Privacy Policy for WaterLog

What we collect

There is no account and no sign-up, and we run no server of our own. To learn how the app is used, so we can fix what gets in people's way, the app sends anonymous usage statistics through Google Analytics for Firebase, described below. Your drinks are never sent to us.

Usage statistics

• What is sent: which screens you open and for how long, which features you use and whether they worked (for example "opened from another app", "cancelled", or an error code), the settings you choose, and general information about the device and the app (model, Android version, language, app version, and the country and region derived from the network address). It is tied to a random identifier that Firebase creates for this installation, not to your name, email or phone number. If the app shows ads, Firebase may also read the device's advertising ID, which you can reset or delete in Android Settings, under Privacy, Ads.
• What is never sent: what you drink, how much, or any health data. Where an amount or a size matters, only a range is sent (for example "10-50 pages"), never the exact content.
• Google processes this data for us, under the Firebase privacy and security terms and Google's privacy policy. We use it only to understand and improve WaterLog; we do not sell it and do not share it with anyone else. It is sent over an encrypted connection and kept for at most 14 months.
• You can turn it off at any time in the app's Settings ("Share anonymous usage data"); from then on nothing more is sent.

Your drinks stay on your device

• The drinks you log, your cups, daily goals and settings are stored in the app's private storage, which other apps cannot read.
• They are included in Android's own backup and device-to-device transfer, so they can come back when you restore your phone. That backup is made and encrypted by Android in your Google account, not by us; you can turn it off in Android Settings.
• When you share a streak or progress card, the app makes a picture and hands it to the app you pick in Android's share sheet. Nothing is shared unless you do it.

Health Connect

Health Connect is optional and off until you turn it on in WaterLog's settings. When it is on:

• WaterLog writes each drink you log as a hydration record, and reads hydration records other apps have written, to show them next to your own. It asks only for the hydration permissions (read and write) and reads no other health data.
• Data read from Health Connect is used only to show your water intake inside WaterLog. It is not sent to us or to any third party, not used for advertising, and not given to the ads SDK.
• You can turn this off in WaterLog's settings, or remove WaterLog's access in the Health Connect app, at any time.

WaterLog's use of information received from Health Connect adheres to the Health Connect by Android permissions policy, part of Google Play's Permissions and APIs that Access Sensitive Information policy, including its Limited Use requirements.

Permissions

• Notifications, for the drink reminders you set. Run at startup keeps them on schedule after the phone restarts.
• Health Connect: read and write hydration, only if you turn Health Connect on, as described above.
• Internet access and network state are there for the ads SDK only, which uses them to request ads. The app itself does not send your data over the network.

Advertising

WaterLog shows one banner on the statistics screen and a rewarded video only when you tap to watch one in the wardrobe, to try a locked item for a day. There are no ads while you log a drink, no full-screen ads, and none in your first two days.

Ads are served by Google's Mobile Ads SDK (AdMob). To show and measure ads it may collect your device's advertising ID, general information about the device and the app, an approximate location derived from your IP address, and whether an ad was shown or tapped. Google describes this in its privacy policy and in how Google uses information from apps that use its services. Nothing you log in WaterLog, and nothing from Health Connect, is given to the ads SDK. You can reset or delete your advertising ID at any time in Android Settings, under Privacy, Ads.

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent with Google's consent form before any ad is requested. You can change or withdraw your choice at any time from "Ad choices" in Settings.

In US states with their own privacy laws (for example California, Colorado, Connecticut, Virginia and Utah), Google's consent form lets you opt out of the sale or sharing of your personal information for ads, and of targeted advertising. You can make or change that choice at any time from "Ad choices". After you opt out, the app still shows ads, but Google shows them without using that information for personalization.

Retention and deletion

You can delete any drink in the app at any time, and uninstalling the app removes everything it stored on the phone. Drinks WaterLog wrote to Health Connect stay there until you delete them in Health Connect. The usage statistics are not linked to your identity, so we cannot pick out yours; they are deleted automatically after at most 14 months, and you can stop them at any time from the app's Settings. For any question, write to the contact address above.

Children

WaterLog is not directed at children under 13.

Changes

If a future version collects or shares anything more, this policy will be updated before that version is published, together with the app's Data safety section on Google Play.