Waterlly — Privacy Policy

Last updated: 31 May 2025 · Effective date: 31 May 2025

Waterlly ("we", "us", "our") is a hydration tracking app published by Daretny. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using Waterlly you agree to the practices described below.

1. Data We Collect

1.1 Account & Profile Information

• Email address (required for sign-in via Supabase Auth)
• Name, age, weight, gender, activity level (entered during onboarding, used to calculate your hydration goal)
• Avatar photo (optional, stored in Supabase Storage if you upload one)
• Country code (manually selected, used for the country leaderboard)

1.2 Health & Fitness Data

• Apple HealthKit data — steps, active calories, active minutes, workouts, sleep, resting heart rate — only when you enable HealthKit integration. Read-only.
• Water and drink logs you record in the app
• Mood logs and wellness scan scores
• Medications and dosage times you enter for reminders

1.3 Photos and Documents (transient)

• Selfie photos taken for the AI Wellness Scan
• Drink photos taken for AI drink recognition
• PDF health reports you upload in the AI chat

These images and PDFs are sent directly to Google Gemini for analysis. We do not store the file bytes on our servers. Only a non-identifying hash and the numeric analysis results are persisted.

1.4 Purchases

• Apple IAP receipt, the product purchased (e.g. waterlly_pro_monthly), and the subscription expiry date.
• We never see your payment card, bank, or billing address — Apple handles all payment processing.

1.5 Product Interaction

• Profile visit events (who viewed whose public leaderboard profile)
• Daily intake totals and timestamps (used for leaderboard scoring)

2. Data We Do NOT Collect

• Precise or coarse location (no GPS, no IP geolocation)
• Contacts / address book
• Phone numbers
• Browsing history outside the app
• Audio / microphone data
• Crash diagnostics or third-party analytics (we currently do not use Firebase Analytics, Sentry, Mixpanel, or similar)
• Advertising identifiers (IDFA) — Waterlly does not display ads at the time of this policy

3. How We Use Your Data

• App functionality — authentication, syncing your logs across devices, scheduling reminders, displaying your progress.
• Product personalisation — adjusting your daily water goal based on HealthKit signals, AI wellness analysis, and medications.
• Account management — verifying your subscription status and granting Pro features.

We do not use your data for advertising and do not sell it to third parties.

4. Third-Party Services

• Supabase (backend, EU region) — stores your profile, water logs, medications, leaderboard scores, wellness scan scores. Supabase Privacy Policy
• Google Gemini (AI provider) — receives your text prompts, selfies, drink photos, and health PDFs for analysis. Google does not retain prompts for training under the Gemini API terms. Google Privacy Policy
• Apple — handles authentication identity, IAP payments, and HealthKit access. Apple Privacy Policy

5. Data Retention

• Account & logs: kept until you delete your account.
• AI image / PDF requests: not stored after the API call returns.
• Wellness scan results: kept under your account; you can delete them from Settings.
• IAP receipts: kept for the legal duration required by Apple (typically 90 days after subscription end).

6. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a machine-readable format
• Withdraw consent for HealthKit at any time (iOS Settings → Privacy → Health → Waterlly)

To exercise these rights, email us at the address below. Account deletion is also available in-app under Settings → Account.

7. Children

Waterlly is intended for users 13 years of age or older. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app and reflected on this page. The "Last updated" date at the top indicates the latest revision.

9. Contact

For any privacy question or request, email: privacy@daretny.com

Postal: Daretny, Istanbul, Türkiye