security-type code for troubleshooting.

When you contact us or send feedback

  • Feedback you submit in the app (your message, plus your account, app version, and platform so we can follow up), and anything you include when you email us.

Website analytics & cookies

  • Privacy-friendly analytics. We use Vercel Web Analytics, which is cookieless and reports aggregate, non-identifying information like page views and general device/region.
  • One functional cookie. If you enter an access code to preview an early version of the site, we set a single cookie so you don’t have to re-enter it. It isn’t used for tracking or advertising.

What we don’t collect

  • We don’t store your WiFi credentials (see above).
  • We don’t track your location. The app never uses GPS or collects your whereabouts. (Your phone may ask for a location permission — that’s a technical requirement for Bluetooth setup on iOS/Android, not location tracking. See Device permissions.)
  • We use no advertising trackers, ad pixels, or third-party marketing cookies.
  • We never sell or rent your personal information.

2. How we use your information

  • To run the waitlist — send your confirmation and let you know when PottiPing is available.
  • To create and secure your account and connect your household.
  • To set up your button and deliver pings to the right people at the right time.
  • To show your ping history and the optional potty-training view.
  • To provide support, fix problems, and improve the product (including diagnosing WiFi setup failures).
  • To keep the service safe — preventing spam, abuse, and unauthorized access.
  • To comply with law and enforce our Terms & Conditions.

We don’t use your information for advertising, and we don’t sell it.

3. How your information is shared

We don’t sell your data. We share it only with service providers that help us run PottiPing (each handling only what they need), when you connect an optional integration, or when the law requires it.

ProviderRoleWhat it handles
ResendEmailStores the waitlist and sends confirmation and account emails (e.g. verification codes).
VercelWebsite hostingServes the site and provides cookieless, aggregate analytics.
CloudflareBot checkVerifies the waitlist form isn’t a bot (processes IP + browser signals for the check).
Fly.ioApp hostingRuns our backend and stores account, household, button, and ping data.
AppleSign-in & pushVerifies Sign in with Apple; delivers push notifications to iPhones (Apple receives the push token and the notification text, which may include a room label and time).
GoogleSign-inVerifies Sign in with Google.

Optional integrations you turn on

  • Amazon Alexa. If you link Alexa to announce pings on your Echo, we exchange the tokens needed to do that, and Alexa receives your button’s room label and press events. No email, no child’s name is sent — but note that if you name a button after a person (e.g. “Emma’s bathroom”), that label is what’s shared. You can unlink anytime.
  • Your own webhooks / smart-home services. If you configure a webhook (e.g. to IFTTT or Home Assistant), a press sends a small message — the event, button label, timestamp, and household name — to the URL you provide. What happens after that is governed by that service, not us.

We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a business transfer (e.g. a merger or acquisition), with notice where required.

4. Children & families

PottiPing is designed for parents and caregivers. Accounts are for adults, and we don’t knowingly let anyone under 18 create one. We don’t collect a child’s name, birthday, photo, contact details, or account information.

Because of what PottiPing does, we should be direct about one thing: the ping history includes timestamps of button presses and a caregiver’s optional “real trip / false alarm” note, which together describe a child’s bathroom activity over time. This behavioral data isn’t tied to a child’s identity, exists only to power the ping log and the optional potty-training view you control, and stays within your household unless you connect an integration. You can delete this history by removing the button or deleting your account (see Your choices).

We don’t knowingly collect personal information from children under 13, consistent with the U.S. Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us personal information, contact hello@pottiping.com and we’ll delete it.

5. Permissions the app asks for

The app requests a few device permissions, only for the features that need them:

  • Bluetooth — to set up your button (credentials are sent to the device over Bluetooth during pairing).
  • Local network — to briefly talk to your new button during setup.
  • Location — required by iOS and Android in order to scan for Bluetooth devices and read your current WiFi network name during setup. We do not collect, store, or use your geographic location.
  • Notifications — to send you pings.

You can change these anytime in your device settings; turning some off may limit setup or notifications.

6. How long we keep it

  • Waitlist email — until you unsubscribe or ask us to delete it.
  • Account, household, and button data — for as long as your account is active, then removed when you delete your account (see below).
  • Ping history — we keep a rolling window of recent presses per button (older entries drop off automatically); everything is removed when you delete the button or your account.
  • Sign-in / reset codes — expire within about 15 minutes.
  • Invites — co-parent invites expire in 7 days; sitter invites in 90 days.
  • Sessions — kept until you sign out (so we can revoke access immediately), your access is removed, or your account is deleted.

Deleting your account removes your user record, your sign-in sessions, and your device push tokens. If you’re the sole owner of a household, it also removes that household’s buttons (arming them to reset), integrations, and memberships.

7. Your choices & rights

  • Unsubscribe from waitlist emails anytime via the link in any email.
  • Access or delete your account and its data — from the app, or by emailing hello@pottiping.com.
  • Manage integrations — unlink Alexa or remove a webhook in the app at any time.
  • Control permissions in your device settings.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to certain processing (for example, under California’s CCPA/CPRA or the EU/UK GDPR). We honor these requests regardless of where you live — just email us. We don’t sell or “share” personal information for cross-context behavioral advertising, and we won’t discriminate against you for exercising a right.

8. Security

We protect your information with measures appropriate to its sensitivity: encrypted connections (HTTPS/TLS), passwords stored only as secure hashes, sign-in tokens kept in your device’s secure storage, and access limited to what’s needed to run the service. No system is perfectly secure, but we work to keep yours safe and will notify you of a breach where the law requires.

9. Where your data is processed

PottiPing is operated from the United States, and our providers process data in the U.S. and other countries. If you use PottiPing from outside the U.S., you understand your information will be processed in the U.S., which may have different data-protection laws than your home country.

10. Changes & contact

If we update this policy, we’ll change the date at the top, and for significant changes we’ll give account and waitlist members a heads-up. Questions, requests, or concerns:

(Un)Cubed, LLC (DBA PottiPing)
Email: hello@pottiping.com