Privacy Policy
Effective date: 1 July 2026 · Version 1.0
1. Who we are
Püper is operated by Sedlex Services Inc., incorporated in Quebec, Canada. 1100, avenue des Canadiens-de-Montréal, Suite 354A, 3e étage, Montréal (Québec) H3B 2S2 · contact@puperapp.com
This policy meets the requirements of Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.
2. The short version
- Search and view restrooms without an account.
- We store your location only if you turn on Premium real-time alerts.
- We never collect or host photographs.
- We never sell your personal information or share it with advertisers.
- Your listings, ratings and written reviews are public by design.
3. What we collect, and why
Account information — email and an authentication identifier; with Google sign-in, your email and a basic profile identifier from Google (never your Google password). Used to authenticate you and link your contributions.
Your display name — when you create an account we assign a neutral default (for example, "User" followed by digits). You may change it at any time. It is shown next to your public contributions. It is not derived from your email.
Your contributions — listings, ratings, written reviews, amenity selections, floor information, access-type reports and votes. Public; see section 5.
Subscription information — that your account holds an active subscription and a customer identifier from our payment processor. We never receive, see, or store your card number.
Location — only as described in section 4.
Push notification registration — a delivery endpoint and keys if you enable notifications. It does not tell us where you are.
Technical and error information — diagnostic data when the app errors, including an account identifier if you are signed in. Used only to fix defects.
Communications — correspondence you send us.
4. Location
If you do not use Premium real-time alerts, we do not store your location. Distance calculations happen in your browser. When you search near you, detect your city, or look up supplementary data, an approximate location, coarsened to about one kilometre, is sent through our own servers to OpenStreetMap/Nominatim and REFUGE Restrooms; your precise coordinates and IP address are never shared with those third parties.
If you enable Premium real-time alerts, we store one current location for your account, to match restrooms just marked clean or restocked against your position. Storage is opt-in; it is a single current position for proximity matching, not a movement history; it is deleted when you turn alerts off and when your subscription lapses or is cancelled; it is never shared with facility managers, other users, or any third party. Free-tier locations are never stored.
5. Your contributions are public
Listings, ratings, reviews, amenity selections, floor details, access-type designations and correction votes are visible to everyone, including logged-out visitors, and may feed a restroom's public confidence score. Do not put personal information into a review; reviews are text only.
6. What we do not collect
Photographs (the app has no photo upload); payment card numbers; movement history; your contacts, calendar, microphone, camera or files; health information. We do not sell personal information or share it with advertisers or data brokers. Advertising currently shown is our own first-party content with no third-party tracking; introducing a third-party ad network would require updating this policy and obtaining any required consent first.
7. Service providers and where information is processed
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, real-time infrastructure |
| Vercel | Application hosting and delivery |
| Stripe | Subscription payments and billing (web) |
| Resend | Transactional and authentication email (via SMTP) |
| Sentry | Error and crash diagnostics |
| Optional sign-in | |
| OpenStreetMap / Nominatim | Address lookup and reverse geocoding (server-proxied, ~1 km coarsened) |
| CARTO | Map tiles |
| OpenRouteService | Walking-distance routing |
| REFUGE Restrooms | Supplementary restroom data (server-proxied, ~1 km coarsened) |
Our infrastructure and providers are located primarily in the United States, so your personal information is stored and processed outside Quebec, where it may be subject to that jurisdiction's laws including lawful access by foreign authorities. We assessed this before transferring and require providers by contract to maintain protection adequate to Quebec standards. By using Püper you acknowledge this transfer.
8. Cookies and on-device storage
Strictly-necessary browser storage: a session token and your language and display preferences. If you use offline maps, tiles and a snapshot of nearby restroom data are cached on your device; this stays on your device, is not transmitted to us, and you can clear it any time. No advertising cookies or third-party tracking pixels.
9. How long we keep information
Account and profile — while open, deleted on request. Public contributions — retained in the community database (see section 11). Stored alert location — until you disable alerts or your subscription lapses. Notifications — 7 days after being read, 30 days if unread. Push registration — until disabled or revoked. Error diagnostics — per our provider's standard retention. Billing records — as tax and accounting law requires.
10. Your rights
Access; correction; withdrawal of consent (including location for alerts); deletion; portability; de-indexation; and to be informed of the reasons and principal factors behind any decision based exclusively on automated processing (section 12). Exercise them by emailing contact@puperapp.com, or delete your account yourself — signed in, from your profile screen; or from puperapp.com/delete-account, which explains what is removed and what is retained. We respond within 30 days. Unsatisfied, you may complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
11. Account deletion and what survives it
Deleting your account removes your profile, email, alert settings, any stored location, your notifications, and the text of your reviews. Restroom listings you added and your star ratings remain, disassociated from your name, because other people rely on them. Deletion is immediate. If your account also manages a facility or holds a Püper Pro licence, deletion is handled by writing to contact@puperapp.com rather than automatically.
12. Automated processing
Püper computes a rules-based confidence score per restroom (listing age, number and recency of ratings, known-category match, community corrections). It describes a restroom, not a person. If we later introduce contributor trust scores affecting how a person's contributions are treated, we will update this policy, tell you when such a score applies to you, and on request explain the information used and the principal factors, with a right to submit observations and to human review.
13. Confidentiality incidents
If an incident involving your personal information presents a risk of serious injury, we will notify you and the Commission d'accès à l'information promptly and take reasonable measures to reduce harm. We keep a register of confidentiality incidents as the law requires.
14. Children
Not directed at children. Under-14s may not create an account without parental authority; information collected from a child under 14 without that consent is deleted.
15. Person responsible for the protection of personal information
Marc Réjouis, President · Sedlex Services Inc. · contact@puperapp.com · 1100, avenue des Canadiens-de-Montréal, Suite 354A, 3e étage, Montréal (Québec) H3B 2S2
16. Changes
Material changes — especially to location use or a new collection category — are notified in the app or by email before taking effect, with consent sought where required. The date at the top reflects the current version.