Privacy Policy

This policy applies when you use the Hydration Bear iOS app, account service, and related support services. Third-party websites and services are governed by their own privacy policies.

Email account information: If you register or sign in with email, our account service processes your email address, salted password hash, verification-code records used for registration or email changes, account identifier, and login session. We never store your password in plain text. Verification codes expire after 10 minutes and login sessions after no more than 30 days.

Sign in with Apple information: If you choose Sign in with Apple, the App receives a stable Apple user identifier and, on the first authorization only, may receive your name and email address, including an Apple private relay address. This information identifies your App account and displays your profile on the current device. It is not sent to our email account server.

Information you provide or create: This includes your nickname, avatar choice, sex, height, weight, age, activity level, daily hydration goal, beverage type, amount, drink time, reminders, and preferences. The App uses this information to estimate a hydration goal, schedule reminders, and generate history and statistics. It is stored locally on your device.

Basic network and security information: When you use the email account service, our server and network infrastructure may process your IP address, request time and type, and basic network information sent by your device to protect the service, limit abuse, and troubleshoot problems. We do not use it for advertising or profiling.

The App processes the live front-camera feed only when you expressly start drink recognition. The face data processed is limited to whether a face is detected; a face bounding rectangle; temporary landmark coordinates for the face contour, eyebrows, eyes, pupils, nose, and lips detected by Apple Vision; and head pitch. The App also calculates the relative hand-to-mouth distance and uses an App-bundled Core ML model, running entirely on the device, to produce drinking and not-drinking confidence scores.

This data is used only to display recognition guidance, determine whether a drinking action was completed, remove restrictions from apps you selected, and record one drink. We do not use face data to identify or authenticate anyone; create a face template, faceprint, embedding, or user profile; infer age, race, emotion, health, or other personal attributes; or support advertising, analytics, or model training.

Each raw camera frame exists only in volatile device memory while that frame is processed and is discarded immediately afterward. Frames are never recorded, photographed, cached, written to Photos or any other persistent storage, or uploaded to a server. Derived bounding rectangles, landmarks, head position, and confidence values are held only in volatile device memory during the current camera-confirmation flow to provide brief tracking continuity and on-screen guidance. They are overwritten by newer results and released when that flow closes or the App terminates. Persistent retention of face data is zero, so there is no stored face data for a user to delete.

No raw frame or derived face data is shared, disclosed, or sent to Apple, Resend, or any other third party. Apple Vision and Core ML run locally on the device and do not send this data to Apple. You can prevent future processing at any time by turning off camera access in iOS Settings > Privacy & Security > Camera. Manual confirmation remains available after camera access is disabled.

After you expressly authorize it, the App uses Apple's Family Controls and Managed Settings frameworks to temporarily shield apps, categories, or websites you select when a hydration reminder is due, and removes the shield after you confirm a drink.

Apple represents your selections using opaque tokens. The App stores these tokens on the current device only to apply the restrictions you configure. We cannot decode them into your complete usage history, and we do not upload your selections, browsing history, or Screen Time data.

You can revoke authorization in system settings. Without authorization or a selection, the App shows only its own hydration reminder and does not shield other apps.

Notification permission is used only to send local hydration reminders at the times you choose. Notification content and schedules are managed by your device, and we do not use this permission to read notifications from other apps. You can choose Never in the App to cancel scheduled reminders or disable notifications at any time in iOS Settings.

Whether or not you sign in, body information, hydration records, reminder settings, and Screen Time selections remain on the current device and are not uploaded to the account service. Guest and account data are separated and remain until you clear them or uninstall the App. Account-scoped local data is also removed when that account is deleted.

Email addresses, password hashes, and account identifiers remain on our account server until you delete the account. Short-lived verification codes and sessions become invalid when they expire or complete their purpose. Necessary security logs are retained only as long as needed for security and troubleshooting, then deleted or de-identified.

We use reasonable safeguards such as access controls, HTTPS, salted password hashing, and session protection. No storage or transmission method can guarantee absolute security, so please protect your credentials and verification codes.

We do not sell or rent personal information and do not include advertising, cross-app tracking, or third-party analytics SDKs. We use service providers only as needed for the functions listed below:

Service providers

We may disclose necessary information when required by law, to protect users or the public, or to defend legal rights. If a merger, acquisition, or asset transfer occurs, we will require the successor to remain bound by this policy and provide any notice required by law.

You can use and change reminder settings without signing in and delete all hydration records for the current identity under Settings > Clear all records. After registering or signing in, you can also view and update your account profile and email.

To delete an account, go to Settings > Profile > Account information, choose Delete account, and confirm deletion of all data. Deleting an email account removes the server account information and the profile, hydration records, and settings on the current device. Local data for an Apple sign-in account is also deleted.

If you cannot access the App or want to access, correct, or delete relevant information, email goudan1030@gmail.com. We may need to verify account ownership to prevent unauthorized requests.

The App is not directed to children under 14. If you are under 18, use it only after a parent or guardian has read and agreed to this policy. If we learn that we processed information from a child under 14 without guardian consent, we will delete it as soon as reasonably possible.

We may update this policy as features or legal requirements change. If a change materially affects your rights, we will provide notice in the App or by another prominent method. The latest update date appears at the top of this page.

Operator: 深海鱼信息科技

Email: goudan1030@gmail.com

Contact us at the address above with questions about this policy or our handling of personal information.