Privacy Policy

The short version

• Your drink log, favourites and settings (weight, activity, daily goal, reminder times) stay on your phone. We have no copy of them.
• There is no account and no cloud sync.
• We use Google Firebase and PostHog for usage statistics, Firebase Crashlytics for crash reports and RevenueCat to manage purchases. None of them receives your weight or anything you type.
• Reminders are local notifications that your phone schedules itself.
• No ads, no advertising ID, no selling of data.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is the publisher of the app in the store you downloaded it from:

App Store (iPhone, iPad): Digital Snacks OG, Servitengasse 10/14, 1090 Vienna, Austria

Google Play (Android): Josef Wilhelm, Wolfgang-Schmälzl-Gasse 12/20, 1020 Vienna, Austria

Email for all questions: me@josefwilhelm.com

2. Data that stays on your device

The following is stored only in the app's local storage on your phone and is never uploaded to us or to the services in section 3:

• your drink log with date and time
• your favourite drinks
• your settings: weight, activity level, daily goal and units
• your reminder settings (times, interval and days)

Reminders. Notifications are local. Your phone schedules and shows them; no server is involved.

Export and import. You can export your data as a file and import it again. The file is saved or shared where you choose, for example the Files app or a cloud drive, and is then under your control. We never receive it.

Deleting. Uninstalling the app deletes all of this data. Phone backups (iCloud, Google) may contain a copy, depending on your phone's settings.

3. Services that receive data

Firebase Analytics (Google Ireland Ltd.): usage events such as "onboarding step viewed", "paywall viewed", "purchase completed", "reminder saved" or "drink logged". For drinks, the event only carries a rough count ("1", "2", "3-5", "6-10", "11-30" or "31+"), never what you drank, how much or when. The events also carry whether you have Pro and whether notifications are on. Firebase adds an app instance ID, device model, operating system, country and language, and the screens you visit. Purpose: seeing where people get stuck and which version of a screen works better. The advertising ID is not collected, and the app does not ask for tracking permission.

PostHog (PostHog Inc., EU cloud, eu.i.posthog.com): the same usage events, with a random anonymous ID that PostHog creates on your device. We do not link it to a name or an email address. Session recordings, screen tracking and surveys are switched off. Purpose: the same as for Firebase Analytics, to understand the onboarding and purchase flow.

Firebase Crashlytics (Google Ireland Ltd.): crash reports with the error trace, device model, operating system and app version. Purpose: finding and fixing crashes.

RevenueCat (RevenueCat, Inc., USA): a random app user ID and the purchase receipts from Apple or Google (product, price, country, dates), plus the anonymous PostHog ID so that we can match purchases with the onboarding flow. Purpose: knowing whether you have Water Pro and restoring purchases.

Apple and Google process your payment under their own privacy policies. We never see your name or payment details.

None of these services receives your weight, your daily goal, the content of your drink log or any text you type.

4. Legal bases

• Purchase check and restoring purchases: Art. 6(1)(b) GDPR (providing what you bought).
• Crash reports: Art. 6(1)(f) GDPR (our interest in an app that works).
• Usage statistics: Art. 6(1)(f) GDPR (our interest in improving the app).
• Purchase records: Art. 6(1)(b) and (c) GDPR. Kept as long as tax law requires (in Austria 7 years).

We do not make automated decisions about you with legal or similarly significant effects.

5. Transfers outside the EU

Google and RevenueCat may process data in the USA. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR). PostHog data is stored in the EU.

6. Your rights

You have the right to access, correction, deletion, restriction, data portability and objection, and to withdraw consent at any time. Write to me@josefwilhelm.com.

We only know random IDs, not who you are. To find your purchase data, please send the order number from your Apple or Google receipt. Without it we usually cannot link any data to you (Art. 11 GDPR). Everything in your drink log you can delete yourself by deleting the app. See also Delete your data.

You can also complain to a data protection authority, in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

7. Children and changes

The app is not directed at children under 16.

If the app starts using data in a new way, we update this page and the date at the top. See also the Terms of Use.