Privacy Policy · Restroom Finder

CloudEx Inc. ("we", "us", or "our") operates the "Restroom Finder" app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using the Service, you are deemed to have agreed to the practices described in this Policy.

1. Our Core Principle

Restroom Finder helps you find the nearest public toilet or drinking water using OpenStreetMap data. It shows the nearest place, its distance, the walking time, and an arrow pointing to it. There is no account and no sign-up, and we do not run any server that receives your data. Your location is used on your device to sort nearby places by distance and point the arrow, and the nearest place is worked out on your device. Your favorites, the places you add, your notes, ratings, and visit records are stored only on your device, and we never view, collect, or receive them. Specifically, we do not have access to any of the following:

Your location, the places you go to, or your movements
Your favorites, the places you add or hide, your notes, ratings, or visit records
What you search for, or the areas you save for offline use

Some features need data from the internet, such as the map, and toilet and water data outside Japan. For these, the app sends only what each feature needs, as described in Section 2 — never your exact location. Apart from that, information leaves your device only through actions you take yourself: sending a note to OpenStreetMap, opening directions in a map app, sharing a place, or exporting a backup or GPX file.

2. Location, the Map, and What the App Sends

Location: Used only while the app is open on screen, to find nearby places, sort them by distance, show where you are on the map, and point the arrow on the guidance screen. The app does not have the background location permission and does not run a foreground service, so it never uses your location in the background. The app does not keep a record of your position over time. If you allow only approximate location, the nearest place, distances, and the arrow may be off by 1 km or more.
Widget and Quick Settings tile: Neither gets your location in the background. The widget shows the nearby places from the last time you looked in the app. Tapping the widget or the tile opens the app, which then gets your location.
Arrow guide: Uses GPS and your device's orientation sensor on the device, and works without an internet connection. It keeps the screen on while it is open.
Toilet and water data in Japan: Data for Japan is bundled with the app, so in Japan (the area the bundled data covers) the app finds nearby places on your device without sending your location or the area you are in. Only when you ask for the latest data (such as "Refresh" on the Nearby screen, or "Update" for an offline area) does it fetch data for the area in the same way as outside Japan (next item).
Toilet and water data outside Japan: The app fetches toilets and drinking water from the public Overpass API server run by Private.coffee (overpass.private.coffee). The world is divided into grid squares of 0.05 degrees (about 5 km), and the app sends only a rectangle made of these squares — around you, around the area shown on the map, around a place you searched for, or an offline area you save. It never sends your exact location. The data received is stored on your device so it can also be shown offline. As with any request to a web server, the server receives your device's IP address.
The map: When a map is shown (the Map tab, a place's details, adding or editing a place, and offline areas), the app downloads the map images (tiles), fonts, and styles for the area shown from OpenFreeMap (tiles.openfreemap.org). As with any online map, these requests show which area is displayed, and the server receives your device's IP address. Map data is cached on your device. When you save an offline area, the map for that area is downloaded.
Place search: Only when you search for a station, address, or place name. The app first asks your device's built-in geocoding service (Geocoder; on many devices provided by Google) with the words you typed. If that finds nothing, it sends the words to Photon by komoot (photon.komoot.io), together with your approximate location rounded to two decimal places (about 1 km) so that nearby results come first, if your location is known. The places you choose are kept on your device as recent searches.
Ask-for-a-toilet card: To show the card in the language of the country you are in, the app works out the country. In Japan this is done on the device without any network access. Elsewhere, it asks your device's geocoding service (Geocoder) for the country, passing only the center of the grid square (about 5 km) you are in, not your exact location.
Notes to OpenStreetMap: When you add a place, correct one, or report one you couldn't use, you can choose to leave a public note on OpenStreetMap so that volunteers can fix the map. The note is sent anonymously (without an account) to the OpenStreetMap API (api.openstreetmap.org), run by the OpenStreetMap Foundation, only after you have read the text and tapped "Send". It contains the location of the place you are reporting and the text shown on screen (the details you chose, any comment you typed, and the app's name). Notes are public, anyone can read them, and they cannot be deleted. Please do not write personal information in them. As with any request to a web server, the server receives your device's IP address. In areas where anonymous notes are not accepted, the OpenStreetMap website opens in your browser at the place's location instead.
Directions: When you tap "Directions", the app passes the destination's coordinates (and whether you walk or drive) to Google Maps, or to another map app you choose. If no map app is installed, Google Maps opens in your browser. What happens next is governed by that app's privacy policy.
When you share or export: "Share" passes a place's name and a link to its location on OpenStreetMap to the app you choose. "Export to GPX" creates a file with the names, locations, and notes of your favorites and the places you added, and passes it to the app you choose. We never receive any of it.
Flushing sound: Generated on your device. The app has no sound files for it and does not use the microphone.

3. Information We Collect

3.1 Information Collected Automatically

Anonymous crash reports: Via Firebase Crashlytics. When the app crashes, we collect the stack trace, device model, OS version, app version, and an identifier created for each installation of the app. To calculate the share of sessions without crashes, records of app sessions (when the app was opened) are also sent. These do not include your name or contact details, your location, what you searched for, or the places and notes you saved.
Purchase information: Your one-time "Premium" purchase is checked on your device with Google Play. Google Play gives us the order records (such as the order number and the date of purchase), which we use only for refunds and similar support. We never receive any payment information such as credit card numbers.
List of our other apps: To show our other apps, the app downloads their names, descriptions, and icons from our content server (static files hosted on Cloudflare Pages). The request contains no personal data from the app. As with any request to a web server, the server receives your device's IP address. So as not to suggest an app you already have, the app checks on your device which of our apps are installed, and uses the country and language settings of your device (from the SIM card, the network, or the language settings) to choose which apps to show; this check stays on your device. Tapping an app in the list opens its page on Google Play, with a tag showing that it was opened from this app (this app's package name and where in the app it was tapped), which Google Play uses for install statistics.
Support emails: When you contact us from the app ("Contact us", or the feedback after rating the app), your email app opens with a draft that includes the app version, Android version, and device model. You decide whether to send it; we receive only what you send.

3.2 Information Stored Only on Your Device

Your places: Favorites, the places you add, the places you hide, the corrections you make to a place, your private notes and ratings, and your visit records (places you opened directions to or marked "Could use it" or "Couldn't use it", with the date and time) are stored in the app's storage on your device.
Offline areas and notes you sent: The areas you save for offline use, and a record of the notes you sent to OpenStreetMap (location, text, and date), are stored on your device.
Downloaded place data and the map: The toilet and water data bundled with the app or downloaded from the Overpass API, and the map data from OpenFreeMap, are stored on your device so they can be shown quickly and offline.
App settings: Units, filters, the map style, your recent searches (place names and their coordinates), the last position of the map, and similar settings are stored on your device.
Backups: You can save a backup — a ZIP file containing your places, offline areas, the record of notes you sent, and your settings (purchase status is not included) — to a location you choose. By default, the app also keeps a daily automatic backup in its own storage on your device (the latest 3). If you choose a folder, the app also saves a backup there every day or every week (keeping the latest 5 it made); if that folder is on a cloud service such as Google Drive, the file is stored with that service under its terms. Backup files are not encrypted.
Android backup: If backup is turned on in your device settings, Android may include your places, offline area list, the record of notes you sent, and your settings (including your recent searches and Premium status) in the backup it saves to your own Google account. The downloaded place data, the map data, the app's automatic backups, and the last position of the map are excluded. When you transfer your data directly to a new phone, Android may also copy the downloaded place data and the saved maps. This is handled by Android; we have no access to it.
When you uninstall: Uninstalling the app or clearing its data deletes everything stored in the app's own storage, including the automatic backups. Backup files you saved to a folder or elsewhere remain until you delete them.

3.3 Information We Explicitly Do Not Collect

Your location, the places you search for or go to, or your movements
Your favorites, the places you add or hide, your notes, ratings, or visit records
Your name, email address, phone number, or contacts (the app has no account or sign-up)
Your device's advertising ID
A history of the websites you visit or the contents of your communications
The contents of your screen or of other apps

3.4 Permissions the App Requests and Their Purposes

Restroom Finder uses the following OS permissions only for the stated purposes:

Location (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION) — Finds nearby places, sorts them by distance, shows where you are on the map, and points the arrow. Used only while the app is open on screen; you can also allow approximate location only. The app does not request background location.
Internet (INTERNET) and network status (ACCESS_NETWORK_STATE) — Used only for the map, toilet and water data outside Japan (and in Japan when you ask for the latest data), place search, notes you choose to send to OpenStreetMap, anonymous crash reports, Google Play purchases, in-app reviews and in-app updates, downloading the list of our other apps, and showing this privacy policy in the app. Finding the nearest place in Japan and the arrow guide do not require an internet connection. The network status is checked so that the map reloads and crash reports are sent once the connection comes back.
Google Play billing (com.android.vending.BILLING) — Used to buy Premium and to check the purchase.

The orientation sensor used by the arrow guide needs no permission. The app does not request the camera, microphone, contacts, notifications, or background location permissions.

4. How We Use Information

The limited information we collect is used only for the following purposes:

Operating and maintaining the Service
Verifying your Premium purchase and handling refunds
Diagnosing and fixing crashes
Responding to support inquiries
Complying with applicable laws

5. Third-Party Services

Restroom Finder uses the following third-party services. Each service has its own privacy policy.

Overpass API (run by Private.coffee) — toilet and water data from OpenStreetMap outside Japan; receives only a rectangle of grid squares
OpenFreeMap — map images (tiles); receives which area of the map is shown
Photon (komoot) — place search when your device's geocoding service finds nothing; receives the words you search for and your location rounded to about 1 km
Your device's geocoding service (Geocoder) (on many devices, Google LLC) — place search, and the country for the ask-for-a-toilet card outside Japan
OpenStreetMap API (OpenStreetMap Foundation) — only the notes you choose to send; they are published
Firebase Crashlytics (Google LLC) — anonymous crash diagnostic data
Google Play Billing (Google LLC) — the one-time Premium purchase; payment is completed on Google Play
Google Play In-App Review and In-App Updates (Google LLC) — let you rate the app and install updates without leaving it; handled by Google Play
Cloudflare Pages (Cloudflare, Inc.) — hosts the static list of our other apps

The toilet and water data, and the map data, are © OpenStreetMap contributors and available under the Open Database License (ODbL). Restroom Finder does not use analytics tools such as Google Analytics, does not use your device's advertising ID, and does not share your data with advertising networks.

6. Data Retention

Crash reports: retained for 90 days, then deleted.
Support emails: retained for 12 months after the last reply, then deleted (except where legally required).
Notes you send to OpenStreetMap: published on OpenStreetMap and remain public. Neither we nor you can delete them.
Your places, offline areas, settings, and backups in the app's storage on your device: kept until you delete them, uninstall the app, or clear the app's data. Downloaded place data that has not been refreshed for 120 days is deleted automatically, except inside the offline areas you saved.

7. International Data Transfers

We are based in Japan. The infrastructure used for crash diagnostics, hosting the list of our other apps, the map, the toilet and water data, place search, and OpenStreetMap notes may be located in various countries. When you use the Service, the minimal information described above may be processed outside your country of residence under standard contractual safeguards.

8. Your Rights

Depending on where you reside (e.g., the EEA, UK, California, Japan), you may have the right to request access to, correction of, or deletion of the limited information we hold. You can:

Delete favorites, places you added, notes, visit records, offline areas, and recent searches in the app at any time, and clear the downloaded place data with "Clear downloaded places" in the settings
Uninstall the app or clear its data to erase everything the app stores on your device
Withdraw the location permission in your device settings at any time, or allow only approximate location
Contact us at the address below to make a request regarding the information we hold

Notes you sent to OpenStreetMap are handled by the OpenStreetMap Foundation under its own privacy policy.

9. Children's Privacy

Restroom Finder is not directed to children under the age of 13 (or the minimum age applicable in your region). If we inadvertently collect information from such a child, we will delete it promptly upon being contacted.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always published at this URL together with its effective date. We will also notify you within the app of significant changes as appropriate.

11. Contact

For questions about privacy, data requests, or to report concerns, please email us at .

CloudEx Inc. (Japan)

Effective Date: November 10, 2026