Glug ("the app", "we", "us") is a hydration tracking app. This policy explains what data the app handles and how.
Everything you enter about yourself — your name, your fish's name, your weight, your body and lifestyle answers, and your full drink history — stays on your device. Glug does send a small stream of anonymous product-usage events to a third-party analytics service (PostHog) so we can see which parts of the app people use. Those events are not linked to your name or to any account, and they never contain your profile answers or your drink history.
Glug stores the following locally, using Apple's UserDefaults and an App Group container shared with the Glug widget. None of it is transmitted to us or to anyone else:
Glug uses PostHog for product
analytics. Events are sent to PostHog Cloud US at
https://us.i.posthog.com.
PostHog assigns a randomly generated identifier to your installation of the app. It is created on the device, it is not your Apple ID or your email address, and Glug never associates it with your name. Deleting and reinstalling the app produces a new one.
Glug sends these events:
onboarding_started,
onboarding_screen_viewed (which setup screen you reached),
onboarding_paywall_reached,
onboarding_completed
first_water_log,
drink_logged (the size of the drink in ounces, and whether
it was your first of the day), goal_completed (your current
streak length)
decor_unlocked,
decor_unlock_shown, decor_unlock_tap,
item_purchased, item_equipped,
item_unequipped (which decoration, its point cost, and your
point balance)
subscription_converted
(which plan you chose — monthly, annual, or lifetime)
The PostHog SDK also automatically records app lifecycle events (installs, launches, updates) and screen views, along with standard technical metadata such as your device model, iOS version, app version, locale and time zone. Your IP address is visible to PostHog when an event is sent, and PostHog may use it to derive an approximate, city-level location.
Glug does not send your name, your fish's name, your weight, sex, age range, symptoms, wake and sleep times, or your drink history to PostHog. Glug does not use PostHog's session recording, heatmap, or autocapture-of-taps features, and it does not enable PostHog's crash reporting. Glug does not use advertising SDKs, does not track you across other companies' apps or websites, and does not sell or share your data for advertising.
Glug uses Apple's in-app purchase system (StoreKit) for subscription billing. All payment processing is handled by Apple. Glug does not see or store your payment information.
Glug uses RevenueCat to manage subscription entitlements. RevenueCat receives a pseudonymous device identifier and your purchase and subscription status in order to tell the app whether Glug Pro is active. No name, email address, or payment details are shared. See RevenueCat's Privacy Policy.
If you enable reminders, Glug schedules local notifications on-device. These notifications are generated by the app and are never sent to external servers.
Glug does not access or write to Apple Health / HealthKit.
Glug is not directed at children under 13 and does not knowingly collect data from them.
Deleting the app from your device removes everything Glug has stored locally — your profile, your drink logs, your streak, and your decorations. This is permanent and cannot be undone; Glug keeps no backup and no cloud copy.
To have the anonymous analytics events associated with your installation deleted from PostHog, email tomgirgashjr@gmail.com. To request deletion of your subscription records, contact us at the same address; purchase records held by Apple are governed by Apple's Privacy Policy.
If this policy changes materially, we'll update the "Last updated" date above and note the change in the App Store release notes.
Questions? Email tomgirgashjr@gmail.com.