PooScan is an iOS app that takes a photo of your dog's stool, combines it with a short health profile and symptom check, and uses AI to give you a plain-language screening result — including an urgency level, a Bristol score, possible causes, and a recommendation. This policy explains exactly what data is involved, where it goes, and the control you have over it. It is written to be read, not to hide things.
PooScan is operated by Nik Senekovič, a sole proprietor based in Slovenia (European Union). For the purposes of the EU General Data Protection Regulation (GDPR), this is your data controller. You can reach us at info@altion.ai for any privacy question or request.
PooScan is designed to collect as little as possible. There is no login, no account, and no name or email required to use it. Here is everything that is involved:
| Data | What it is | Where it's processed |
|---|---|---|
| Dog stool photo | The image you capture or select for a scan. | Sent to our AI providers to be analyzed. Not stored on our servers. |
| Pet health profile | Details you enter about your dog: name, breed, age, weight, lifestyle, and any known conditions. | Stored on your device. Sent alongside the photo so the analysis is personalized. |
| Symptom inputs | The recent-symptom selections you make before each scan (e.g. vomiting, low energy). | Sent with the photo for that scan. Recent scans are kept on your device. |
| Scan results | The urgency tier, Bristol score, findings, causes, and recommendation the app returns. | Stored on your device only, so you can see history and trends. |
| Purchase history | Whether you bought a subscription or a single scan unlock. | Handled by Apple via the App Store. We see entitlement status, not your card details. |
The stool photo is the core input. As declared in the app's privacy manifest, PooScan collects "Photos or Videos" and "Other User Content" (your profile and symptom entries) solely for app functionality — i.e. to produce your screening result. None of it is used for advertising, none of it is linked to your real-world identity by us, and none of it is used to track you across apps or websites.
PooScan does not use third-party analytics or advertising SDKs and does not track you. The app's privacy manifest declares standard Apple "required-reason" API usage that is purely operational and stays on your device or with Apple:
When the app contacts our server to run a scan, our hosting provider (Cloudflare) processes the connection metadata that any web request involves — such as your IP address — to route the request, apply rate limiting, and keep the service available and secure. A sample of request logs (metadata, not your photo) is retained briefly for operational monitoring and then expires.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Running a scan: sending your photo, profile, and symptoms to AI to generate a screening result. | Your consent, which you give in onboarding and each time you start a scan. You can withdraw it by not scanning. |
| Providing the app you asked for, processing your purchase, and giving you support. | Performance of a contract (our Terms) with you. |
| Keeping the service available, rate-limited, and secure. | Legitimate interests in running a functioning, abuse-resistant service. |
To run a scan, your photo and the text you entered are sent through three service providers acting on our behalf. We name all of them:
| Provider | Role | What it receives |
|---|---|---|
| Cloudflare | Hosts the secure proxy server (a Cloudflare Worker) that sits between the app and the AI providers, so our keys never ship inside the app. | The request, including the photo and text, in transit. Connection metadata (e.g. IP) for routing, rate limiting, and security. |
| Anthropic (Claude) | Primary AI vision provider that reads the image and produces the analysis. | The stool photo plus the pet profile and symptoms for that scan. |
| OpenAI (gpt-4o) | Automatic backup AI provider, used only if the primary provider is unavailable or declines a given image. | The same scan inputs, only on the occasions it acts as fallback. |
We do not sell your data and do not share it with anyone beyond what is needed to produce your result and run the service.
Cloudflare, Anthropic, and OpenAI are US-based providers, so running a scan involves transferring your data outside the European Economic Area to the United States. Where required, we rely on appropriate safeguards for these transfers — primarily the European Commission's Standard Contractual Clauses incorporated into our providers' data processing terms (and, where applicable, their certification under the EU–U.S. Data Privacy Framework). You can ask us at info@altion.ai for more detail on the safeguards in place.
Because your scan history and profiles live on your own device, you already hold and control most of your data directly. You also have the following rights, which we will honor:
To exercise any right, email info@altion.ai. We aim to respond within one month.
If you believe we have mishandled your data, you can lodge a complaint with your local data protection authority. As we are based in Slovenia, our supervisory authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) — www.ip-rs.si. EU users may also contact the authority in their own country.
PooScan is intended for adult dog owners and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has used the app and provided data, contact us at info@altion.ai and we will help.
Traffic between the app, our proxy, and the AI providers is encrypted in transit (HTTPS/TLS). Our AI providers' keys are held server-side, never inside the app. Access to the proxy is authenticated and rate-limited. No system is perfectly secure, but we keep the data surface deliberately small — the less we hold, the less there is to lose.
If we change how we handle data, we will update this page and revise the date at the top. Material changes will be reflected here before they take effect.
Privacy questions or requests: info@altion.ai
Data controller: Nik Senekovič, sole proprietor, Slovenia (EU).