Privacy policy

Drippy is local-first. Skip sign-in and hydration logs, streaks, goals, badges, and your mascot name stay on this phone. If you choose Sign in with Apple or Google, we sync that same hydration history to your Drippy account so it follows you to other devices. We do not read your contacts or send email marketing.

Tracking, streaks, badges, Gentle or Persistent reminders, and Home Screen widgets with one-tap logging are free. Drippy Pro is an optional subscription for Apple Watch, Wear OS, and full-screen Alarm Mode on iPhone and Android.

On this phone vs in the cloud

Without an account, your hydration history stays on the device. Product analytics and crash reports can still be sent to the providers described below. With Apple or Google sign-in, we store your account and synced hydration data — profile, logs, day totals, and badges — so you can use another phone.

Who processes data

• Supabase holds the account and synced hydration data, only if you sign in. It also holds the waitlist if you join it on this website.
• RevenueCat holds whether Drippy Pro is active. Apple and Google also keep their own purchase records.
• PostHog receives product analytics from the app: a pseudonymous account ID formed from the provider name and the subject ID Apple or Google gives us, without your name or email, usage events such as screens viewed and buttons tapped, and feature flags. On the phone, PostHog may record a session replay with text, text inputs, and images masked. Earlier versions of the app also sent the email address from your Apple or Google sign-in to PostHog. Current versions no longer do, and we are removing those addresses from PostHog.
• Sentry receives crash reports, tagged with the same pseudonymous account ID, and a short replay only when an error is captured. Crash reports do not include your name or email.
• Linear receives feedback you send from Settings: your message, optional reply email, app version, and device platform, so our team can review it. We do not attach hydration history.
• Vercel hosts this website and its server functions. Like any web host, it processes your IP address and browser details to deliver pages and keeps short-lived request logs.

We do not sell this data or use it to track you across other companies’ apps.

This website

On getdrippy.app, PostHog records page views, how long a page stays open, and the links and buttons you tap, such as the waitlist button or app store links. It does not record what you type or replay your screen. Until you choose OK in the analytics banner, it uses no cookies or stored identifiers; No thanks turns website analytics off.

Waitlist

If you join the waitlist, we store your email address, the phone you pick (if any), your browser language, and the time you signed up, in Supabase. We use it only to tell you when Drippy is available to you. Email hello@jamaklab.com to be removed at any time. We delete the list once launch invitations have gone out.

To stop abuse, our servers count waitlist sign-ups and feedback per connection using a keyed hash of your IP address (or of its /64 network for IPv6). The raw address is not stored, and counters older than two days are removed when the quota service next processes a request.

Analytics

The app does not yet have an analytics toggle. Email hello@jamaklab.com and we will stop associating analytics with your account. We are adding an in-app toggle.

Notifications are scheduled on your device, inside the awake window you set. We do not send marketing push notifications.

Sign-in and purchases

Apple or Google give us a subject ID, and an email or display name if you share them. If you use Sign in with Apple and later delete your account, the app attempts to revoke Drippy’s Sign in with Apple authorization. You can also remove Drippy from the Sign in with Apple section of your Apple Account settings.

If you buy Drippy Pro, Apple or Google process the payment. RevenueCat stores purchase state so we can unlock Pro. We do not see your full card number.

How long we keep it

On-device data stays until you erase it or uninstall. Cloud data stays until you delete the account. Waitlist entries stay until launch invitations go out or you ask us to remove them.

PostHog analytics, Sentry crash reports, and purchase records at RevenueCat, Apple, and Google are kept under those providers’ retention periods. After you delete your account, they are no longer linked to an account in Drippy’s database. Vercel keeps request logs only briefly.

Feedback remains in our issue tracker until we resolve or remove it. You can ask us to delete your feedback by quoting the reference shown after submission.

Deletion

Signed-in users can delete their account in Settings → Account → Delete account, or request it at getdrippy.app/delete. Deletion immediately removes your Supabase account and every cloud row that belongs to it. If you used Sign in with Apple, the app also attempts to revoke Drippy’s Sign in with Apple authorization. Records kept by PostHog, Sentry, RevenueCat, Apple, and Google follow their retention, as described above, and are no longer linked to an account in Drippy’s database.

You can also erase data on this phone without deleting the cloud account.

Who is responsible

Drippy is made by Jamak Lab, the trade name of an independent developer based in Mexico. Jamak Lab is the party responsible for your personal data under Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares. Contact: hello@jamaklab.com.

Your rights

Wherever you live, email us to access, correct, delete, or receive a copy of your data, or to object to or limit how we use it. We answer within the time the applicable law sets.

In Mexico these are your ARCO rights (acceso, rectificación, cancelación, oposición). You can also withdraw consent. If you are not satisfied with our answer, you can contact the Secretaría Anticorrupción y Buen Gobierno, the authority responsible for personal data held by private parties.

If UK or EU law applies, you can complain to your supervisory authority. Under the CCPA we do not sell personal information.

Children

Drippy is not directed at children under 13. We do not knowingly collect personal information from them. If you think we have, email us and we will delete it.

International transfers

We are based in Mexico and our processors are hosted in the United States, so your data is transferred to and processed in the US wherever you use Drippy from. These processors act on our instructions under their own data-processing terms.

Changes

We will update this page when the policy changes and bump the date above.

Questions: hello@jamaklab.com