WaterID app privacy

Your water, your device

WaterID saves drink entries, your chosen goal and reminder settings in local app storage. Chosen serving sizes, saved fountain IDs, browsing city, daily level unlocks, completed stages, personal bests, rescue rewards and a paused local game are also stored here. Earned levels and stars stay until you delete the app’s data. Entries older than 90 days are removed when the app runs.

Use Settings → Delete drink history, game progress and plan to erase these entries and cancel reminders. Hydration does not require an account. History stays local unless you explicitly save a private cloud backup. Backups, history export and sharing send only what you choose. Device backup can include this local data; player sign-in is excluded from portable WaterID backups.

Requesting city coverage

Choosing Send city request sends only the city, optional region and country you enter to WaterID’s Supabase service in the United States, linked to your private account identifier. A guest account is created if you don’t have one. No precise location, drink history or email is included. The service receives ordinary network information such as your IP address. Your city, region and country preference is stored privately against your app account. WaterID’s authorized administrator can review city-demand summaries to plan coverage; individual requests are not publicly listed.

Nearby → Fountain options → Request a city lets you see, update or withdraw your request. There is one saved city per account. Requests stay until withdrawn or the account is deleted. Requesting a city does not subscribe you to messages or guarantee a launch date.

Optional Apple Health connection

WaterID reads completed workouts only after you choose Connect Apple Health and allow access. Workout data is used only on this iPhone to decide whether to offer a local water check-in. It is not sent to Google, Supabase, analytics, or leaderboards, and is not included in WaterID exports. No workout records are stored in WaterID.

WaterID stores whether you enabled this feature, the connection date and the last workout-check-in date to avoid duplicates. Notifications are limited to one per day between 8 AM and 9 PM, for a workout completed within the previous two hours. iOS and Health syncing determine delivery timing. WaterID does not read steps, heart rate, calories or routes and does not write data to Health. Turn this feature off in Settings → Apple Health, and revoke access in Apple Health at any time.

Optional player account

Joining the leaderboard creates a guest player account on WaterID’s separate Supabase service, hosted in the United States. A generated nickname, account identifier, friend requests, friendships, blocks, gift receipts, game tickets, game moves, scores and report details are processed there. Supabase also processes network and security data needed to operate the service. Your nickname and best weekly score are public; private reports are visible to the service owner.

The sign-in token is stored in this iPhone’s Keychain. Guest accounts have no recovery until you connect Sign in with Apple in Settings. Apple identity linking preserves the existing player ID. Apple tokens are verified by Supabase; native sign-in requests an email address, which can be Apple’s private relay address, for account recovery. It is not shown to friends or advertisers. Open Play → Rankings to delete the player account and its friendships, gifts and stored scores. Your private drink history and local game progress stay on this iPhone.

Public leaderboards never receive hydration entries, goals or your location. Optional arrival check-ins refer to existing public-source locations. Fountain suggestions are handled separately as described below.

Friends, sips & optional sharing

Friend settings, display names, avatar choices, a private inbox and device notification tokens are stored by WaterID’s Supabase service in the United States. Apple receives the device token and a short friend alert to deliver push notifications. These messages contain no hydration amounts or Health data. Your inbox shows the last 30 days. Older updates are removed when you next make a social change. Device tokens are not used after 90 days without refresh.

Habit sharing is off by default and chosen separately for each accepted friend. If enabled, WaterID sends only whether you logged today, your count of days logged this week and the summary date. Selected friends can view the current summary. No individual drink records, amounts, goals or Apple Health data are uploaded. Turn sharing off, remove or block a friend to revoke access. Stop sharing with everyone deletes the server summary.

Send a Sip uses a preset friendly message, limited to one per friend every 24 hours and your recipient’s daily limit. Allow or mute sips, set quiet hours, block someone or turn social notifications off in Friend settings. Quiet hours suppress alerts without hiding inbox updates. Deleting your player account removes these records.

Suggesting a fountain

You can submit a chosen map pin, fountain and facility information, and an optional photograph. Submissions are stored with your private app account identifier in WaterID’s Supabase service in the United States. Photos are resized and re-encoded without their original metadata before upload.

Only you, as the submitting user, and the authorized WaterID reviewer can access the private submission and photo. Avoid including faces, personal information, or locations you do not have permission to share.

The reviewer may correct and approve the fountain’s location and facility details for the public map. Your account identifier and photograph are not published on the public map.

You can see review status under Nearby → My suggestions and withdraw an unreviewed submission. Withdrawal does not mean that its photograph is immediately deleted.

Account deletion removes private photos and unpublished submissions. Approved public fountain records may remain without their association to the deleted account.

Finding a fountain

WaterID asks for location permission when you tap Use my location. With permission already granted, opening Nearby can refresh your location. After choosing Walk here, a fresh foreground location can offer a skippable arrival check-in. Your current device location is used for nearby searches and directions. WaterID calculates distances on your iPhone and does not persist your current device coordinates. When you submit a fountain suggestion, the chosen map pin coordinates are sent to WaterID’s backend. Location and Apple Health information are not provided to advertising code.

Apple Maps supplies map imagery, place search, country lookup and directions. Those services use their own network connections and privacy practices. Choosing Update Canadian fountain data downloads the public catalog from WaterID’s Supabase storage and saves it for offline use. This sends no search terms or coordinates; the service receives normal connection information such as your IP address. Denying location permission still allows browsing and search.

Widget, check-ins & recovery

The widget shares today's total, goal, usual serving and pending widget entries with WaterID through its private on-device app group. Entry IDs prevent duplicate imports. No widget history is sent to advertisers.

After you intentionally start walking to a public-source fountain and return to Nearby, an accurate foreground location near that point can offer one optional check-in. WaterID stores only a temporary fountain ID and visit time for up to six hours, not your coordinates. No background location is used. GPS proximity does not prove arrival.

If you submit, WaterID stores a guest account ID, the fountain ID, time and your found/access/water-running answers in Supabase. Reports await review; approved observations are shown with a date, without your identity. They never overwrite the original source data or certify water safety. Conflicting observations go to review.

Friend challenges, invitations and verified scores are private to the two participants. Sharing a challenge or recap is always your choice. Challenge links require WaterID to be installed and do not grant another person access to the private challenge.

Optional private backups contain your retained drink history, plan, favourites, game progress and styles, stored in your WaterID Supabase account in the United States. They are separate from public scores and optional friend summaries. Apple Health workout data and sign-in tokens are excluded. Backups are manual and can be deleted in Account recovery or with your community account. Restoring asks before replacing device data.

Google advertising services

Google Mobile Ads and Google's consent service connect to Google and may process device identifiers, IP-derived location, ad interactions and diagnostics. These services are separate from your private hydration history.

This version requests non-personalized ads and disables Google's publisher first-party ID. It does not ask for App Tracking Transparency permission or supply a custom user identifier. Non-personalized ads can still involve data processing.

When Google requires a privacy choice, its form appears before ads can load. You can revisit available choices in Settings. If the privacy check fails, ads stay paused and the rest of the app keeps working. Rewarded ads are optional and grant only the named local benefit after completion. Ad rewards cannot be sent to friends; gifted drops use a separate server ledger. Stage retries can show an ad break after five losses, at least three minutes apart. If no ad is available, play continues. The ad provider controls when its close button appears.

Reminders

Two reminders a day are scheduled locally after you allow them during setup or in Settings. Optional app-opening reminders are personal automations you create in Apple Shortcuts; WaterID does not observe which apps you use. Turn them off in WaterID Settings, or change notification and location permissions in iPhone Settings.

Service providers

For additional information, see Supabase privacy, Apple Maps privacy and Google advertising privacy. Requests to these providers can include ordinary connection and security information. Provider retention may differ from WaterID’s app-data retention.

Contact and data requests

WaterID is operated by Omar Kandel. Contact info@osarenterprises.com for app support, privacy questions, access, correction or deletion requests. Do not send passwords, sign-in tokens or health records. To protect your account, we may need to verify that a request comes from its owner.

You can manage local history and backups in app Settings, delete the community account from Play → Rankings, and withdraw city requests from Nearby → Fountain options → Request a city. Removing the app alone does not delete server-held community data.

Changes

We will update this page when app data practices change and revise the date above. Material changes requiring a new choice will be explained in the app.