1. Who we are
Brim ("the app", "we", "us") is a daily water-tracking application developed by NeuroApp. This policy explains what data the app handles, how, and what choices you have.
If you have questions about this policy, email us at privacy@neuroapp.dev.
2. What stays on your device
a) Profile inputs
During onboarding the app asks you for:
- Gender
- Age
- Body weight
- Activity level
- (Optional) glass / bottle size and reminder preferences
These inputs are saved in the app's private SQLite database on your device. We use them only locally, to calculate your recommended daily water goal. The actual values (your weight, your age, your gender) are never transmitted to us or to any third party.
b) Hydration history
Each time you log a drink, the app records the timestamp and amount in the local SQLite database. This history is what powers the home view, the History tab, your streaks, and your charts. It is private to your device and never uploaded.
3. What goes to our server (only when reminders are on)
To deliver hydration reminders reliably across every Android device — including phones whose battery managers would otherwise drop scheduled alarms — we use Firebase Cloud Messaging (FCM), a service operated by Google LLC. This is the only mechanism that delivers notifications on schedule across the whole Android ecosystem.
For each user with reminders enabled, we store on Firebase:
- An anonymous user identifier generated by Firebase Authentication. It is not linked to your name, email or phone number — you never sign in.
- An FCM device token, which is a random string that lets Google Play Services route messages to your specific device. It cannot be used to identify you personally.
- Your reminder preferences: interval (e.g. every 2 hours), active window (e.g. 08:00–22:00) and IANA timezone (e.g. "Asia/Karachi") so notifications fire at the right local time.
- A flag indicating whether reminders are currently enabled.
That's it. Your weight, age, gender, hydration history, streaks, tips and any other personal data never reach the server.
4. What we do not collect
- We do not require you to sign in — the Firebase identifier is anonymous and created automatically.
- We do not collect your name, email, phone number, address, or any other personally-identifying information.
- We do not collect device advertising IDs, precise location, or contacts.
- We do not use any analytics SDKs, crash-reporting SDKs, or advertising SDKs in the app.
- We do not share or sell any data to third parties.
- The Cloud Function that sends reminders only reads the fields listed in section 3 — it never receives, sees, or stores your hydration data or profile inputs.
5. Permissions the app may request
On Android and iOS, Brim may ask for the following system permissions. You can decline or revoke any of these at any time in your device settings.
- Notifications — used only to deliver the hydration reminders you configure in the app's Reminders settings. We do not send marketing notifications.
- Alarms & scheduled tasks (Android) — used to schedule the reminders you configure.
- Vibrate (Android) — used for haptic feedback when you log a drink.
6. Children's privacy
Brim is intended for general audiences and is suitable for users of any age. Because we do not collect any personal information from anyone, we similarly do not collect any personal information from children.
7. Data retention & deletion
On your device: you control retention directly. Uninstalling the app (or, on Android, Settings → Apps → Brim → Storage → Clear data) permanently removes every profile input, hydration record, and preference.
On Firebase: if you've enabled reminders, your anonymous user document on Firebase still exists. To delete it:
- Open the app → Settings → Notifications → toggle reminders OFF. This immediately marks your document as disabled and stops all FCM pushes.
- Or, for full deletion of the document and identifier, submit a request via our data deletion page. We remove the record within 30 days.
- Uninstalling without first disabling reminders leaves the (now-useless) anonymous record on Firebase. The dead FCM token will be auto-purged by our scheduled function within ~24 hours of the next push attempt. The document itself can be removed via the deletion request.
8. This website
The website you are currently viewing (drinkbrim.app or similar) is hosted by Firebase Hosting (Google LLC). Firebase Hosting writes standard server logs that may include your IP address, browser type, and the pages you visit, for security and performance purposes. These logs are governed by Google's privacy policy. We do not run any additional analytics, advertising, or tracking scripts on this site.
9. Future changes
If we ever add features that change how data is handled — for example, optional cloud sync or social features — we will update this policy and clearly notify you in the app before any such feature is enabled. Any new data flow will require your explicit opt-in.
10. Your rights
Depending on where you live, you may have rights under the GDPR (EU), CCPA (California), or similar regulations to access, correct, or delete personal information held about you. Because we do not hold any personal information about you, there is nothing to access, correct, or delete on our side. The data on your device is yours, and you can remove it at any time as described in section 6.
11. Contact
Questions, concerns, or feedback about privacy: privacy@neuroapp.dev.