Wotah Privacy Policy

How Wotah handles your data — in plain language.

Last updated: 14 June 2026

1. Who we are

Wotah ("the app", "we", "us") is a hydration-reminder app for iOS and Android, built by an independent developer. For any privacy question or request, contact eon704@gmail.com. We are the data controller for the limited personal data described below.

2. Data stored only on your device

By default, everything Wotah records about your hydration stays on your phone and is never transmitted to us. This includes:

• Your glasses logged, daily goal, current streak, and daily history
• Reminder settings (how many reminders, active hours)
• Streak freezes and progress toward earning one
• Your chosen duck buddy and any characters you've unlocked or purchased
• App preferences (language, theme, onboarding and widget state)

This data is held in your device's local storage and, on iOS, in a private app group so the home-screen widget can read it. It is removed when you delete the app or clear its data. We have no access to it.

3. Crash reporting (Sentry)

To keep the app stable, Wotah uses Sentry to report crashes and errors. This runs for all users, including those who never create an account. We have deliberately minimised what Sentry collects:

• Sending of personal data is turned off (no "default PII").
• We do not attach your name, email, or a user identifier to crash reports.
• No screenshots, no session replay, and no user-interaction tracking.

A crash report consists of technical diagnostics — the error, a stack trace, and general device/OS information needed to reproduce and fix the bug. Sentry acts as our processor and may store this data on infrastructure in the United States. See Sentry's privacy policy.

4. Social Flock (optional account)

Social Flock lets you connect with friends to nudge and cheer each other on. It is strictly opt-in. If you never join a flock, the app makes no backend connections at all (other than crash reporting above) and none of the data in this section is collected.

4.1 Signing in

Joining requires signing in with Apple or Google. Through that sign-in we receive your email address and (on first sign-in) your name from the provider. Your email and account identifier are held by Firebase Authentication (Google) to manage your login. We use your name only to suggest a display name; your email address is not stored in your public profile.

4.2 What we store in the cloud

When you use Social Flock, the following is stored on Google Firebase (Firestore database and Cloud Functions, hosted in the EU, region europe-west1):

Nudges use preset tones (e.g. gentle, cheeky) — Wotah does not send or store free-text messages between friends. Your hydration history stays on your device; only the small snapshot above is shared with your connected friends.

4.3 Push notifications

Nudges and cheers are delivered through Firebase Cloud Messaging (Google). Your everyday hydration reminders are scheduled locally on your device and do not involve our servers.

5. In-app purchases

Buddy characters, bundles, and streak-freeze packs are sold through the Apple App Store and Google Play. Those purchases are processed entirely by Apple or Google under their own privacy policies. Wotah does not receive or store your payment details or store receipts; unlocked items are recorded locally on your device.

6. Apple Health (iOS, optional)

On iOS, if you grant permission, Wotah writes your logged water intake to Apple Health as a "water" entry. This access is write-only — Wotah does not read any data from Apple Health. You control this permission in iOS Settings, and Apple Health data never leaves your device through Wotah. There is no Google Fit or Health Connect integration on Android.

7. Other services

• Google Fonts: the app may load its display font from Google's font service at runtime, which can involve a network request to Google.
• Invite links: sharing a flock invite uses your device's share sheet and creates a link on wotah.app; we don't see who you share it with.
• App reviews & links: prompts to rate the app and links we open (like this policy) are handled by the App Store / Play Store and your browser.

8. Legal bases for processing (GDPR/UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent (Art. 6(1)(a), and Art. 9(2)(a) for any health-related reading of hydration data): joining Social Flock. You give this consent by signing in and opting in, and you can withdraw it at any time by leaving the flock or deleting your account — withdrawal does not affect processing already carried out.
• Legitimate interests (Art. 6(1)(f)): crash and error reporting to keep the app stable and secure. We've weighed this against your interests and minimised it heavily — no personal data is attached, no identifiers, no screenshots (see §3) — so the impact on you is minimal.
• Performance of the service you request: delivering nudges, cheers, and the connections you set up within Social Flock.

On-device-only data (§2) is not processed by us and needs no basis from us.

9. What we do not do

• No advertising and no ad networks.
• No third-party analytics or behavioural tracking SDKs.
• No selling or renting of personal data to anyone.
• No profiling or automated decision-making with legal effects.

10. Sharing, processors & international transfers

We don't sell your data. Limited data is processed on our behalf by the providers that make the app work:

• Google / Firebase — sign-in, the Social Flock database, cloud functions, and push delivery. This data is stored in the EU (region europe-west1), so no international transfer is involved for the Social Flock store itself.
• Apple & Google — sign-in, in-app purchases, and (Apple) Health.
• Sentry — crash diagnostics, processed in the United States.

Transfers to the United States (Sentry, and any US processing by Apple/Google) are covered by the EU–US Data Privacy Framework where the recipient is certified, and/or by the European Commission's Standard Contractual Clauses as an additional safeguard.

11. How long we keep data

• On-device data remains until you delete the app or clear its data.
• Your Social Flock profile remains while your account exists. If you delete your account it is removed as described below. We also automatically delete profiles that have been inactive for 12 months.
• Nudge and cheer records are automatically deleted after about 90 days (sooner if you delete your account or remove the friend).
• Crash reports are retained according to Sentry's standard retention period and contain no identifiers we attach.

Leaving vs. deleting. Leaving Social Flock (signing out) stops syncing and new sharing on your device, but your profile, your last-shared hydration snapshot, and your friend connections remain on our servers and stay visible to the friends you added — so you can return later — until you delete your account or the 12-month inactivity cleanup removes it. To remove this data immediately, use Delete account.

12. Deleting your account & your rights

You can delete your Social Flock account at any time, in the app under Settings → Delete account. This permanently removes your cloud profile, your shared hydration snapshot, your friend connections, your nudge/cheer records, and your notification token. Full instructions, including how to request deletion by email if you no longer have the app, are on our account deletion page.

Depending on where you live, you have rights to access your data, correct it, receive a copy / port it, delete it, and to object to or restrict its processing (for example under the GDPR, UK GDPR, or CCPA). Given how little we hold, we handle access and portability requests by email — write to eon704@gmail.com and we'll respond within the statutory time limit (one month under the GDPR). You also have the right to complain to your local data protection authority.

13. Children

Wotah is a general-audience app and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

14. Changes to this policy

If we update this policy, we'll revise the "Last updated" date above and, for significant changes, surface a notice in the app where appropriate. Continued use after an update means you accept the revised policy.

15. Contact

Questions, requests, or concerns: eon704@gmail.com.