Privacy Policy.

1. What Hydro Panda stores on your device

All of the following lives in the app's sandbox (iOS: the app container; Android: the app's private internal storage). None of it is transmitted off-device by Hydro Panda itself.

• Hydration history — every drink you log: time, amount, and drink type (water, coffee, tea, juice, milk, etc.). Stored via SharedPreferences as a JSON-encoded list.
• Daily goal & streak data — your daily target in millilitres / fluid ounces, your current streak count, longest streak, and milestone-unlock state.
• App settings — your selected vessel skin, units (mL or fl oz), reminder schedule, quiet hours, theme, haptics toggle, and notification sound.
• Optional name field — if you choose to set a name for your panda or yourself, it is stored locally. Nothing is sent off-device.
• Pro entitlement — a single boolean indicating whether you've purchased Hydro Panda Pro, plus the platform-specific receipt status. We never store payment information.

You can clear all of this at any time via Settings → Reset all data, or by uninstalling the app — both wipe the entire sandbox.

2. What Hydro Panda does not do

3. Notifications & reminders

Hydration reminders are scheduled locally on your device using the flutter_local_notifications plugin. They never leave your phone. There is no push server, no notification service, no remote notification ID. If notifications stop working, that's almost always a system permission issue — see the support page for fixes.

4. Banner ads (free tier only)

The free tier shows a single banner ad at the bottom of the home screen, served by Google AdMob. AdMob is the SDK used; the production ad-unit IDs are baked into the app and inspectable.

• AdMob may collect a device-level advertising identifier — IDFA on iOS (Identifier for Advertisers), AAID on Android (Android Advertising ID) — for ad personalisation, subject to your consent.
• AdMob's data practices are governed by Google's privacy policy: policies.google.com/technologies/ads.
• Upgrading to Hydro Panda Pro removes all ads, and the AdMob SDK is no longer initialised on Pro devices — meaning no ad requests are made, period.

5. Consent — GDPR, UK GDPR, and similar

If your device locale or IP indicates you are in the European Economic Area, the United Kingdom, or Switzerland, Hydro Panda uses Google's User Messaging Platform (UMP) to show a consent dialog before initialising AdMob. You may:

• Accept personalised ads.
• Decline personalised ads — non-personalised ads will still serve.
• Manage your choices later via Settings → Manage ad preferences, which re-opens the UMP form.

UMP itself does not transmit hydration data — its only job is to record your ad-consent state and pass it to AdMob.

6. App Tracking Transparency (iOS)

On iOS 14.5+, Hydro Panda shows the system-provided App Tracking Transparency (ATT) prompt the first time you log a drink — that is, after you've actually started using the app. If you tap Ask App Not to Track, the IDFA is unavailable and ads serve in non-personalised mode. If you tap Allow, AdMob can use the IDFA per Apple's policies. You can change this anytime in iOS Settings → Privacy & Security → Tracking.

7. In-app purchases

Hydro Panda Pro is a one-time, non-consumable purchase priced at $2.99 USD (or local-currency equivalent). The transaction is handled entirely by Apple StoreKit (iOS) or Google Play Billing (Android) via their native SDKs. We receive only the purchase status — purchased or not — and the platform receipt for restoration. We never see your payment method, billing address, or any card detail.

• iOS Family Sharing is supported. If a family-group member purchases Pro, all family-group members receive Pro on their own Apple IDs.
• Restorable across devices linked to the same Apple ID or Google Play account via Settings → Restore purchases.
• Refunds are handled by Apple or Google per their policies — see the support page for the exact links.

8. Your rights (GDPR, CCPA, and equivalents)

Because Hydro Panda doesn't transmit personal data to a server, there is no central database from which to retrieve, correct, or delete your information — there is no such database. Your data lives on your device, under your control. You may at any time:

• View all stored hydration entries via Settings → History inside the app.
• Delete individual entries from the History tab.
• Wipe everything via Settings → Reset all data.
• Opt out of personalised ads any time via Settings → Manage ad preferences.
• Uninstall the app — this deletes the entire app sandbox on both iOS and Android, including every saved sip.

9. Children's privacy

Hydro Panda is rated 4+ on the App Store and Everyone on Google Play, but it is not directed at children. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has used Hydro Panda in a way that produces personal data we hold, we will delete it — though, as noted above, we don't actually hold any personal data to begin with. Ads served to devices flagged as child-directed (via the store's age rating or device-level configuration) are restricted per Google's family-safe ad policies.

10. Security

Since no personal data is transmitted by Hydro Panda itself, there is no transport or database security to manage on our end. For the small surfaces that exist:

• Locally stored data is placed in the standard iOS / Android app sandbox, which is encrypted at rest by the operating system when a device passcode is set.
• AdMob and store-billing communications use HTTPS via the platform's native networking stack.
• We do not roll our own crypto for entitlements — we trust Apple's and Google's signed receipts.

11. International data transfers

Hydro Panda does not transfer your data internationally because Hydro Panda does not transfer your data anywhere. AdMob and store-billing requests are sent to Google and Apple infrastructure, which may operate globally; these are governed by Google's and Apple's own policies, linked above.

12. Third-party services in summary

• Google AdMob — banner ads on the free tier. Policy.
• Google User Messaging Platform (UMP) — consent collection in EEA/UK. Docs.
• Apple App Store / StoreKit — purchase processing on iOS. Policy.
• Google Play Billing — purchase processing on Android. Policy.

13. Changes to this policy

If this policy changes, the updated version is published at this URL and the "Last updated" date above changes. Material changes — for example, if Hydro Panda were ever to introduce any form of server-backed feature — would be surfaced in-app on the next launch with a changelog entry linking here.

14. Contact

Questions, concerns, a privacy complaint, or a request to exercise a data right — email playpalapps2024@gmail.com. We reply personally, usually within seven days.