Privacy Policy

Last updated: 21 October 2026

This policy explains what the Nappy Hero mobile app and this website (nappy-hero.com) collect, how we use it and the choices you have. We have tried to keep it short and plain.

Who we are: Nappy Hero.

In short

• There are no user accounts in the app. You do not sign up or log in.
• The app creates a random contributor ID on your device, with no name, email or account. The spots you add are linked to it so they count towards the leaderboard. You can choose a nickname, which is then shown publicly.
• We use your location only while the app is open, to show spots near you. We do not store it in our database.
• If you add a spot, the details and photo you submit are stored and, once approved, shown publicly to other users.
• The app contains no advertising and no analytics or crash-reporting SDKs.

What we collect

Your location (app)

With your permission, the app uses your device’s approximate or precise location while you are using it. Your coordinates are sent to our server to find nearby spots. The search itself is not stored in our database, but request logs (which can include the approximate area searched and your IP address) are kept for a limited period for security and troubleshooting. If location is unavailable, the app may use your device’s last known location (kept only on your device) or ask you to turn location on; you can also move the map yourself.

Spots you add

When you add a spot you send us: a name, a short description, the position you chose on the map, a star rating and a photo. Your device location is not attached automatically; the position is the pin you place. Before a spot is saved, the photo is re-encoded on our server, which removes hidden metadata such as GPS coordinates or device details. New spots wait for a person at Nappy Hero to review them. Approved spots, with their photo, are visible to everyone using the app. Please do not include people, faces or personal details in photos or descriptions.

Contributor ID and nickname (app)

The app creates a random contributor ID on your device. It is not your name, email address or an account, and we do not know who you are. The spots you add are linked to this ID so they count towards the leaderboard in the app and on this website, which ranks contributors by how many of their spots have been approved. The leaderboard shows a nickname, or “Hero #” and a number if you have not chosen one, with that count. It never shows the ID itself.

You can optionally choose a nickname. It is shown publicly on the leaderboard, so please do not use your real name or anything personal. You can clear it at any time, and we may remove one that breaks our rules.

The ID has a secret code. It is stored on your device and proves the ID is yours, and it can be used to restore your ID, for example on a new phone or after reinstalling the app. We keep only a one-way hash of the code, so we cannot read it or recover it for you. If you uninstall the app without saving the code, you lose your ID and a new one starts from zero.

Ratings and reports

A star rating you give a spot is stored with that spot, without your name. The app remembers on your device which spots you have rated (local storage) so it can show your rating. A report about a spot stores the text you write. The app does not collect contact details with reports, so reports are effectively anonymous; email us at [email protected] if you want a follow-up.

When you rate a spot we store, with your rating, a one-way keyed fingerprint of your network address (or of your contributor ID if you use one) so that each person counts only once and can change their rating; we never store the address itself, and the fingerprint cannot be turned back into it without our secret key.

Photos and camera

The app asks for camera or photo library access only when you choose to take or pick a photo for a new spot. It does not read your other photos.

Photos you submit are stored with our storage provider, Cloudflare (R2). They are not public files: they can only be reached through temporary links generated by our server, which stop working after a few hours. Photos of spots that have not been approved are not shown to other users.

Technical data and rate limiting

Like any web service, our servers receive your IP address and request details when the app or website connects. To stop abuse, we limit how often one network can create a contributor ID, submit, rate or report. For this we keep a one-way hash (not the readable IP address) of your network together with the spot concerned, in a temporary cache that expires after a short period (from seconds up to a day). Standard server logs may also record requests.

Website visitors

This website does not use cookies for tracking, analytics or advertising and loads no third-party scripts, fonts or trackers.

Administrators

The small number of Nappy Hero staff who review spots have admin accounts holding their name, work email address and the secret for two-factor login. This is not collected from app users.

How we use it

• To show you baby changing spots near you, and to give directions.
• To review, publish and maintain spots, ratings and reports.
• To reply to you if you contact support.
• To keep the service secure and prevent spam and abuse.

We do not sell your data and we do not use it for advertising or profiling.

Who we share it with

We do not share personal data with advertisers. The app and service rely on these providers:

• Mapbox (address suggestions): when you add a spot, the app sends the coordinates of the pin you place on the map (your device location only if you placed the pin there) to Mapbox to suggest an address or name for the spot. Mapbox also sees your IP address. See Mapbox’s privacy policy.
• OpenStreetMap (map tiles): the app downloads map images from tile.openstreetmap.org, so OpenStreetMap servers see your IP address and the map area you view. See the OSMF privacy policy.
• Other map apps: if you tap “Take me there”, the app hands the spot’s coordinates to the map app you choose, which has its own policy. The share button uses your device’s share sheet.
• Cloudflare (photo storage): photos you submit are stored in Cloudflare R2, and Cloudflare also sits in front of this website.
• Hosting and email: our servers and our email provider (for [email protected]) process data on our behalf.

We may disclose information if the law requires it.

How long we keep it

• Your location for searches: not stored in our database; request logs that can include the approximate area searched and your IP address are kept for a limited period.
• Approved spots, photos and ratings: kept while the spot is listed, until it is removed. A rating’s fingerprint is kept with the rating for as long as the rating exists.
• Reports: kept until resolved, then deleted or anonymised.
• Contributor ID, nickname and the link to the spots you added: kept until you ask us to remove them. The secret code is kept only as a hash.
• Abuse-prevention hashes (the temporary cache above, not rating fingerprints): expire automatically within a day.
• Ratings remembered on your device: until you clear the app’s data or uninstall it.

Security

The app talks to our servers over HTTPS. Uploaded photos are checked and re-encoded, new spots are reviewed by a person, and administrator access requires two-factor authentication and has login attempt limits. No system is perfectly secure, but we take reasonable steps to protect your data.

Your choices and deletion

• Location, camera, photos: you can turn each permission off at any time in your device settings.
• No account: because the app has no accounts, there is no account to delete. Uninstalling the app removes everything stored on your device, including your contributor ID’s secret code. The ID itself stays with us until you ask for it to be removed.
• Contributor ID and nickname: you can clear your nickname at any time in the app. To remove your contributor ID and its link to your spots, email [email protected] with your nickname or Hero number. The spots stay on the map but no longer count for anyone.
• Spots, photos or reports you sent: spots are linked to your random contributor ID but not to your name, reports are not linked to anything, and a rating carries only the fingerprint described above. Please email us with the spot’s name and location and we will remove or correct it.
• Your rights: depending on where you live you may have rights to access, correct or delete personal data held about you. Email us to ask.

Children

Nappy Hero is for parents and carers. It is not directed at children under 13 (or under 16 where local law sets that age), and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. For significant changes we will make that clear in the app or on this page.

Contact us

Email [email protected].