Version 1.0 · Effective 24 June 2026
Glen Muthoka built Hydrate and Somnus as free apps. They are provided at no cost and intended for use as is. This page explains the policies around the collection, use, and disclosure of personal information for anyone who uses them.
By using either app you agree to the practices described here. Any information involved is used to provide and improve the apps, and it is never shared with anyone except as set out below. As more of my apps reach the Google Play Store and the App Store, this same policy will cover them too.
There are no ads in these apps, and there never will be. I don't sell your data, and the apps are not built to make money from it — your information exists only to make the app work for you.
For data-protection law, including the EU and UK GDPR, the person responsible for your information — the data controller — is Glen Muthoka, reachable at [email protected]. The apps are available worldwide, so this policy is written to respect the rights people have under the GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA and CPRA), the Children's Online Privacy Protection Act (COPPA), and similar laws wherever you live.
Information Collection and Use
Neither Hydrate nor Somnus asks you to create an account or to hand over personal details such as your name, email address, or location. The records you create — the drinks you log in Hydrate, the sleep sessions you keep in Somnus, and the goals, reminders, and notes that go with them — are stored on your device and are not collected by me in any way. They stay with you, and removing them is as simple as deleting an entry, clearing the app's data, or uninstalling the app.
The apps may rely on third-party services that can collect information used to identify you. Those services are described under Service Providers below.
Legal Basis for Processing
Under the GDPR I only handle information where the law allows it. For the records you create, that basis is your consent, given when you choose to enter and save them; you can withdraw it at any time by deleting the data or removing the app. For the limited diagnostics described under Log Data, the basis is my legitimate interest in keeping the apps stable and secure, weighed against the minimal, non-identifying nature of what is collected.
Data Retention
The records you create stay on your device for as long as you keep them and are gone the moment you delete them, clear the app's data, or uninstall it. Any diagnostic information is kept only for as long as it is useful for finding and fixing a problem, and is discarded afterwards.
Log Data
Whenever the app runs into a problem, I may collect data and information — through third-party products — on your device, known as Log Data. This can include details such as your device's Internet Protocol (IP) address, device name, operating system version, the app's configuration at the time, the date and time of the error, and other diagnostics. I use this only to understand what went wrong and to make the apps more reliable.
Cookies
Cookies are small files, often used as anonymous unique identifiers, that a website sends to your browser and that are stored on your device. These apps do not use cookies themselves. Some third-party code or libraries they include may use cookies to collect information and improve their own services, and you are free to accept or refuse them — though refusing may stop parts of a service from working as intended.
Service Providers
From time to time I may work with third-party companies and individuals to help run the apps — to deliver them, to carry out service-related work, or to understand how they are used. These providers may have access to your information so they can perform that work on my behalf, and they are bound not to disclose or use it for anything else. Where an app depends on platform services such as Google Play services, your use of those services is also governed by their own privacy policies.
International Data Transfers
Because your records live on your own device, they are not routinely sent across borders. Where a third-party service such as crash reporting does process information, that provider may handle it on servers outside your country, including outside the EEA or the UK. In those cases the provider is responsible for protecting the transfer through recognised safeguards such as the European Commission's Standard Contractual Clauses.
Security
I value the trust you place in providing your information and aim to protect it using commercially acceptable means. Because almost everything the apps store stays on your device, there is very little to transmit in the first place. Even so, no method of electronic storage or transmission over the internet is completely secure, so I cannot guarantee its absolute security.
Links to Other Sites
The apps may contain links to other sites. Following one will take you to a site I do not operate, so I encourage you to review the privacy policy of any site you visit. I have no control over, and take no responsibility for, the content or practices of third-party sites and services.
Your Rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access the personal data held about you, to correct it, to have it erased, to restrict or object to how it is used, to receive it in a portable form, and to withdraw any consent you have given. Because almost everything these apps hold sits on your own device, you already exercise most of these rights directly — you can view, edit, export where the app offers it, and delete your records yourself at any time. If you ever need my help with a request, email me and I will respond within the time the law allows. You also have the right to complain to your local data-protection authority, which in the UK is the Information Commissioner's Office.
If you are a California resident, the CCPA and CPRA give you the right to know what personal information is collected and how it is used, to have it deleted, to correct it, and to opt out of its sale or sharing. I do not sell or share your personal information and never have, so there is nothing to opt out of — but you keep every other right, and exercising any of them will never lead to worse treatment or a reduced service.
Children's Privacy
These apps are made for a general audience and are not directed at children. In keeping with the U.S. Children's Online Privacy Protection Act (COPPA), I do not knowingly collect personal information from children under 13, and under the GDPR the same care extends to children below the age of digital consent in their country, which ranges from 13 to 16. If I learn that a child below the relevant age has provided personal information, I delete it straight away. If you are a parent or guardian and believe your child has shared information with me, please get in touch so I can take the necessary steps.
Changes to This Privacy Policy
I may update this policy from time to time, so it is worth checking this page now and then. Any changes are published here and take effect as soon as they are posted. Each revision carries its own version number and effective date at the top of this page, so you can always tell which version applies — small wording fixes bump the minor number, while changes to what is collected or how it is used bump the major one.
Contact
If you have any questions or suggestions about this Privacy Policy, please don't hesitate to reach me at [email protected].