1. Who we are
HydroVana is a hydration-focused mobile application designed to help people set a daily hydration goal, record water intake, receive reminders, review hydration history and manage personal settings.
HydroVana is owned and operated by ReverseAgeCode Private Limited, Bengaluru, India (“HydroVana”, “we”, “us”). For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection (FADP), ReverseAgeCode Private Limited is the controller of the personal data described in this policy. For general enquiries and privacy requests, contact hydrovana@reverseagecode.com.
Representatives in Europe
Because we are established outside the EU and the UK and offer HydroVana to people there, we will appoint a representative in the EU under Article 27 GDPR and in the UK under Article 27 UK GDPR where required. Their contact details will be published in this section. Until then, you can contact us directly at the address above for any request.
2. Information we process
The information processed depends on the features you use and what you choose to provide. It may include:
- Account and contact details, such as name and email address, if account features are enabled.
- Profile information you choose to provide, such as age or date of birth, gender, lifestyle, height and weight.
- Hydration information, including daily goals, water-intake logs, timestamps and hydration history.
- Reminder and notification data, such as reminder schedules, notification preferences and device notification tokens.
- Technical, diagnostic and security information, such as device type, operating system, app version, and crash or performance data, if these tools are implemented.
- Payment or transaction information if paid features are introduced. Payments may be handled by the relevant app store or payment provider; we do not intend to receive full card details.
- Health or fitness information you expressly authorise through Apple Health/HealthKit or Android Health Connect, if those integrations are implemented.
- Correspondence, such as messages you send us for support or privacy requests.
HydroVana does not intend to collect precise location, contacts, photos, microphone recordings or unrelated sensitive information unless a future feature requires it, it is disclosed in advance and any required permission or consent is obtained.
3. Purposes and legal bases
We use information only for purposes disclosed when it is collected. For users in the EU, EEA, UK and Switzerland, each purpose relies on a legal basis under Article 6 GDPR (or the equivalent UK and Swiss rules):
- Providing the service — creating and managing your account, recording intake, calculating and displaying goals and progress, sending the reminders you set, and providing support. Legal basis: performance of a contract (Art. 6(1)(b)).
- Processing wellness and health-related information — such as height, weight, activity or data from health platforms, used to personalise goals and features you request. Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)), which you can withdraw at any time.
- Security, fraud prevention and service reliability — protecting accounts, detecting abuse, fixing bugs and diagnosing crashes. Legal basis: our legitimate interests in keeping the service safe and working (Art. 6(1)(f)).
- Improving features — understanding, in aggregated or de-identified form where possible, how features perform. Legal basis: legitimate interests, or consent where analytics tools require it under applicable law.
- Marketing messages, if introduced. Legal basis: consent where required; you can opt out at any time.
- Legal compliance — keeping records, responding to lawful requests and handling rights requests. Legal basis: legal obligation (Art. 6(1)(c)).
Where we rely on legitimate interests, we balance them against your rights and you may object (see section 10). Where we rely on consent, withdrawing it does not affect processing carried out before withdrawal. If you choose not to provide information needed for a feature, that feature may not work.
4. Wellness and health information
HydroVana is a wellness and habit-support app, not a medical device or medical advice service. Information such as hydration patterns, weight, height or activity may be considered data concerning health, a special category of personal data under the GDPR. We therefore:
- process it only with your explicit consent and only for the features you request;
- let you withdraw consent at any time in the app or by contacting us, after which we stop that processing;
- do not use it for advertising, do not sell it, and do not share it with data brokers;
- follow Apple HealthKit and Android Health Connect platform rules if those integrations are implemented;
- do not use it for automated decisions that produce legal or similarly significant effects on you.
5. Sharing and service providers
Information may be processed by service providers that support hosting, authentication, notifications, customer support, analytics, crash reporting or payment processing, if used. These providers act as our processors: they may use the data only on our documented instructions and are bound by written data-processing terms that meet Article 28 GDPR, including confidentiality and security obligations. A current list of key processors is available on request.
We may also disclose information where required by law, to protect rights or safety, to prevent fraud or abuse, or as part of a lawful corporate transaction (in which case this policy, or an equally protective one, will continue to apply).
We do not sell personal information. If a local law defines “sale” or “sharing” more broadly, we will provide the required disclosures and choices.
6. International data transfers
HydroVana is operated from India, and our service providers may process data in other countries. When personal data of users in the EU, EEA, UK or Switzerland is transferred to a country that has not been recognised as providing an adequate level of protection (which currently includes India), we use appropriate safeguards, such as:
- the European Commission’s Standard Contractual Clauses (SCCs);
- the UK International Data Transfer Addendum or Agreement for UK data;
- SCCs adapted for Swiss law for data from Switzerland;
- adequacy decisions, where the destination country benefits from one.
We also assess the transfer and apply supplementary technical and organisational measures where needed. You can request a copy of the relevant safeguards by contacting us.
7. Retention
We keep personal information only as long as necessary for the purposes described in this policy. In general:
- account, profile and hydration data are kept while your account is active and deleted or anonymised after you delete your account, subject to short backup cycles;
- support and privacy-request correspondence is kept for as long as needed to resolve the matter and demonstrate compliance;
- transaction records, if applicable, are kept for the period required by tax and accounting law;
- technical and security logs are kept for limited periods, unless needed to investigate an incident.
Specific retention periods will be confirmed against the live system and published here before launch.
8. Data security
We aim to apply appropriate technical and organisational measures for the risk involved, as required by Article 32 GDPR. These may include limiting access to authorised personnel and processors, access controls, encryption in transit, keeping software supported and reviewing technical issues. The safeguards actually in place depend on the deployed app, hosting, authentication and third-party services. No internet service can guarantee absolute security. See our Data Security page for more.
Please protect your login credentials and tell us if you suspect unauthorised access. If a personal data breach occurs, we will handle it according to applicable law. Where required, this includes notifying the competent supervisory authority within 72 hours of becoming aware of it, and notifying affected users without undue delay where the breach is likely to result in a high risk to them.
9. Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, to withdraw consent, to object to or restrict some processing, and to complain to a data-protection authority. You can also manage notification permissions in your device settings.
For users in India, the applicable rights and mechanisms will be provided as the relevant provisions of the Digital Personal Data Protection Act, 2023 and its rules take effect. Users in California, Canada and other regions may have additional rights under local law. Users in Europe have the rights described in the next section.
10. Additional information for users in the EU, EEA, UK and Switzerland
If you are in the EU, the EEA (EU countries plus Iceland, Liechtenstein and Norway), the UK or Switzerland, you have the following rights under the GDPR, the UK GDPR or the Swiss FADP, subject to legal conditions and exceptions:
- Access — get confirmation of whether we process your data and receive a copy.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted (the “right to be forgotten”).
- Restriction — ask us to limit how we use your data in certain cases.
- Data portability — receive data you provided in a structured, commonly used, machine-readable format, or have it sent to another provider.
- Objection — object to processing based on legitimate interests, and object at any time to direct marketing.
- Withdraw consent — at any time, without affecting earlier processing.
- Not to be subject to solely automated decisions with legal or similarly significant effects. HydroVana does not make such decisions.
How to exercise your rights: email hydrovana@reverseagecode.com with “HydroVana privacy request” in the subject line. We will respond within one month of receiving your request. Where a request is complex or we receive many requests, we may extend this by up to two further months and will tell you why. We may need to verify your identity before acting. Requests are free of charge unless they are manifestly unfounded or excessive.
Right to complain: you can lodge a complaint with the data-protection supervisory authority in the EU or EEA country where you live, work or where an alleged infringement occurred (see the list of EU/EEA authorities). In the UK, contact the Information Commissioner’s Office (ICO). In Switzerland, contact the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to address your concern first, so please contact us.
11. Account and data deletion
To manage your HydroVana account or delete it, follow the steps in our FAQ. You may need to sign in and verify your identity. After deletion, we delete or anonymise your personal data, except where we must keep certain information to comply with a legal obligation, or to establish, exercise or defend legal claims.
12. Children’s privacy
HydroVana is not directed at children. We do not knowingly collect personal information from children below the minimum age permitted in their country without verified parental or guardian consent. In the EU and EEA, the age at which a person can consent to online services ranges from 13 to 16 depending on the country; in the UK it is 13. If you believe a child has given us personal information without the required consent, contact us and we will delete it. If the app is made available to minors, the product’s age rules, notices and parental-consent processes must match the laws and app-store requirements in each market served.
13. Cookies and similar technologies
This website is a static informational site and does not use advertising pixels, analytics scripts or non-essential cookies. Hosting providers may process standard technical logs, such as IP addresses, to deliver and secure the site. If analytics, advertising or other non-essential cookies or tracking technologies are added to the website or app, we will update this policy first. For users in the EU, EEA, UK and Switzerland, we will also ask for your consent before setting them, as required by the ePrivacy rules and local law.
14. Changes to this policy
We may update this policy as the app, our data practices or legal requirements change. The latest version will be published on this page with an updated effective date. Where changes are material, or where the law requires it, we will notify you in the app or by email before they take effect, and will ask for your consent again where needed.
15. Contact and complaints
For privacy questions, rights requests or complaints, contact hydrovana@reverseagecode.com with “HydroVana privacy request” in the subject line. Controller: ReverseAgeCode Private Limited, Bengaluru, India. The registered address, any formal grievance officer required under Indian law, and the EU and UK representative details will be published here before launch.