1. Who we are
Brim ("the app", "we", "us") is a daily water-tracking application developed by NeuroApp. This policy explains what data the app handles, how, and what choices you have.
If you have questions about this policy, email us at privacy@neuroapp.dev.
2. What stays on your device
a) Profile inputs & Reminder Preferences
During onboarding the app asks you for:
- Gender, Age, Body weight, Activity level
- (Optional) glass / bottle size and reminder preferences
These inputs are saved in the app's private SQLite database on your device. We use them only locally. The actual values (your weight, your age, your gender, your reminder schedule) are never transmitted to us or to any third party. Reminders are scheduled locally using Android's Workmanager.
b) Hydration history
Each time you log a drink, the app records the timestamp and amount in the local SQLite database. This history is what powers the home view, the History tab, your streaks, and your charts. It is private to your device and never uploaded.
3. What goes to our server
To allow you to reserve your profile and sign in across devices, we use Firebase Authentication, a service operated by Google LLC.
If you create an account (optional — most users never need to), we store:
- Your email address, which you provide voluntarily and use to sign in on a new device.
- A display name, if you set one (you don't have to).
- A flag indicating whether you've verified your email (i.e. clicked the link we send you).
Your password is never seen by us. Firebase Authentication hashes it and we have no access to the plaintext.
That's the complete list. Your weight, age, gender, hydration history, streaks, tips, reminder preferences and any other personal data never reach the server.
4. What we do not collect
- We do not require you to sign in.
- We do not collect your name, phone number, address, or any other personally-identifying information beyond the email you provide if you make an account.
- We do not collect device advertising IDs, precise location, or contacts.
- We do not use any analytics SDKs, crash-reporting SDKs, or advertising SDKs in the app.
- We do not share or sell any data to third parties.
5. Permissions the app may request
On Android and iOS, Brim may ask for the following system permissions. You can decline or revoke any of these at any time in your device settings.
- Notifications — used only to deliver the hydration reminders you configure in the app's Reminders settings. We do not send marketing notifications.
- Vibrate (Android) — used for haptic feedback when you log a drink.
6. Children's privacy
Brim is intended for general audiences and is suitable for users of any age. Because we do not collect any personal information from anyone, we similarly do not collect any personal information from children.
7. Data retention & deletion
On your device: you control retention directly. Uninstalling the app (or, on Android, Settings -> Apps -> Brim -> Storage -> Clear data) permanently removes every profile input, hydration record, and preference.
On Firebase: if you have an account, your user record on Firebase Authentication still exists. To delete it:
- Open the app -> Settings -> Account -> Delete account. This immediately removes your Firebase Authentication record (email, hashed password). It cannot be undone.
- Or, for full deletion, submit a request via our data deletion page. We remove the record within 30 days.
8. This website
The website you are currently viewing (drinkbrim.app or similar) is hosted by Firebase Hosting (Google LLC). Firebase Hosting writes standard server logs that may include your IP address, browser type, and the pages you visit, for security and performance purposes. These logs are governed by Google's privacy policy. We do not run any additional analytics, advertising, or tracking scripts on this site.
9. Future changes
If we ever add features that change how data is handled — for example, optional cloud sync or social features — we will update this policy and clearly notify you in the app before any such feature is enabled. Any new data flow will require your explicit opt-in.
10. Your rights
Depending on where you live, you may have rights under the GDPR (EU), CCPA (California), or similar regulations to access, correct, or delete personal information held about you. Because we do not hold any personal information about you, there is nothing to access, correct, or delete on our side. The data on your device is yours, and you can remove it at any time as described in section 6.
11. Contact
Questions, concerns, or feedback about privacy: privacy@neuroapp.dev.