GetToilet Privacy Policy

Last updated 20 August 2026

Who we are

GetToilet is a crowdsourced map of public toilets in Malaysia. This policy explains what we collect when you use the GetToilet app or website, why we collect it, and what you can do about it.

What we collect

When you create an account. Your email address, and a display name. If you sign in with Google we also receive your profile picture. If you sign in with Apple we receive an email address, which may be a private relay address Apple generates for you. We never receive your Google or Apple password.

When you contribute. The ratings, tags, written comments and photographs you attach to a review, and the name, location, floor, amenities and photographs of any toilet you add.

When you use the map. Your device's location, if you grant permission, so we can show what is near you. We use it to answer that question and do not store it. You can refuse, and the map still works — it opens on Kuala Lumpur instead.

When you use Poop Buddy. Your check-in times, who you are paired with, and the nudges sent between you.

Automatically. Basic technical information every web request carries, such as your IP address, used to apply rate limits and to keep the service working.

What is public

Your display name, your profile picture, your reviews and their photographs, the toilets you have added, your badges, your points and your position on the leaderboard are visible to everyone, including people who are not signed in.

Your email address is not. Neither is your password, which we store only as a one-way hash that cannot be reversed.

Who we share it with

We do not sell your personal information, and we do not share it for advertising.

We use Google Maps to draw the map, Overture Maps data held on our own servers to look up venue names, Google and Apple to verify sign-ins, Amazon Web Services to host the service and store photographs, and Amazon Simple Email Service to send verification and password-reset codes. Each of these receives only what it needs to do that job.

We may disclose information where the law requires it.

How long we keep it

Until you delete it. You can delete a review at any time from the app. You can delete your whole account from Settings, which permanently removes your account, your reviews, your review photographs, your Poop Buddy history and your position on the leaderboard.

Toilets you added stay on the map after you delete your account, because other people's reviews depend on them, but they are no longer linked to you.

Account deletion is immediate and cannot be undone.

Your rights

Under Malaysia's Personal Data Protection Act 2010, and equivalent laws elsewhere, you may ask to see the personal data we hold about you, to correct it, or to have it deleted. The app gives you all three directly: your profile shows what we hold, Settings lets you change your display name and password, and Settings lets you delete your account outright. If you would rather ask us, write to the address below.

Children

GetToilet is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

Security

Passwords are hashed, connections are encrypted in transit, and sessions expire and rotate. No service can promise perfect security, but we take reasonable measures to protect what you give us.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be announced in the app.

Contact us

support@gettoilet.my