Porcelain app privacy policy

Last updated: October 7, 2026

The short version

Porcelain does not collect your data. Your logs are kept on your iPhone and are not sent to us. There are no accounts, no ads, no analytics and no tracking. Your iPhone's own backups may include them (see below).

What the app stores, and where

Everything you enter — poop logs, habits (including ones you add), the names of people you add, the names you give to comparisons, the name you put on a report, notes, photos and settings — is stored only in the app's storage on your iPhone. It is not sent to us or to anyone else. The app does not sync your logs with iCloud.

Photos

If you add a photo to a log, Porcelain takes it with its own camera or reads only the one photo you pick. The photo is kept only in the app's storage on your iPhone, with its location and camera details removed. It is not added to your photo library or iCloud Photos, and the app can't see the rest of your photo library. (If you choose Save Image when sharing a card, iOS asks to add that one picture.) Backup files you save include photos, unless you turn off Include photos. When a log is deleted for good, its photo is deleted too.

Face ID

If you turn on Lock with Face ID, iOS checks your face (or your passcode). Porcelain only learns whether it matched; it never sees or stores your face data.

Apple Health

If you turn on Apple Health (Settings › Apple Health), Porcelain reads your sleep, steps, periods, water and fiber from Apple Health to set them beside your logs in Habits side by side, the “Porcelain noticed” cards on Today and the programs. It only reads: it never writes to Apple Health, doesn't keep a copy, and doesn't put them in backup files. Nothing it reads from Apple Health is sent to us or anyone else, or used for advertising. To change what Porcelain can read, open the Health app, tap your picture, then Apps › Porcelain.

Your iPhone's own backups

If you have turned on iCloud Backup or back up your iPhone to a computer, iOS includes the app's data in that backup. Apple and you control those backups; we cannot see them.

How long things are kept

A log you delete stays in Recently Deleted for 30 days, then it is deleted for good, with its photo. The app also keeps automatic backups on your iPhone: one a day for the last 30 days, then one a month for a year. A deleted log can remain in those backups until they expire. Backups made with Back up now, before a restore, or before a person is deleted (with that person's photos) stay until you delete them in Settings › Backup & Restore. Settings › Delete All Data deletes the logs, photos and all on-device backups at once.

Files you create

You choose when to export a backup, PDF report or CSV file, and where to save it. We cannot see them, and the app cannot delete copies you have saved or shared.

Purchases

Porcelain Plus is sold through Apple. Apple processes the payment; we don't receive your name, payment details or your logs.

Crash reports

If you have turned on Share With App Developers in your iPhone's settings (Privacy & Security › Analytics & Improvements), Apple may send us reports when the app crashes. They show where the app stopped working, not what you logged.

Deleting your data

Settings › Delete All Data, or deleting the app, deletes the logs, photos and on-device backups stored by the app. Backup files, reports and CSV files you saved elsewhere, and your iPhone's own backups, must be deleted by you.

Children

Porcelain is not directed to children under 13. A parent can keep logs for a child on the parent's own iPhone; those logs stay on that iPhone.

Not medical advice

Porcelain is for personal record-keeping. It is not intended to diagnose or treat any condition. Check with a doctor before making medical decisions.

Changes and contact

If this policy changes, the new version will be in the app with a new date. Questions: porcelainsupport@icloud.com. Porcelain is made by Yoshitaka Nakao, an independent developer in Japan.