Cactus App Privacy Policy

1. Data We Collect

Cactus collects only the data necessary to provide and improve your hydration tracking experience:

• Profile: weight, activity level and climate, given at onboarding to compute your daily goal. They stay on your device — and they are also sent to PostHog as a usage event when you finish onboarding.
• Hydration logs: drink entries, timestamps, and daily progress recorded as you track your water intake. These stay on your device.
• App preferences: language, unit system, reminder schedule, and notification settings.
• Pseudonymous usage analytics via PostHog Cloud EU: screens opened, features used, crash reports. They carry a random install identifier, your app version and device model, and your IP address reaches the server.
• If you turn reminders on: your wake and sleep times, your language, your time zone and a push token, sent to our own server so the reminder arrives at the right hour.

2. How We Use Your Data

• Calculate and adjust your personalized daily hydration target based on your profile.
• Display your hydration history, streaks, and progress to help you build healthy habits.
• Improve the app through pseudonymous usage analytics, and show ads. We never sell your data and never build advertising profiles ourselves.

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only with the following service providers, strictly for app functionality:

• PostHog Cloud EU — pseudonymous usage events, hosted in the European Union. Your IP address, device model and a random install identifier reach the server.
• Google AdMob — ads. They are non-personalised by default and become personalised only with your explicit consent (App Tracking Transparency on iOS, Google's consent form in the EEA and the UK). AdMob may then use your advertising identifier. It never receives your hydration data. You can reopen that form anytime from Settings.
• Our own server (trainrboost.com) — your reminder schedule and push token, if you turn reminders on. Your drink log is never sent there.
• RevenueCat, Apple and Google — the one-time purchase that removes ads.
• Expo (u.expo.dev) — the app checks for a new version at launch, which tells Expo your platform, app version and IP address.

4. Data Retention

We retain your data only for as long as necessary to provide the service:

• Your drink log and your goal live only on your device. If you turn reminders on, your schedule and push token are held on our server so reminders can be sent.
• Pseudonymous usage events held by PostHog are kept for 12 months, then purged.
• Push tokens and reminder schedules are removed after 180 days without activity, and immediately when you reset the app. On-device data goes when you uninstall.

5. Your Rights

You have the following rights regarding your personal data:

• Access: your drink log lives only on your device, so you already hold the full copy. For the pseudonymous usage events we hold, write to privacy@trainrboost.com.
• Deletion: uninstalling removes everything on the device. Settings → Reset all data also unregisters your reminders from our server and detaches your analytics identifier.
• Correction: request correction of inaccurate personal data at any time.
• Object to analytics: turn off "Share usage data" in Settings. Lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).

6. Children's Privacy

Cactus is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

7. Contact

For any privacy-related questions, data requests, or concerns, contact us at:

privacy@trainrboost.com