Privacy Policy.
Last updated · November 1, 2026
1. Summary
The AquaTrack iOS app keeps your health and intake data on your device. We do not have user accounts. We do not sell or share personal information, and we do not use it for advertising.
Starting with version 1.5.0, the app sends pseudonymous usage analytics to Amplitude, an analytics service, on servers in the European Union: which screens are opened, that a drink was logged (never how much), what happens with the subscription. These events carry a random identifier created for your installation — not your name, email, Apple ID, advertising identifier, IP address or location. Your logs, your daily norm, your weight, age, sex and Apple Health data never leave your device for analytics. See §7.
Separately, this website (aquatrack.club) uses Google Analytics to measure aggregate visitor traffic. Analytics cookies stay off until you consent to them. This concerns website visits only — never your hydration data — and is described in full in §8 (Website analytics).
If you want the short version, that is it. The sections below are the formal version required by the App Store and by privacy laws including the GDPR, UK GDPR, and the California Consumer Privacy Act (CCPA).
2. Scope
This policy applies to:
- the iOS application "AquaTrack" published under bundle identifier
com.posterumsoft.watercounterapp(§§3–7, 9–14), and - the AquaTrack marketing website at aquatrack.club (§8).
It applies to no other product or service.
3. Data we process on your device (app)
AquaTrack works entirely on your iPhone. The following data is created, stored, and processed locally:
- Hydration logs — the amount and type of fluid you log (water, coffee, tea, juice, etc.), with timestamps.
- Profile inputs — sex (biological), age, weight, height, activity level, wake and sleep times, climate, and similar profile fields you supply during onboarding or in Settings.
- Daily goal — calculated locally from your profile (see Scientific Core documentation in the app).
- Achievements, streaks, insights — derived from your logs by the app.
- App preferences — units (ml/oz), theme, notification settings, language.
- Purchases — your Premium subscription status is read from Apple's StoreKit at runtime; we never receive your payment information.
This data is stored in a local database on your device using Apple's SwiftData framework. We do not transmit it, back it up to our servers, or otherwise process it outside your device. If you use the AquaTrack app on Apple Watch, the watch and your iPhone exchange your logs and today's progress directly through Apple's WatchConnectivity; this does not pass through our servers.
4. Apple HealthKit
If you grant AquaTrack permission, the app reads from and writes to Apple HealthKit. Specifically:
- Reads: dietary water, body weight, exercise minutes, workouts, step count, biological sex and date of birth — to suggest your profile during setup, calculate your daily hydration norm and reconcile logs.
- Writes: dietary water and dietary caffeine entries you create in AquaTrack — so they appear in your Apple Health timeline alongside data from other sources.
In accordance with Apple's HealthKit terms (App Review Guideline 5.1.3):
- HealthKit data accessed by AquaTrack is not used for advertising, marketing, or other use-based data mining.
- HealthKit data is never sold or shared with third parties.
- HealthKit data is not stored in iCloud through AquaTrack.
- HealthKit data is used solely to provide hydration-tracking features on this device.
- Hydration and caffeine entries that AquaTrack writes to HealthKit are derived directly from the values you log in the app. We do not synthesize or fabricate values.
You control HealthKit access entirely through iOS Settings → Health → Data Access → AquaTrack. You may revoke individual data permissions or remove AquaTrack's access entirely at any time.
5. In-app purchases
AquaTrack offers Premium subscriptions and a one-time Lifetime purchase through Apple's StoreKit. When you purchase or restore a subscription:
- The transaction is handled entirely by Apple. AquaTrack never sees your name, billing address, email, payment card, or Apple ID.
- AquaTrack reads only the entitlement status (active/inactive, product identifier, renewal flag) from
Transaction.currentEntitlements, which Apple verifies on-device. - We do not maintain a server-side ledger of purchases.
For Apple's handling of your purchase data, see Apple's own privacy policy at apple.com/legal/privacy.
6. Notifications
AquaTrack uses local notifications (scheduled on your device) to remind you to drink water. We do not use remote push notifications. No push token is generated, and no notification metadata is sent to any server.
You can disable notifications at any time in iOS Settings → Notifications → AquaTrack, or by turning off reminders in the app (Settings → Reminders).
7. Usage analytics and other services (app)
7.1 Usage analytics (Amplitude)
Since version 1.5.0 AquaTrack sends usage events to Amplitude, Inc., which processes them on our behalf as a data processor, in its European Union data center. This is the app's own analytics and is separate from the website's Google Analytics (§8): the two are different services with different data, and neither is linked to the other.
What is sent. The names of events from a fixed list (for example: a screen was viewed, a drink was logged, the subscription screen was shown, a purchase started or completed, the subscription status changed, a permission was answered), and with them:
- the subscription plan and status (free, trial, paid, expired) — never prices paid, receipts or Apple transaction identifiers;
- the App Store country (storefront);
- the app version, the device model, the iOS version and the device language;
- a random identifier created when the app is installed, a session number and the order of events within the session;
- the number of days since installation;
- how many questionnaire fields setup could fill from Apple Health — a count from 0 to 4 (sex, age, weight, activity level), never the values and never which fields. This is the only Apple Health-related information that is sent; it tells us whether connecting works (since version 1.5.1).
- where the installation came from: whether it came from one of our Apple Ads campaigns and, if so, that campaign's identifiers (see §7.4, since version 1.5.13).
What is never sent. The amounts you drink, your daily norm, weight, age, sex, pregnancy or breastfeeding status, any Apple Health data (other than the count of filled fields above), the text of your reminders, your IP address or location, your contacts, advertising identifiers (IDFA) or the vendor identifier (IDFV). There are no accounts and no user identifiers beyond the random installation identifier. The app instructs the analytics library not to collect IP address, city, region, country or carrier; the analytics project is configured not to store IP addresses or derive location from them.
A technical request. At launch and at the start of each session the analytics library also requests its own configuration from sr-client-cfg.eu.amplitude.com. That request contains only the project key and, as with any internet connection, your device's IP address in transit; it carries no installation identifier and no events.
Why. To understand where the app gets in the way — for example, at which step of setup people stop — and to improve it. The data is not used for advertising, is not sold, and is not combined with data from other companies (Apple's definition of "tracking" does not apply).
Legal basis (EEA, UK). Our legitimate interest in maintaining and improving the app (Article 6(1)(f) GDPR / UK GDPR). The data is pseudonymous and limited to what that purpose needs.
Retention. Events are kept for no longer than 12 months.
Control. Analytics cannot be switched off inside the app. Deleting the app stops all collection; a new installation receives a new random identifier that is not linked to the old one.
7.2 Remote configuration
At launch the app downloads a small settings file from our website (aquatrack.club/config/v1.json) that tells it how the subscription screen behaves. The request carries no identifiers or cookies; as with any internet connection, the web server sees your device's IP address in transit.
7.3 Apple services
AquaTrack uses Apple's HealthKit (see §4), StoreKit (see §5) and, if you turn on the weather-based norm (Premium), Apple's WeatherKit: with your permission, your approximate location is sent to Apple to get the local temperature. These are governed by Apple's own privacy practices.
AquaTrack contains no advertising networks, crash reporters or other analytics libraries.
This is separate from the AquaTrack website, which uses one analytics service strictly with your consent — see §8.
7.4 Install attribution (Apple Ads)
Since version 1.5.13, once after you install or update AquaTrack, the app asks Apple's AdServices framework whether the download came from an Apple Ads campaign. To do this it gets a token from iOS and sends it to Apple (api-adservices.apple.com). Apple returns only campaign identifiers (campaign, ad group, keyword, ad), the campaign's country and, when available, the date the ad was tapped — no name, email, advertising identifier (IDFA) or location of yours. We send this result to our analytics provider (Amplitude, EU data center, §7.1) with the app's random installation identifier, to see which campaigns bring people who keep using the app. It is not used to show you ads, it is not used to track you across other companies' apps or websites, and it needs no tracking permission. It is kept like the rest of the analytics (§7.1, no longer than 12 months).
8. Website analytics (aquatrack.club)
This section concerns the marketing website aquatrack.club only. It does not concern the iOS app, whose own usage analytics are described in §7.1.
What we use. The website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), to understand aggregate, anonymized visitor traffic.
Consent first. Analytics cookies are disabled by default. They load only after you accept analytics via the consent banner. We run Google Consent Mode v2 — analytics storage stays denied until you consent — and IP anonymization is enabled. We request consent for analytics only; we do not use Google's advertising signals (ad storage, ad personalization), and those stay denied at all times. If you decline, no analytics cookies are set and no identifier for you is created or stored; with Consent Mode active, Google still receives basic cookieless signals about the page request, used only in aggregate and never linked to you.
What is collected (only if you consent). Pages viewed and time on them, approximate location (country/region, derived from your anonymized IP address), device and browser type, the referring source that brought you to the site, and on-site interactions such as clicks on the "Download on the App Store" button. This is collected via Google Analytics cookies (e.g. _ga, _ga_*). We do not collect your name, email, precise location, or any hydration data through the website — the website has no login and no forms that capture personal data.
Why. To measure how many people visit, which content they read, and which pages lead to App Store visits, so we can improve the site. The data is used in aggregate; we do not attempt to identify individual visitors.
Legal basis. Your consent (GDPR Art. 6(1)(a)), given through the banner. You may withdraw it at any time (see "Your control" below).
Processor and international transfers. Google acts as our data processor for website analytics and may process the data on servers located outside the European Economic Area, including in the United States, under Google's own transfer safeguards (EU Standard Contractual Clauses and the EU–US Data Privacy Framework). See Google's privacy policy at policies.google.com/privacy and how Google uses data at policies.google.com/technologies/partner-sites.
Retention. User- and event-level analytics data is retained according to our Google Analytics configuration (up to 14 months), after which it is automatically deleted by Google. Aggregated reporting may persist longer in non-identifying form.
Your control. You can decline analytics in the consent banner. You can withdraw consent at any time using the "Cookie settings" link in the website footer, which reopens the banner and immediately stops analytics; to also delete any analytics cookies already stored, clear this site's data in your browser. You can also block analytics entirely with browser privacy settings or extensions. Declining or withdrawing does not affect your use of the website in any way.
9. Data retention and deletion (app)
App data on your device is controlled entirely by you:
- Delete a single log: swipe to delete on the Today screen or in the History view.
- Delete all AquaTrack data: uninstall the app. This removes the entire local database.
- Reset AquaTrack data while keeping the app: Settings → Reset.
- Delete HealthKit data: iOS Settings → Health → Browse → Water (or Caffeine) → Show All Data.
The app's usage analytics (§7.1) are kept by Amplitude for no longer than 12 months. We keep no copy of your logs, profile or health data on any server. Retention of website analytics data is described separately in §8.
10. Your rights
Under the GDPR, UK GDPR, and CCPA you have the following rights with respect to personal data we process about you:
- Access — to obtain a copy of the personal data we hold about you.
- Rectification — to correct inaccurate or incomplete personal data.
- Erasure ("right to be forgotten") — to have your personal data deleted.
- Restriction — to restrict our processing of your personal data.
- Portability — to receive your personal data in a structured, machine-readable format.
- Objection — to object to our processing of your personal data.
- Right against sale or sharing (CCPA) — we do not sell or share personal information.
For app data: for your logs, profile and health data, we hold no copy — they stay on your device, and you exercise the rights above yourself, directly on your iPhone:
- Use the in-app History view to inspect and export your logs (CSV export — Premium feature).
- Use Settings → Reset to delete data.
- Use iOS Settings → Health for HealthKit data.
For the app's usage analytics (§7.1): write to the address in §14. Because the analytics identifier is random and not linked to you, we can only find your events if you send us the identifier of your installation; we will then delete them or provide a copy. Without it we cannot tell which events are yours.
For website analytics data: you can prevent collection entirely by declining consent, and withdraw or delete it by clearing cookies or using browser controls (see §8). You may also exercise your rights regarding analytics data, including in respect of Google as processor, by contacting us at the address in §14.
If you wish to contact us about any of these rights, you may write to the address in §14.
11. Children's privacy
AquaTrack is intended for users aged 13 and older (16 and older in the European Economic Area, where local law sets a higher age of digital consent). The app is not directed at children below those ages, and the App Store age rating reflects this. We do not knowingly process data from children below those ages.
The app contains a non-medical disclaimer and is not intended to provide medical advice, diagnosis, or treatment, particularly to minors, pregnant users, or users with chronic medical conditions; please consult a qualified medical professional for individual guidance.
12. International users
Your logs, profile and health data stay on your device and are not transferred anywhere. The app's usage analytics (§7.1) are processed in Amplitude's European Union data center. Amplitude, Inc. is a company based in the United States; any access from outside the EU is covered by the safeguards in its data processing terms.
For the website, if you consent to analytics, data may be transferred to and processed by Google outside your country, including in the United States, under Google's transfer safeguards described in §8.
13. Changes to this policy
We may update this policy from time to time. The "Effective date" at the top of this document reflects the most recent revision. Material changes will be reflected in the release notes of the corresponding App Store update, and the in-app "Privacy Policy" link will always point to the most current version.
14. Contact
For any questions about this policy or about AquaTrack's privacy practices, contact:
Pavel Turchenko
Email: [email protected]
You may also reach the same address through the in-app Settings → About → Privacy Policy link.
This document is available in English and Russian. In case of conflict between language versions, the English version governs.