Privacy Policy

HydroBloom ("we", "our", or "the app") is operated by DJUMP, MB, a Lithuanian private limited company. This Privacy Policy explains how we collect, use, and protect your information when you use HydroBloom, in accordance with the EU General Data Protection Regulation (GDPR) and Lithuanian data protection law.

1. Information We Collect

2. Information We Do Not Collect

• We do not collect payment or credit card information. All payments are processed by Apple (App Store) or Google (Google Play) through RevenueCat.
• We do not collect or share your health data with third parties. Your hydration records are private and accessible only to you.
• We do not collect location data, contact lists, or photos.

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b)) — processing necessary to provide the hydration tracking service you signed up for (account management, storing your water logs, syncing across devices).
• Consent (Art. 6(1)(a)) — for opt-in features such as push notification reminders and anonymous analytics. You may withdraw consent at any time via in-app settings.
• Legitimate interest (Art. 6(1)(f)) — for security, fraud prevention, and improving service reliability.

4. Data Storage and Security

Your data is stored on EU-based Supabase infrastructure with row-level security (RLS), meaning only you can access your own hydration records. All data is transmitted over HTTPS and encrypted at rest. We use industry-standard security practices to protect your information. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

• Supabase — Authentication, database hosting, and data storage with row-level security (EU region).
• RevenueCat — Subscription and payment management (processes payments through Apple/Google).
• PostHog — Anonymous usage analytics to improve app experience.
• Apple / Google — OAuth sign-in providers and payment processing.
• Resend — Transactional email delivery for the contact form on our website.

Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses or equivalent safeguards required under GDPR.

6. Your Rights

Under GDPR and Lithuanian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request erasure of your personal data ("right to be forgotten")
• Export your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)

You can delete your account directly within the app under Settings, which will permanently remove all your hydration records and personal information. For any other data-related requests, contact us at start@djump.io.

7. Data Retention

• Active account data is retained as long as your account remains active.
• If you delete your account, all personal data (hydration logs, profile, settings) is permanently removed from our active databases within 30 days.
• Encrypted backups may persist for up to 30 days after deletion before being overwritten.
• Anonymous, aggregated analytics data may be retained for up to 12 months for product improvement purposes.
• Inactive accounts (no sign-in for 24 months) may be deleted after prior email notice.

8. Children's Privacy

HydroBloom is not intended for children under 14 (Lithuania's digital age of consent). We do not knowingly collect personal data from children under 14. If you believe a child under 14 has provided us with personal information, please contact us at start@djump.io so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at:

DJUMP, MB
Šilutės pl. 35G-36, LT-94105 Klaipėda, Lithuania
Email: start@djump.io