What data we process
Hydration records, daily goals, bottle model, cap state, studio lighting, text logo, and bottle pose stay on the current device to restore app state. HydroLog does not upload hydration records.
When you use Google login, HydroLog processes the account identifier, name, email, and avatar supplied by Google, and stores login sessions and membership state in a separate service.
Login, membership, and service providers
Google provides account login; Google Play (Android) processes subscription transactions; for the published iOS 1.2.0, the iOS release has no in-app purchase and no membership subscription; RevenueCat reads plans, purchases, restores, and subscription verification; Cloudflare Worker and D1 store account sessions and rebuildable membership snapshots. HydroLog does not receive or store full payment card details.
The current service does not include advertising, behavioral analytics, or crash statistics. The membership backend handles account and subscription service; it does not mean the local hydration record has been uploaded or can be restored across devices.
Cloudflare also processes request IP addresses and account UUIDs to prevent abuse and rate-limit requests. The backend passes the raw IP and account UUID as separate platform rate-limit keys and does not create an IP counter table in its D1 database. The 60-second counting window is not a platform deletion period. Cloudflare infrastructure and security processing follow its policies.
Deletion and controls
Local hydration records stay on your device and can be removed by uninstalling the app or clearing app data. Signing out, clearing app data, or uninstalling does not cancel a Google Play subscription and is not the same as deleting the server account; subscriptions are managed in Google Play.
To request deletion of your HydroLog account and associated server account, identity mapping, sessions, and membership snapshot, submit a request through the developer contact on the store listing (Google Play or the App Store) and state “Delete HydroLog account.” The website does not provide a self-service deletion API. We process requests within 30 days; the minimum transaction or audit records required by law may be retained for the statutory period.
Health note
HydroLog does not provide medical diagnosis, treatment, or personalized medical advice. Consult a professional about health questions.
Contact
For privacy questions, use the developer contact shown on the store listing (Google Play or the App Store). The website does not publish internal or alpha test routes.
Related: Delete account, Support, and Local data and privacy.
1.2.1 membership candidate (not yet released)
This section applies only to the unreleased 1.2.1 membership candidate; the published iOS 1.2.0 has no in-app purchases.
In an iOS version that offers Apple sign-in, Apple supplies the login identity and the name and email shared at first authorization, including a private relay email. App Store handles subscription transactions, RevenueCat verifies membership, and Cloudflare Worker and D1 store this app's account, sessions and membership snapshots. The backend encrypts an Apple authorization token to support revocation. Apple and Google accounts use separate identities; we do not automatically merge them by email or share membership between them. Hydration records remain on the device.
Signed-in Apple users can choose Delete account in Account and membership and confirm the same identity with Apple. On success, we revoke Apple authorization and remove this app's server account, identity mapping, sessions and membership snapshot. If interrupted, retry with the original account. A limited deletion confirmation record supports retries; completed, expired confirmations are removed during routine cleanup. Account deletion leaves local hydration records on the device and does not cancel an App Store subscription. Cancel separately through Apple subscription management. Apple and subscription service providers handle transaction records under their own policies.