Privacy Policy

1Who We Are

Water Panda ("we", "our", "us") is an independent mobile application for iOS and Android. This Privacy Policy explains how we handle information when you use our app. By using Water Panda, you agree to the practices described here.

If you have questions, contact us at: privacy@waterpanda.app

2Information We Collect

Information you provide directly:

Body weight and activity level (used only to calculate your hydration goal)
Wake and sleep times (used only to schedule reminders)
Water intake logs and beverage type
If you create an account: your email address and display name
Optional: a display name or nickname for your panda companion

Information collected automatically:

A randomly generated local device ID (not linked to your identity) used to sync your data if you use the app on multiple devices
App usage patterns (streak length, goal completion) stored locally on your device

      No account, no collection. If you use Water Panda without creating an account, all your hydration data is stored exclusively on your device using local SQLite storage. Nothing is uploaded to our servers.
    

3Advertising — Google AdMob

Water Panda is free and supported by ads provided by Google AdMob. To show relevant ads, Google may collect and use certain device information.

What AdMob may collect:

Advertising identifier (IDFA on iOS, GAID on Android)
IP address and approximate location
Device model, OS version, and language
Ad interaction data (impressions, clicks)

On iOS 14.5 and later, we ask for your permission before allowing AdMob to access your advertising identifier via the App Tracking Transparency (ATT) dialog. You can say no — the app works fully either way, and you will still see ads (just not personalised ones).

You can opt out of personalised ads at any time:

iOS: Settings → Privacy & Security → Tracking → Water Panda
Android: Settings → Google → Ads → Delete advertising ID
Google's privacy policy: policies.google.com/privacy

4Account & Cloud Sync (Optional)

If you choose to create an account, your hydration logs, goals, and streak data are synced to our secure cloud backend powered by Supabase (hosted on AWS in the United States).

We store your email, hashed password, and hydration data
Data is encrypted in transit (TLS) and at rest (AES-256)
You can delete your account and all associated data at any time from the Profile screen
We never share your account data with third parties for marketing

Supabase privacy policy: supabase.com/privacy

5Notifications & Reminders

Water Panda can send you local push notifications to remind you to drink water. These reminders are scheduled entirely on your device — no notification data is sent to our servers.

We ask for notification permission before sending any reminders
You can disable or customise reminders in the app's Settings screen
You can revoke notification permission at any time in your device Settings

6How We Share Your Information

We do not sell your personal data. We share information only in these limited cases:

Google AdMob — for showing ads (see section 3)
Supabase — for cloud sync, only if you create an account (see section 4)
Legal requirements — if required by law, court order, or to protect our rights

We have no advertising partners, data brokers, or analytics SDKs beyond AdMob.

7Data Retention & Deletion

Local-only users: All data is on your device. Deleting the app deletes all data.
Account users: Your data is retained until you delete your account. You can do this in Profile → Delete Account. We will permanently delete all your data within 30 days.
AdMob data: Managed by Google per their retention policy. You can reset your advertising ID at any time.

8Children's Privacy

Water Panda is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

9Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the data we hold about you
Correction: Ask us to correct inaccurate data
Deletion: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Objection: Object to processing of your data for advertising
Withdraw consent: Withdraw tracking consent at any time via device Settings

To exercise any of these rights, email us at privacy@waterpanda.app. We will respond within 30 days.

10International Data Transfers

If you create an account, your data is stored on Supabase servers in the United States. By creating an account, you consent to the transfer of your data to the US. We rely on Standard Contractual Clauses for transfers from the European Economic Area.

Local-only users have no data transferred internationally.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notice or by updating the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.