Privacy Notice

Last updated: May 11, 2026

1. Who we are

GetHydrately, trading as "GetHydrately" ("GetHydrately", "we", "us"), is the controller of personal data collected through the GetHydrately app and website (the "Service"). This notice explains what we collect, why, and your rights.

2. Personal data we collect

Account data — your email address, display name, avatar, and authentication identifiers (e.g. Google sign-in ID).
Usage data — hydration entries, goals, streaks, preferences (drink type, theme, reminder interval) and other inputs you provide.
Technical data — IP address, device and browser information, and basic telemetry needed to operate and secure the Service.
Support data — messages and information you send us when contacting support.
Purchase data — confirmation that you completed a purchase or hold a subscription, and limited identifiers (Lemon Squeezy customer/order/subscription IDs). Full card and billing details are processed by Lemon Squeezy and never reach us.

3. Why we use it and legal basis

To provide the Service (create your account, sync your tracking data, deliver Pro features) — performance of our contract with you.
To process payments — performance of our contract; Lemon Squeezy separately processes payment data as Merchant of Record.
To secure the Service and prevent fraud — legitimate interests.
To improve the Service (aggregate analytics, debugging) — legitimate interests.
To send service messages (e.g. account or billing notices) — performance of our contract or legitimate interests.
To send marketing or promotional emails, where applicable — your consent (you can withdraw at any time).
To comply with legal obligations (e.g. tax, accounting, lawful requests) — legal obligation.

4. Who we share it with

Lemon Squeezy — our reseller and Merchant of Record. Lemon Squeezy handles checkout, payments, tax compliance, invoicing, subscription management, and refunds. See Lemon Squeezy's privacy policy.
Hosting and infrastructure providers — to run our database, authentication, and backend services.
Service providers — for analytics, error monitoring, customer support, and email delivery, under appropriate contracts.
Professional advisers — legal, accounting, and similar advisers, where necessary.
Authorities — where required by law, regulation, or legal process.

We do not sell your personal data.

5. International transfers

Some of our service providers may be located outside your country. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes described above, to comply with legal obligations, or to resolve disputes. Account and usage data are deleted or anonymised within a reasonable period after you close your account. Billing records may be retained longer where law requires.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us via the in-app support channel. We will respond within the time required by applicable law.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and database row-level security, to protect personal data. No system is completely secure, but we work to keep risks low.

9. Cookies

We use only essential cookies and similar storage required to operate the Service (e.g. sign-in sessions, your local preferences). If we add analytics or marketing cookies in the future, we will update this notice and seek consent where required.

10. Changes

We may update this notice. Material changes will be notified through the Service.

11. Contact

Questions or requests about your personal data? Contact us through the in-app support channel.