Privacy Policy

Last updated: 23 September 2026. If anything in this policy is unclear, email support@watergoose.app.

The short version

• Water Goose has no accounts. The app never asks for your name or email address.
• Your drinks, your goal, your reminder times and the details you enter during setup (age, gender, height and weight) are stored on your phone. We have no servers that receive them, and we can't see them. (On Android, your phone's own backup to your Google account may include them; see section 3.)
• To handle Water Goose Plus, the app contacts our purchase provider RevenueCat each time it starts, using a random ID and basic device details. It never sends RevenueCat your drinks or your setup details.
• The app shows no ads. Apart from RevenueCat, it contains no analytics or advertising software, and it doesn't use your phone's advertising ID. Drink reminders are created on your phone.
• The website uses one analytics tool, Fathom, which sets no cookies and doesn't identify you. There is no Google Analytics, no Meta (Facebook) Pixel and no other tracking or advertising tool on the website. Blog posts with a video load YouTube's player when you scroll to it. In our drink guides, it loads only if you press play (section 9).
• We don't sell personal data. You have rights over your data, including the right to object to the processing we base on our legitimate interests, and you can use them by emailing us.

Contents

1. Who we are
2. App: what stays on your device
3. App: backups and new phones
4. App: purchases and Water Goose Plus
5. App: reminders, permissions and other connections
6. Website: hosting, blog and server logs
7. Website: analytics (Fathom only)
8. Website: cookies, browser storage and notifications
9. Website: images and videos
10. Store links
11. When you email us
12. No selling of data, no ads in the app
13. Why we use data (legal bases)
14. How long we keep data
15. Who receives data
16. Transfers outside the EU
17. Security
18. Children
19. Your rights
20. Complaints
21. Changes to this policy
22. Contact us

1. Who we are

Water Goose, listed on the App Store and Google Play as Water Tracker - Water Goose, is made by Iaroslav Morgunov, an individual sole trader in Portugal who trades as Last Stand Studio (laststand.studio). In this policy, "we", "us" and "our" mean him. He is the data controller for the personal data described here.

• Name: Iaroslav Morgunov, trading as Last Stand Studio
• Address: Rua Alfredo Keil 571, 4150-047 Porto, Portugal
• Email (privacy, support and everything else): support@watergoose.app
• Phone: +351 924 331 054
• Tax number (NIF): 310038588

We have not appointed a data protection officer, because the law does not require one for a business like ours. You can contact us directly about anything in this policy.

This policy covers:

• the app: Water Goose for iPhone and for Android;
• the website: watergoose.app, including its free tools, its blog and the pages that open inside the app.

Where this policy says "iPhone", it also covers the iPhone app when it runs on another Apple device.

Sections 2 to 5 are about the app. Sections 6 to 10 are about the website and our store links. Sections 11 onwards apply to both.

2. App: what stays on your device

Water Goose has no accounts and no sign-up. The app does not ask for your name, email address or location.

Everything you enter is saved in the app's own storage on your phone:

• your drinks: the amount, the drink type (such as water, coffee, tea, milk or soup), the date and time, and whether you used a quick-add button or entered it yourself;
• your daily goal, your units (millilitres or US fluid ounces) and your custom quick-add sizes;
• the details you give during setup: gender (you can choose "Prefer not to say"), age, height and weight, and the daily goal the app suggests from them;
• your reminder settings: whether reminders are on, the start and end times, and how often they come;
• your appearance setting (system, light or dark) and small pieces of app state, such as whether you finished setup and whether you have seen the Water Goose Plus screen.

The setup screens start with example values, and you can keep them if you would rather not enter your own. The suggested goal is worked out on your phone from those details and published reference values for water intake. Nothing is sent anywhere.

Your weight, height, age and gender, and how much you drink, are personal data, and some of it can say something about your health. That is why it stays with you. The app uses it only on your phone, to suggest your goal and show your progress. We have no servers that receive it, and we can't see it. The app doesn't send it to anyone (apart from your phone's own backup on Android, section 3), and it is never used for advertising. It reaches us only if you choose to send it to us, for example in an email (section 11).

The app has no cloud sync and no export feature, and it does not connect to Apple Health or Health Connect. It has hydration tips that are built into the app, so reading them sends nothing anywhere.

Deleting your data. Settings > Delete all hydration data removes your drinks, goal, units, custom sizes, reminder schedule and setup details from the phone, and cancels Water Goose's scheduled reminders. It is available on the free plan. It keeps your appearance setting, whether you finished setup, and your purchase status, and it does not cancel a subscription. Deleting the app removes everything it stored on your phone.

3. App: backups and new phones

iPhone. The app marks its storage so it is left out of iCloud Backup and backups to your computer. Your drinks, settings and setup details are therefore not copied into those backups, and a new iPhone set up from a backup won't have your Water Goose history. You can get Water Goose Plus back on a new phone with Restore purchases.

Android. Android has its own system backup. If you have it turned on, Android may include Water Goose's data (your drinks, settings, reminder settings and setup details such as weight and height) in the device backup that it stores in your Google account, and in a transfer to a new phone. Google handles this under Google's Privacy Policy, and we can't access it. You can turn it off in your phone's backup settings (the exact menu depends on your phone).

4. App: purchases and Water Goose Plus

Water Goose is free to download. Without Water Goose Plus you can look around the app, read its tips and delete your data. Logging drinks, editing your history, and changing your goal, reminders, units or custom sizes need Water Goose Plus (some messages in the app call it Water Goose Premium). Plus is sold as a monthly subscription that renews automatically until you cancel it, or as a one-time Lifetime purchase.

Payments. Apple (App Store) or Google (Google Play) handle all payments. We never see your card or bank details, and we don't receive your Apple ID or Google account. In the EU, the seller of in-app purchases is Apple Distribution International Ltd. or Google Commerce Limited, both in Ireland. They process payment data under their own privacy policies (Apple, Google). You manage and cancel purchases in your App Store or Google Play account. On iPhone, while Plus is active, Settings > Manage subscription opens Apple's subscription screen. On the App Store, purchases that support Apple's Family Sharing can be shared with your family group, which Apple manages. Refunds are explained in our Terms of Use. Apple and Google also give us sales reports, such as which products were bought, when, at what price and in which country. Google Play also lists individual orders by order number.

RevenueCat. We use RevenueCat, Inc. (USA) to check purchases and manage subscriptions. RevenueCat processes this data on our behalf, as our processor. It also shows us overall figures, such as how many subscriptions were started, renewed or cancelled. Each time the app starts, it contacts RevenueCat to check whether you have Water Goose Plus and to load the plans and prices it shows. This happens for everyone, including people who have never bought anything.

RevenueCat receives:

• a random, anonymous ID that RevenueCat's software creates in the app (we don't link it to your name, email address or store account);
• purchase information from Apple or Google: receipts or purchase tokens, which product you bought, purchase and expiry dates, price and currency, and whether Plus is active;
• your device model, operating system version, app version, language settings, and the country of your App Store or Google Play account;
• on iPhone, Apple's "identifier for vendor": an ID that iOS gives to all of our apps on your phone. It is not the advertising ID, and iOS changes it if you delete all of our apps;
• when the app was last opened;
• your IP address, as with any internet connection.

RevenueCat does not receive your drinks, your goal, your reminders or your setup details, and the app does not send it your name, email address, advertising ID or any advertising data. RevenueCat stores data on Amazon Web Services servers in the USA. RevenueCat's software also saves the anonymous ID and your purchase status on your phone, so the app knows your plan. See RevenueCat's privacy policy.

5. App: reminders, permissions and other connections

Drink reminders

Drink reminders are off until you turn them on in Settings > Water reminders. You choose a start time, an end time and how often they come (every 2, 3 or 4 hours). Your phone then schedules and shows them. The app does not use push notifications, does not create a push token and sends nothing to a notification server. Every reminder has the same fixed text ("Water Goose has concerns."), so it contains nothing about you or what you drank.

The app asks for notification permission when you turn reminders on. On iPhone it asks to show alerts and play sounds, not to add badges. If you said no earlier, the app can open your phone's settings so you can change it. You can turn off Water Goose's notifications in your phone's settings at any time. Changing or turning off reminders inside the app needs Water Goose Plus, and Settings > Delete all hydration data, which is free, also cancels them.

Permissions

Notifications are the only permission the app asks you for. The app does not access your camera, microphone, photos, contacts, location or health data, and it never shows the "Allow Apps to Request to Track" prompt. It does not collect your phone's advertising ID. On Android the app also uses standard permissions that don't show a prompt, such as internet access, Google Play billing and restoring your reminders after the phone restarts.

Other connections from the app

• No analytics or ads. Apart from RevenueCat (section 4), the app contains no analytics, crash-reporting or advertising software.
• No over-the-air updates. App updates come only through the App Store or Google Play.
• Apple and Google. The app connects to Apple or Google for purchases and Restore purchases, and on iPhone for Manage subscription.
• Web pages inside the app. The Terms of Use and this Privacy Policy open inside the app as pages from watergoose.app. They work like the rest of the website, as described in sections 6 to 8, so Vercel receives the request and Fathom counts the page view.
• Crash reports from Apple and Google. If you chose in your phone's settings to share analytics with app developers, Apple or Google may give us crash reports and combined usage statistics through App Store Connect and Google Play Console. You control this in your phone's settings (on iPhone: Settings > Privacy & Security > Analytics & Improvements).

6. Website: hosting, blog and server logs

The website is hosted by Vercel Inc. (USA). When you open a page, Vercel receives your IP address, browser and device details, the page address, the page you came from and the time. Vercel serves pages from a server near you (for visitors in Europe, usually in Paris), and some requests are handled on its servers in the eastern USA. Vercel keeps these request logs for a limited time under its own settings. We use them only to run the site and keep it secure. Vercel does not set cookies for us.

Cloudflare, Inc. (USA) runs the domain name system (DNS) for watergoose.app, the service that points the address to Vercel's servers. The pages of the main site don't pass through Cloudflare.

Blog. The pages under watergoose.app/blog are published with Lunroo, a blogging platform that we also run, so it is not a separate company. Vercel passes blog requests on to Lunroo, which runs on Cloudflare's network. Cloudflare therefore receives the details of each blog request, such as the page address, the time and your browser details, and may receive your IP address.

Network error reports. Blog pages come with Cloudflare settings that ask your browser to report network errors for watergoose.app for 7 days (a web standard called Network Error Logging, supported by Chrome, Edge and other browsers based on Chromium). If loading something from watergoose.app fails during that time, your browser may send Cloudflare a short report with the page address, the type of error, the server's IP address and the time. Cloudflare also sees your IP address when it receives the report. Successful page loads are not reported. This is not a cookie, and it is not used to identify or follow you.

The website has no accounts, sign-up forms, newsletter, comments or contact form.

7. Website: analytics (Fathom only)

The only analytics tool on our website is Fathom Analytics. We don't use Google Analytics, Google Tag Manager, the Meta (Facebook) Pixel or any other tracking or advertising tool.

Provider: Conva Ventures Inc. (Canada), as our processor. Fathom counts page views on every page of the website, including the blog and the pages that open inside the app. It records the page address, the site you came from, any campaign tags in the address, and general browser, device and country information. We have not set up any extra events, so Fathom doesn't record clicks or anything you type.

Fathom does not use cookies or save anything on your device, and it doesn't build a profile of you or follow you to other websites. It turns your IP address and browser details into a scrambled code (a hash) that changes every day, and it doesn't keep your raw IP address in its analytics. For visitors in the EU, this step happens on servers in the EU. Fathom says it keeps raw data for no longer than 24 hours. We only see combined statistics, such as how many people viewed a page. See Fathom's privacy policy.

Some of our guides and tools cover health topics, such as breastfeeding, caffeine or urine colour, so the page address Fathom counts shows which pages were visited, but not by whom. Our tools run entirely in your browser. What you type into them is not sent to us and is not added to the page address.

If you don't want to be counted, you can use a content blocker, most of which block Fathom, or email us to object (section 19).

8. Website: cookies, browser storage and notifications

Our website sets no cookies, and neither does Fathom, Vercel or Cloudflare. (YouTube may store data in your browser when its player loads; see section 9. Blog pages ask browsers based on Chromium to keep the network error setting described in section 6.)

Browser storage. Our own code uses your browser's local storage to remember what you enter in our tools and our drink and food guides, so your numbers are still there when you come back:

• the water intake, breastfeeding, creatine, hiking and caffeine calculators: your units, body weight and the other answers you give, such as sex, activity, climate, feeds per day, pumped milk, drinks and bedtime;
• the sweat rate calculator: your body weight before and after exercise, what you drank, urine volume, duration, temperature, and the sessions you save;
• the 75 Hard tracker and the 30-day water challenge: your daily check-ins;
• the water reminder, the printable water tracker and the bottles-in-a-gallon converter: your settings;
• the drink and food guides: the drinks you add to today's total, the drink and amount you last chose, your goal, serving size and units.

Some of this is about your body, such as your weight, breastfeeding details or sweat sessions. It stays in your browser, and we never receive it. When you export or import a file in a tool, that also happens in your browser. The urine colour chart stores nothing. You can clear this storage at any time in your browser settings.

Browser notifications. The water reminder and the breastfeeding water calculator can remind you with your browser's notifications. Your browser asks for your permission first. The page creates the notifications while it is open. Nothing is sent from a server, and there is no push service. You can withdraw the permission in your browser settings.

9. Website: images and videos

• Images. Images on the site are delivered from our own site through Vercel. Blog images come through Lunroo and Cloudflare, as described in section 6. We don't load images or fonts from other companies.
• Videos in blog posts. Blog posts with a video embed YouTube's player from youtube-nocookie.com. It loads when you scroll near it, without a click, and sends Google your IP address, browser details and our site's address. The player may store data in your browser, and once you press play, YouTube may also use cookies, under Google's Privacy Policy.
• Videos in drink guides. In our drink guides, the preview image is stored on our own site, so nothing loads from YouTube until you press play. Only then does the youtube-nocookie.com player load, with the same effects as above.
• Other websites. Links to other websites, such as sources in our articles, are covered by those websites' own policies.

10. Store links

Our App Store and Google Play buttons are plain links to the Water Goose store pages. They carry no campaign tags or other information about you or your visit. The "Get the app" button checks in your browser whether you use an iPhone or an Android phone, so it can pick the right store, and it saves nothing. The rating shown on our homepage is fetched by our server from Apple's public App Store data and involves no data about visitors. What happens on the store pages is covered by Apple's and Google's own privacy policies.

11. When you email us

If you email support@watergoose.app, we receive your email address, your name if your email shows it, your message, any attachments (for example a screenshot) and the time you sent it. We use this only to reply and help you, and to spot common problems. Our mailbox is run by an email hosting provider that acts as our processor.

Please don't send medical information, or more personal details than you need to. We keep support emails for up to 2 years after our last exchange, then delete them. We keep an email longer only if we need it for a legal claim or the law requires it.

12. No selling of data, no ads in the app

• We don't sell personal data, and we don't pass it to data brokers.
• The app shows no ads. Apart from RevenueCat (section 4), it contains no advertising or analytics software. It doesn't use your phone's advertising ID and doesn't track you across other companies' apps and websites.
• We don't run advertising tools on the website either. The only outside player on it is YouTube's, as described in section 9.

13. Why we use data (legal bases)

Data protection law (the GDPR) says we need a legal basis for each use of personal data. Here are ours.

What you enter in the app, and in the tools on our website, isn't in this table because it never reaches us: the app and the tools use it only on your device, for you (sections 2 and 8). If you choose to send us health details, for example in an email, the table covers that.

Where we rely on legitimate interests, you have the right to object (section 19).

Do you have to give us data? No law requires you to give us personal data, and you can use Water Goose without an account. But the app needs the RevenueCat connection in section 4 to know which plan you have, so it happens whenever you use the app. To buy or restore Water Goose Plus, purchase data has to pass through Apple or Google and RevenueCat. Without it, we can't deliver Plus. The details you enter during setup never reach us, and you can keep the example values instead. Emailing us is optional.

Automated decisions. We don't make decisions about you based only on automated processing, including profiling, that have legal or similarly significant effects on you. The goal the app suggests is worked out on your phone, and you can change it.

14. How long we keep data

When we stop using a service listed here, we delete our data held with it, unless the law requires us to keep it.

15. Who receives data

We share data only with the companies below, and only for the purposes in this policy. Processors act on our instructions. Independent controllers decide for themselves how they use data, under their own privacy policies.

Each processor works under a data processing agreement, usually part of its standard terms. The agreement lets it use the data only to provide its service to us, and requires it to keep the data confidential and secure as the GDPR requires, giving it the same protection this policy describes. Apart from our website pages that open inside it (section 5), the app shares data only with RevenueCat (our processor) and with Apple and Google (the platforms it runs on).

We may also share data:

• if the law requires it, for example with a court, the tax authority or another public authority;
• with professional advisers, such as an accountant or a lawyer, only as far as they need it and under a duty of confidentiality;
• if Water Goose is sold or passed to someone else. The new owner would receive only the data we hold (such as support emails and purchase records at RevenueCat) and would have to follow this policy. We will tell you on the website before this happens.

16. Transfers outside the EU

Some recipients are outside the European Economic Area (EEA). When data goes there, it is protected as follows.

If our email hosting provider stores messages outside the EEA, we rely on an EU adequacy decision for that country or on the Standard Contractual Clauses. Apple and Google handle transfers of the data they control under their own terms.

The EU-US Data Privacy Framework is currently being challenged in court. If it stops applying, we will rely on the Standard Contractual Clauses instead. You can ask us for a copy of the safeguards for any transfer by emailing support@watergoose.app.

17. Security

• The best protection is not collecting data in the first place. Your drinks and the details you enter in the app never reach our systems.
• Data on your phone is protected by your phone's own security, such as your passcode and device encryption.
• The app talks to RevenueCat over encrypted connections, and RevenueCat encrypts data in transit.
• The website works only over HTTPS. It uses HSTS and other security headers, and it blocks access to your camera, microphone and location.
• Access to our service accounts (RevenueCat, website hosting, analytics and email) is limited to the developer.

No system is perfectly secure. If a data breach puts your rights at risk, we will tell you and the authorities as the law requires.

18. Children

Water Goose is meant for adults. The app's setup asks for an age between 18 and 100 to suggest a daily goal. The App Store rating (4+) and the Google Play rating ("Everyone") describe the app's content, not who it is made for. The app does not ask anyone for a name, email address or contact details, and what is entered in it stays on the phone.

In Portugal, children under 13 can't give valid consent to online services by themselves (Lei n.º 58/2019, article 16). Where we rely on consent, a parent or guardian has to give it for a child under 13. Other EU countries set this age between 13 and 16. If you are under that age where you live, please ask a parent or guardian before you email us.

Purchases go through Apple or Google. Parents can use Apple's Ask to Buy or Google Play's parental controls to approve purchases. If you think a child has sent us personal data, email us and we will delete it.

19. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong;
• delete your data;
• restrict how we use it;
• data portability: receive data you gave us in a common machine-readable format, where we use it based on consent or contract;
• withdraw consent at any time, where we rely on it. This doesn't affect what happened before you withdrew;
• not be subject to decisions based only on automated processing that have legal or similarly significant effects (we don't make any).

Your right to object

Where we rely on legitimate interests (see section 13), you can object at any time for reasons related to your situation. We will then stop, unless we have compelling legitimate grounds or need the data for a legal claim. You can always object to the use of your data for direct marketing, and we will then stop.

How to use your rights

Email support@watergoose.app. It's free. We answer within one month. If a request is complex, we may need up to two more months, and we will tell you why. We may ask for information to confirm the request is yours.

Because Water Goose has no accounts, we often can't link data to a person. For example, to find your purchase record at RevenueCat, we will usually need the order ID from your Apple or Google receipt. If you never bought anything, your record at RevenueCat is linked only to a random ID that you can't see, so we may not be able to find it. If we can't identify you, we will tell you. In that case the law doesn't require us to act on the request unless you give us details that let us find your data.

Data we don't hold

Most Water Goose data never reaches us, so you control it directly:

• On your phone: Settings > Delete all hydration data removes your drinks, goal, units, custom sizes, reminder schedule and setup details, and cancels the reminders (section 2). It works on the free plan. Deleting single drinks from your history needs Water Goose Plus. Deleting the app deletes all its data on the phone. On Android you can also use your phone's app settings to clear Water Goose's storage.
• Android backup: manage or delete it in your phone's backup settings or your Google account.
• Purchases: Apple and Google hold your payment and purchase history. Contact them for their records.
• Website: clear the site data for watergoose.app in your browser settings. This removes what you entered in our tools and our drink and food guides.

UK and US users

If you are in the UK, you have the same rights under the UK GDPR, and you can complain to the Information Commissioner's Office (ico.org.uk).

If you live in a US state with a privacy law, such as California, you can ask to know, correct or delete your personal data by emailing us. We don't sell personal data or share it for targeted advertising. We won't treat you differently for using your rights.

20. Complaints

We would like to hear from you first at support@watergoose.app, so we can try to fix the problem. You also have the right to complain to a data protection authority, in particular in the EU country where you live, work or where the problem happened. Our lead authority is the Portuguese one:

• Comissão Nacional de Proteção de Dados (CNPD)
• Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
• Phone: +351 213 928 400
• Email: geral@cnpd.pt
• Website: www.cnpd.pt
• Complaint form: www.cnpd.pt/cidadaos/participacoes

21. Changes to this policy

We will update this policy when the app, the website or the law changes. The date at the top shows the latest version. If we make important changes, we will point them out on the website or in the app's update notes. Before we use your data for a new purpose, we will tell you first.

22. Contact us

Iaroslav Morgunov, trading as Last Stand Studio
Rua Alfredo Keil 571, 4150-047 Porto, Portugal
Email: support@watergoose.app
Phone: +351 924 331 054
NIF: 310038588