HydroSleep — Privacy Policy

Last updated: August 24, 2026

In short: HydroSleep is offline-first. Care records stay on your device unless you choose family cloud sync, your own NAS, an export, Health Connect, voice recognition, or notifications. Optional product diagnostics are off until you explicitly enable them. If you buy the optional Plus upgrade, only the purchase itself is processed by Google Play and RevenueCat — never your care data.

1. Controller and contact

HydroSleep is developed and operated by Ing. Filip Kugler, a self-employed trader registered in the Czech Republic, company ID (IČO) 07117485, place of business Prague, Czech Republic. Ing. Filip Kugler is the controller of the personal data described in this policy. Privacy questions and requests can be sent to hydrosleep.support@gmail.com.

2. Data stored on your device

The app can store child and caregiver profiles, sleep, feeding and hydration, diapers, temperature, medication, growth, teeth, vaccinations, milestones, development checklists, calendar items, photos, reports, journal entries, reminders, preferences and sync state. These are stored in app-private storage on your device. NAS credentials are stored with Android Keystore-backed secure storage.

3. Optional family cloud sync

If you enable Family sync, the app creates an anonymous Supabase authentication identity and uploads the shared family profile and supported care records to the HydroSleep Supabase project. Family members with the invitation code can access the shared family. Caregiver display names and technical timestamps are also stored so the app can show who logged an item and synchronize changes.

Family sync does not currently require an email address. Because an anonymous identity is tied to the app installation, uninstalling or clearing app storage can remove access from that device unless another family member can issue a new invitation. Leaving a family removes the local membership but may not delete the shared family data. Contact us for a cloud-data deletion request.

4. Optional private NAS sync and exports

If you configure WebDAV/NAS sync, selected records, media and device push-token files are sent directly to the HTTPS server address you provide. That server is controlled by you, not HydroSleep. JSON, CSV and PDF exports are created only when you request them and can be shared through Android to a destination you choose.

5. Notifications and Expo

Local reminders are scheduled on your device after you grant notification permission. Family alerts can use an Expo push token and Expo's push delivery infrastructure. Notification text may include a child or caregiver display name and a short event label. You can disable all notifications or individual categories in HydroSleep Settings and revoke the system permission in Android Settings.

6. Optional integrations

7. Optional product diagnostics

“Help improve HydroSleep” is disabled by default. If enabled, the app may send a random app-install identifier, app version, platform, language, allow-listed feature events and scrubbed crash text to our Supabase endpoint. The server hashes the random identifier before storage. The payload excludes child and family identifiers, names, care values, medication details, notes, photos and advertising identifiers. Disabling the setting clears unsent diagnostic queues and stops future collection.

8. Purchases and subscriptions

HydroSleep is free to install. If you buy the optional HydroSleep Plus upgrade, the purchase is processed by Google Play Billing, and we use RevenueCat to verify the receipt and to tell the app whether your Plus entitlement is currently active.

For that purpose the app creates a random purchase identifier that is not derived from your name, email or Google account, and RevenueCat receives it together with the Google Play purchase token, the product and plan you bought, the purchase, renewal and expiry timestamps, the store country, and technical values such as app version and platform. Google Play additionally provides RevenueCat with the status of the transaction so that renewals, cancellations, refunds and billing problems are reflected in the app.

HydroSleep never receives your card number, bank details or any other payment instrument. Those are handled by Google inside the Play checkout. No care data — no child or caregiver names, sleep, feeding, health, growth, photos, notes or journal entries — is ever sent to RevenueCat or attached to a purchase.

The last confirmed entitlement status is also cached on your device so that Plus keeps working when the app has no network connection. Clearing app storage removes that cache; the entitlement itself can be restored from Google Play.

If you never make a purchase, the billing service is not contacted and no purchase identifier is created.

9. Service providers

Depending on features you choose, HydroSleep uses Expo (app and push infrastructure), Supabase (family sync and opted-in diagnostics), Google Play Billing and RevenueCat (purchase processing and subscription status), Android/Google Health Connect, your selected Android speech-recognition provider, your own NAS provider, and apps you select from the Android share sheet. Their own terms and privacy notices apply to their processing.

10. Retention and deletion

Purchase records are retained by Google Play and RevenueCat for as long as needed to service the subscription and to meet accounting and tax obligations. Local care data remains until you delete records, clear HydroSleep's Android app storage, or uninstall the app. Files exported outside the app and copies on your NAS must be deleted at their destination. Diagnostic events and scrubbed crash reports are retained only as long as needed to measure reliability and product use, normally no more than 24 months. Family cloud data is retained while the shared family exists or until a valid deletion request is completed.

11. Children, security and medical data

HydroSleep is intended for use by adult caregivers, not directly by children. Care data can be sensitive. We use app-private device storage, HTTPS-only network configuration, row-level access controls for family sync, secure credential storage and data minimization. No system is completely secure, so protect your device, family code and NAS credentials.

12. Your choices

You can use core logging without family sync, NAS, Health Connect, voice recognition, notifications or diagnostics. My Data & Reports provides a free machine-readable export of all supported data available in the app; the same full backup remains available from Settings. You may also request access, portability, correction, restriction or deletion of personal data controlled by us by using the contact above. These privacy requests are handled free of charge unless applicable law permits a reasonable fee for a manifestly unfounded, excessive or repeated request.

13. Changes

We may update this policy as HydroSleep changes. The date above will be revised for material updates.