Parched

Parched Privacy Policy

Effective date: 1 November 2026

Last updated: 3 November 2026

Policy version: 2026-11-01

Summary (plain language, not a substitute for the full policy)

Parched is a water tracker for iPhone, Apple Watch, Android and Wear OS watches, with widgets. So that your drinks follow you to any phone and your groups can see your progress, Parched stores your drinks, your daily goal and your profile on Google Firebase servers in the United States. Using Parched requires signing in with Apple or Google.
We treat your drinks and your daily goal as health information. Your daily goal is saved when your account is created, because the app needs it to show your progress, and each drink is saved when you log it.
The answers you give to work out a personal goal (sex, age, weight, pregnancy or breastfeeding, activity and climate) are used on your phone and are never sent to us. Only the goal you save is stored.
If you join a group, its members see your display name, avatar, daily goal, time zone, today's total and your last drink, and they get a notification when you log a drink. Sending a group's code is your agreement to share this, and the Join with a code sheet says so. Section 7 lists exactly what they see.
Parched has no ads and no tracking, and contains no advertising, usage-analytics or attribution software. We do not sell your personal information or share it for advertising, and we do not use it to train AI models.
Our service providers are Google (Firebase), RevenueCat (subscriptions) and Sentry (crash reports). Apple and Google also handle sign-in, payments, notifications and device checks under their own policies.
If you turn on Apple Health or Health Connect sync, Parched writes the water you log there. It never reads your health data.
In the app you can edit your profile and goal, delete recent drinks, leave groups you've joined, turn off sync and alerts, and delete your account. For anything else, email support@appsbynikki.com.
This summary is an aid to reading the policy. If anything here conflicts with the full text below, the full text controls.

1. Who we are

Parched is operated by an individual developer based in the Philippines ("we", "us"), who publishes it through an Apple Developer Program individual account and a Google Play developer account. The developer's legal name is the Seller shown on Parched's App Store page and the name in the developer contact details on Parched's Google Play page. Apps by Nikki (www.appsbynikki.com) is the name of the developer's website. It is not a company.

Contact for privacy questions and requests: support@appsbynikki.com

We are the controller (the "personal information controller" under Philippine law, or the equivalent term where you live) of the personal information this policy describes. The service providers in section 8 process it for us, under our instructions. Apple and Google act as independent companies when they handle sign-in, store purchases and the device services described in section 8.

Data Protection Officer (Philippines and Singapore; also Privacy Officer for Canada and New Zealand and, for Québec, the person in charge of the protection of personal information): the operator of Parched, support@appsbynikki.com.

2. Scope

This policy covers the Parched apps for iPhone and Android, the Parched apps for Apple Watch and Wear OS, Parched's widgets, and Parched's pages on www.appsbynikki.com (together, "Parched"). Parched is available in selected countries and regions through Apple's App Store and Google Play. Availability may vary by platform and may change over time. It is not offered in the European Union, the wider European Economic Area or the United Kingdom.

This policy doesn't cover services run by Apple or Google, such as the App Store, Google Play, Sign in with Apple, Google Sign-In, Apple Health and Health Connect, which have their own privacy policies. Websites you open from Parched (for example an article's sources) have their own policies too.

You must be at least 13 to use Parched (Terms of Use §2). Section 16 explains how we handle children's information.

If you live in Washington, Nevada or Connecticut, also read our Consumer Health Data Privacy Policy: https://www.appsbynikki.com/parched/health-data

3. Information we collect

Your account

Using Parched requires signing in with Apple or Google, so that your drinks, groups and subscriptions belong to an account. Every Parched account is an account with Firebase Authentication, a Google service. It gives your account a random account ID. We use that ID to keep your information together, and RevenueCat uses the same ID as your customer ID (section 8).

When you continue with Apple, Parched asks Apple for your name and email address. When you continue with Google, it asks Google for your basic profile and email address. Firebase Authentication keeps the email address your Apple or Google account shares (with Sign in with Apple this can be a private relay address that forwards to you), which provider you use, when the account was created and last used and, for Google, your account name and profile photo link. The app itself keeps only your first name, as your starting display name. Parched has no passwords.

Your profile

Your display name (1 to 12 characters). For a new Apple or Google account it starts as the first name on that account, cut to 12 characters. You can change it.
Your avatar style: one of the preset backgrounds shown behind your initials. Parched has no photo uploads.
Your daily goal, in millilitres. It is saved with your profile when your account is created, because the app needs a goal to show your progress.
Your phone's time zone (for example "America/Chicago"), which Parched uses to work out your calendar day. A time zone shows the region you're in.
The first day you used Parched, and when your profile was created and last changed.

Your drinks and history (health information)

Each drink you log: the amount, the time you had it, your calendar day and time zone, and where it was logged from. This includes drinks you add from a widget or a watch (Apple Watch or Wear OS), which reach your account through your phone.
Daily and monthly figures we work out from your drinks for History: totals, number of drinks, whether you met your goal, your first, last and largest drink, and how your drinks spread across the day.
The badges you've earned.

When you delete a drink, it stops counting straight away, but we keep the deleted entry on our servers, marked as deleted, until you delete your account (section 11).

We treat your drinks, your daily goal and everything worked out from them as health information (section 5).

Groups

If you join or own a group: your memberships, your role and when you joined, the join requests you make, the nudges you send and receive, and your challenge entries and results. If you own a group: its name, its invite code, its join requests, its members and the people you've blocked. Section 7 explains who sees what.

Notifications

If you allow notifications, your phone's push token (an address that lets Apple and Google deliver notifications to your phone), which platform it is for and when it was last registered. We keep at most the 10 newest tokens for each account.

Premium subscriptions

Whether you have Premium, which plan, when it renews or ends, and the purchase records that Apple or Google share with us through RevenueCat (section 8), such as the product, dates, renewal status and transaction identifiers. We never receive your card or bank details.

Hub

The articles you save.
When you read an article, a counter for that article and that day goes up by one. The counter doesn't record your account ID or anything else about you. We use the totals to rank articles in the Hub, and delete the counters after 35 days.

Security

To check that requests come from the real Parched app, the app uses Firebase App Check, which asks Apple (App Attest) or Google (Play Integrity) to vouch for your device and app. The result is a short-lived token sent with the app's requests.

Crash reports

If Parched crashes, freezes or hits an error, the app sends a report to Sentry, our crash-reporting service. A report includes what went wrong and where in the code, your device model, your operating system and app versions, device state such as memory, the screens visited just before the error, and a random identifier the crash-reporting software creates for the app installation. Reports don't include your name, email address, account ID, drinks or goal, and they don't record what you tap. As with any internet connection, Sentry receives the network (IP) address a report is sent from. Development builds never send crash reports.

Server logs

Our servers on Google Cloud keep technical logs to run and secure Parched. Some entries include your account ID (for example when a subscription update or an account deletion is processed), and request logs can include your network (IP) address and the type of device or software making the request.

When you contact us

If you email us, we receive your email address and whatever you write.

Where this information comes from

From you: your profile, your drinks and goal, your group activity and your messages to us.
From Apple or Google, when you sign in: the details under "Your account" above.
From Apple or Google through RevenueCat, when you buy or restore Premium: your purchase records.
From your phone: your time zone, push token, device checks and crash reports.

4. Information that stays on your phone

Some information never leaves your phone, or leaves it only to reach your own devices:

Goal calculator answers. If you use Personalise your goal, your answers (sex, age, weight, pregnancy or breastfeeding, activity and climate) are used on your phone to suggest a goal and are never sent to us. Only the goal you save is stored on your account. The answers are cleared when you sign out.
Settings for this phone: your reminders, units, appearance, the Apple Health or Health Connect switch, Group alerts and similar preferences. Reminders are scheduled on your phone.
Hub reading: your reading progress, today's counted reads and your recent searches.
Widgets and watches. To draw your widgets and watch app, Parched keeps a small summary of today on your phone: today's total, your goal and unit, your last drink, and up to 12 of today's drinks. Your iPhone sends the same summary to your Apple Watch; your Android phone sends it to your Wear OS watch through Google Play services, over Bluetooth, or encrypted end to end through Google's servers when the watch and phone aren't near each other. Drinks logged on a widget or the watch wait on your phone until the app adds them to your account. Parched's widgets and watch apps don't connect to Parched's servers themselves.
Drinks waiting to sync. Drinks logged while you're offline wait on your phone until they can be saved.

What Parched keeps on your phone is protected by your phone's own security (its passcode and encryption). The app doesn't add its own encryption. Like other app data, it may be included in your device backups (iCloud Backup on iPhone, Google's backup on Android), under your own backup settings. Parched doesn't put your information in iCloud Drive or CloudKit.

Signing out removes your account's information from the phone, including the copy Parched keeps for offline use. Your unit, appearance, reminder, Group alerts and Health sync settings stay, as settings for the phone, and so do the tips you've closed.

Lock Screen and notifications. Lock Screen widgets on iPhone, and lock-screen widgets on Android, show today's total and the time of your last drink without unlocking your phone, and notifications can appear on your Lock Screen. You control this in your phone's settings.

5. Your health information

We treat your drinks, your daily goal and everything worked out from them as health information. A drink is saved to your account when you log it, in the app, on a widget or on a watch (drinks from a widget or the watch reach your account through your phone, section 4). Your daily goal is saved with your profile when your account is created, because the app needs a goal to work.

You can limit what we hold at any time: delete drinks (today's and yesterday's in the app; email us for older ones), turn off Apple Health or Health Connect sync, or leave the groups you've joined. If you own a group, you can't leave it: remove its members in Manage group, or delete your account, to stop sharing with them. To remove it all, delete your account (section 12), which deletes your drinks and history as that section describes.

6. How we use your information, and our legal bases

We use your information only for these purposes:

To run your account and sync your information across your phones (account, profile, drinks): because it is needed to provide the service you asked for.
To record your drinks and show your progress, History, badges, widgets and watch app: your drinks (section 5), and your daily goal and time zone because they are needed to provide the service you asked for.
To run groups, including member progress, join requests, nudges, challenges and group notifications: because you asked to join or own the group. When you join, sending the group's code is your agreement to share what section 7 describes.
To write your drinks to Apple Health or Health Connect: only when you turn sync on, which is your consent. You can turn it off at any time.
To send group notifications: with your permission and while Group alerts is on. Reminders are scheduled on your phone and don't involve our servers.
To provide Premium: purchase records and subscription status, because they are needed to provide what you bought, and to keep records the law requires.
To keep Parched secure and prevent abuse: device checks, rate limits, server logs and the deleted-account marker described in section 12. This is our legitimate interest in protecting Parched and the people who use it.
To find and fix crashes: crash reports. This is our legitimate interest in keeping the app working.
To handle reports and enforce our Terms of Use: display names, group names, group membership and what you or others tell us. This is our legitimate interest in keeping groups safe.
To rank Hub articles: the read counters and the number of saves for each article, counted without identifying anyone.
To answer you when you contact us, and to comply with the law and valid legal requests: legal obligation.

We do not use your information for advertising, for profiling that has legal or similarly significant effects on you, or to train AI models. Before we use it for a new purpose, we will update this policy and, where the law requires it, ask for your consent.

Giving us information is up to you, but Parched needs some of it. Without an Apple or Google sign-in there is no account to keep your drinks in (section 3).

7. What other people in your groups see

Joining a group is your choice, and has its own agreement. The Join with a code sheet says: "Joining is always free. By sending a code you agree to share your name, avatar, goal and time zone with the group's owner and, once you're in, today's total and last drink with its members." Typing the code's last character sends it, and sending it is that agreement.

While you're a member, every member of that group, including its owner, can see:

your display name, your avatar, your account ID (a random code), your role (owner or member) and when you joined;
your daily goal;
your time zone;
your total for today (or for your most recent day with drinks), and the time and size of your last drink, which appear on the group's page (for example "Sam · 330 mL · 12 min");
which members have nudged you recently and when, and when your last drink alert went out;
during a challenge, the goal you play to, the day you started and the days you met your goal; and after it, the results, with each player's name, avatar, goal days and place.

They also get notifications:

Drink alerts. When you log a drink for today, each other member gets a notification such as "Sam logged 250 mL", at most once every 10 minutes for each group you're in. These can appear on their Lock Screen.
Nudges, challenges and group news, for example "Sam nudged you", a challenge starting, or its results, which can include your name and your place.

The owner of a group also sees:

your join request while it waits for a decision: your display name, avatar, daily goal and time zone;
the people they've blocked, with the display name each person had when blocked.

Members of a group you own can tell that you have Premium, because only Premium accounts own a group. Your account ID is also your customer ID at RevenueCat, so a member with technical skill could use it to see whether you have Premium and when it renews.

Group members don't see your email address, your other drinks, your History, your badges, your saved articles or your Hub reading. They don't see your Apple Health or Health Connect data, which Parched never reads.

You can stop sharing with a group you've joined at any time by leaving it. If you own a group, you can't leave it: remove its members in Manage group, or delete your account, to stop sharing with them. (A group you own also ends when your Premium ends.) The results of challenges you finished stay in that group's history after you leave (section 11).

8. Who receives your information

We share your information only as this section describes. We don't sell it.

Our service providers

These companies process information for us under contracts that limit them to providing their service, require them to keep it confidential and protect it, and bind the companies they use in the same way:

Google (Firebase and Google Cloud): our account system (Firebase Authentication), database (Cloud Firestore), server code (Cloud Functions), notification delivery (Firebase Cloud Messaging), device checks (App Check), storage for Hub pictures (Cloud Storage), storage for our server secrets, and server logs. It holds everything in section 3 except crash reports and emails to us. Our database and server code run in Google's us-west1 region (Oregon, United States).
RevenueCat, Inc. (United States): manages Premium subscriptions. It receives your account ID, the purchase records Apple or Google share, and basic device and app information from its software, such as your platform and app version. It never receives your drinks or your goal.
Functional Software, Inc. (Sentry): crash reporting, as described in section 3. It stores crash reports in its European Union data region (Germany) and keeps them for up to 90 days.
Our email provider, which hosts the support@appsbynikki.com mailbox and holds the emails you send us.

The companies these providers use are listed at https://cloud.google.com/terms/subprocessors and https://firebase.google.com/terms/subprocessors (Google), https://www.revenuecat.com/dpa (RevenueCat) and https://sentry.io/legal/subprocessors/ (Sentry).

Apple and Google

Apple and Google handle these parts of Parched as independent companies, under their own privacy policies (https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy):

Sign-in. Sign in with Apple and Google Sign-In confirm who you are and pass your details to Firebase Authentication. When you delete your account on an iPhone, the app also asks Apple to revoke Parched's access to your Apple account. You can remove Parched's access to your Google account in your Google Account settings.
Payments. The App Store and Google Play sell and bill Premium.
Notifications. Apple's push notification service (on iPhone) and Firebase Cloud Messaging carry notifications, including their text, to phones.
Device checks. App Attest and Play Integrity, for App Check.
Apple Watch. Apple's on-device service carries your summary of today and your watch drinks between your iPhone and your Apple Watch.
Wear OS. Google Play services' Wearable Data Layer carries your summary of today and your watch drinks between your Android phone and your Wear OS watch: over Bluetooth, or encrypted end to end through Google's servers when they aren't near each other.
Connection check. While the app is open, it contacts a Google server about once a minute to check whether you're online.

Apple Health and Health Connect

If you turn on sync, Parched writes your drinks to Apple Health or Health Connect on your phone. That copy is then under your control in those apps and governed by Apple's or Google's terms (section 9).

Other people

Members of your groups, as section 7 describes.
People you send an invite code to, if you own a group and share its code. The invite message includes the group's name.

Websites you open

Article sources and similar links open in an in-app browser. The site gets a normal visit from your browser and may use its own cookies.

Authorities and legal requirements

We disclose information to a government authority or anyone else only when the law requires it (for example under a valid court order, subpoena or warrant) or when it is needed to protect someone from serious harm. We tell you about a request for your information unless the law forbids it.

If Parched changes hands

If the developer transfers Parched to someone else, your information would go to them only if they keep to this policy. We will tell you in the app before that happens.

No AI services

Parched doesn't send your information to any AI service. Hub articles were written with the help of AI tools from published sources before they were published, and no personal information was involved.

We require each of our service providers to protect the information it handles for us to at least the standard this policy describes.

9. Apple Health and Health Connect

Sync is off until you turn it on in Settings. Parched then asks your phone for permission to write water data, and writes one entry for each drink you log (the amount and the time). Editing or deleting a drink in Parched updates or removes its entry. Turning sync on doesn't copy drinks you logged before.
Parched only writes. It never reads from Apple Health or Health Connect, and nothing from them reaches our servers.
Turning sync off, or deleting your Parched account, stops new entries but leaves the entries already there. You can delete them in the Health app or in Health Connect.
We don't use data from Apple Health or Health Connect, or the health information you give us, for advertising, marketing or data mining. We don't sell it, and we don't share it with advertisers, data brokers or information resellers. We don't use it to make decisions about credit, insurance or employment.
Parched doesn't store health information in iCloud.
Parched's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

You can change Parched's access at any time: on iPhone in the Health app or in Settings → Privacy & Security → Health; on Android in Health Connect's app permissions.

10. No selling, no ads, no tracking

We do not sell your personal information. In the last 12 months we have not sold personal information, or shared it for cross-context behavioural advertising, and that includes health information.
Parched shows no ads and contains no advertising, usage-analytics or attribution software. It doesn't track you across other companies' apps or websites, and no other company collects information about your activity across apps or websites through Parched.
Do Not Track and Global Privacy Control. Because we don't track you, and don't sell or share your information for advertising, a Do Not Track or Global Privacy Control signal has nothing to switch off, so we don't change anything in response to one. If that ever changes, we will treat a Global Privacy Control signal as a valid request to opt out.
Direct marketing. We do not disclose personal information to third parties for their direct marketing purposes. We don't send you marketing.
AI training. We do not collect, use or sell personal information to train large language models or other AI models.
We have no actual knowledge of selling or sharing the personal information of anyone under 16.

11. How long we keep information

Your account, profile, drinks, History, badges, saved articles and group memberships: until you delete your account.
Deleted drinks: kept, marked as deleted, until you delete your account. Email us if you want particular ones removed sooner.
Group information: your membership ends when you leave, are removed or the group ends. A group's own information (name, members, requests, blocks and challenges) is deleted when the group ends, which happens when its owner's Premium ends or the owner deletes their account.
Join requests: until the owner decides, the group ends or you delete your account. A request waiting for a decision doesn't expire.
Blocks: if a group owner blocks you, the block, with your display name at the time, stays until they unblock you, the group ends or you delete your account.
Finished challenges: the results of a challenge you played (your display name, avatar and account ID, the goal you played to and the days you met it) stay in that group's history until the group ends, even if you leave the group or delete your account.
Nudges you received: until you or the sender leaves the group, or either account is deleted.
Push tokens: until you sign out, turn off Group alerts, the token stops working or you delete your account.
Subscription records: our copy of your Premium status is deleted with your account. RevenueCat's record is deleted when you delete your account, except as section 12 describes.
Hub read counters: 35 days. They never identify you.
Crash reports: up to 90 days, at Sentry.
Server logs: most server logs up to 30 days; Google's required audit logs up to 400 days.
Backups: after we delete information, copies can remain in Google's backup systems for up to about 180 days before they are overwritten.
Deleted-account marker: see section 12.
Emails to us: for up to 2 years, so that we can show how we handled a request or report, unless the law requires longer.
On your phone: until you sign out or delete the app (section 4).

When we no longer need information, we delete it or make it anonymous.

12. Deleting your account

In the app

Open Settings (the avatar at the top of the screen), then tap Delete account. You'll be asked to sign in again with Apple or Google to confirm. You need an internet connection.

Deleting your account:

deletes your profile, your drinks (deleted ones included), History, badges, saved articles, subscription status, push tokens and sign-in account;
removes you from every group you're in, along with the nudges between you and other members;
ends the group you own, if any, for everyone, and tells its members;
removes your join requests and any blocks naming you;
asks RevenueCat to delete your customer record (see below);
on iPhone, asks Apple to revoke Parched's access to your Apple account;
turns off reminders and Health sync on that phone and signs you out.

Deletion runs while you wait. A nightly check finishes any part that couldn't complete.

Deleting your account doesn't cancel Premium. Your subscription is billed by Apple or Google, so cancel it in the App Store or Google Play first (the delete screen shows how), or it will keep renewing.

What remains after deletion, and why

Finished challenge results in groups you played in (section 11), as part of that group's shared history, until the group ends. Email us and we will remove your name and avatar from them.
A deleted-account marker: your former account ID and when the deletion started and finished, kept permanently, so that a sign-in left on another phone can't bring the account's data back. It holds nothing else.
RevenueCat's record, if Premium is still active when you delete your account, so that the store can complete the subscription. Email us after the subscription has ended and we will have it deleted.
Copies in backups and logs, for the periods in section 11, and crash reports, which never contained your account ID.
Entries in Apple Health or Health Connect, which are yours to delete there.
Anything the law requires us to keep, such as information an authority has ordered us to preserve, for as long as it requires.

Without the app

Email support@appsbynikki.com from the email address of the Apple or Google account you use with Parched. The steps are at https://www.appsbynikki.com/parched/delete-account. We confirm by replying to that address, delete the account within 30 days of your confirmation, and tell you when it's done.

13. Security

We protect your information with measures suited to its sensitivity, including:

encrypted connections (HTTPS/TLS) between the app, our servers and our service providers;
Google's encryption of the data it stores for us;
database rules that let each account read and change only its own information, with shared group information written only by our server code after it checks who is asking;
App Check, so that requests have to come from the real app, and rate limits on joining groups, nudging and notifications;
a fresh sign-in before an Apple or Google account can be deleted;
server secrets kept in Google's secret storage, not in the app;
access to stored information limited to the operator, only to run, secure and support Parched.

No system is completely secure. Parched doesn't use end-to-end encryption: we and our service providers can read the information stored on our servers, as needed to provide the service.

If something goes wrong. We keep a record of every breach of our safeguards. If a breach affects your personal information, we assess it promptly and notify regulators and the people affected as the law requires. Where Philippine law requires notification (a breach involving sensitive personal information, such as health information, that could cause real risk of serious harm), we notify the National Privacy Commission and the people affected within 72 hours of learning of it. In other places we notify, for example, the Office of the Privacy Commissioner of Canada (and, for Québec, the Commission d'accès à l'information), the Office of the Australian Information Commissioner, New Zealand's Privacy Commissioner, Singapore's Personal Data Protection Commission, the US Federal Trade Commission or a US state attorney general, within the time their law sets. We tell you by email where your account has an email address, and in the app or on our website.

14. International transfers

Parched is operated from the Philippines, and the operator accesses information from there. Your information is stored and processed:

in the United States, by Google (our database and server code run in Oregon) and RevenueCat. Google's account and notification services also run in other countries where Google operates;
in Germany, for crash reports (Sentry);
in the Philippines, when the operator accesses it to run and support Parched;
by Apple and Google, under their own policies, and by our email provider, in the countries where they operate.

The laws of these countries may differ from yours, and their courts, law enforcement and national security authorities may be able to access information under their own laws. If you're in Canada, your information is processed outside Canada, and if you're in Québec, outside Québec. If you're in Australia, we are likely to disclose your personal information to overseas recipients in the United States, Germany and the Philippines.

We remain responsible for your information when our service providers process it for us, and we protect each transfer by contract: Google's Cloud Data Processing Addendum and Firebase Data Processing and Security Terms, RevenueCat's Data Processing Addendum and Sentry's Data Processing Addendum. Each requires the provider to protect your information, use it only to provide its service to us, and keep it confidential. Ask us at support@appsbynikki.com for more detail.

15. Your rights

You can do these things in the app at any time:

Correct your display name and avatar (Settings → tap your avatar) and your daily goal (Settings → Daily goal).
Delete drinks from today or yesterday (History → 7 days → the day → the drink → Delete drink). Older days can't be changed in the app; email us.
Leave a group you've joined (Groups → Leave group). If you own a group, you can't leave it: remove its members in Manage group, or delete your account, to stop sharing with them.
Stop notifications (Settings → Group alerts and Reminders, or your phone's notification settings).
Turn off Apple Health or Health Connect sync (Settings).
Unsave articles and clear recent searches (Hub).
Delete your account (section 12).

For anything else, such as a copy of your information, email support@appsbynikki.com. Requests are free. We give you a copy of the information we hold about your account in a common machine-readable format (JSON), with a plain explanation of what it contains. We won't treat you differently for using any of your rights.

Verifying requests. To protect your account, we act on an emailed request when it comes from the email address of the Apple or Google account you use with Parched, or after we confirm it through that address. You can ask someone else (an authorised agent) to make a request for you; we will ask for your signed permission and may confirm with you directly.

Wherever you live, you have the rights above and any others your local law gives you. We answer within the time your law sets, or within 30 days where it sets none. The sections below give the rules and response times of particular countries.

United States

The rights in this section apply to everyone in the United States, whichever state you live in. Some state laws, such as Connecticut's Data Privacy Act, require them; we give them to all US users.

What we collect, in the categories US privacy laws use: identifiers (your account ID, the email address held by our sign-in service, your push token, and the network address in server logs and crash reports); personal records (your name); commercial information (Premium purchase records); internet or other electronic activity (Hub saves, group activity, crash reports and server logs); your approximate region (time zone); and sensitive information, namely health information (your drinks, your daily goal and the figures worked out from them). We collect it from the sources in section 3, use it for the purposes in section 6 and disclose it to the service providers in section 8 for those purposes. We don't collect your precise location, biometric data, government ID numbers or financial account details.

Sensitive information. We use your health information only to provide Parched as you asked, and not to infer anything else about you (section 5). If you live in Washington, Nevada or Connecticut, also see our Consumer Health Data Privacy Policy: https://www.appsbynikki.com/parched/health-data

Your rights. You can:

confirm whether we process your personal information, and get a copy of it;
correct inaccurate information;
delete it;
get it in a portable, machine-readable format;
withdraw a consent you gave;
opt out of the sale of your personal information, targeted advertising and profiling with legal or similarly significant effects (we do none of these).

We answer within 45 days. If we need up to 45 more days, we tell you why within the first 45.

Appeals. If we turn down a request, we tell you why. You can appeal by emailing support@appsbynikki.com with "Appeal" in the subject line. We decide within 45 days and tell you the outcome and our reasons in writing. If we still turn it down, you can complain to your state attorney general, for example in Connecticut (https://portal.ct.gov/ag), Washington (https://www.atg.wa.gov/file-complaint) or California (https://oag.ca.gov/contact/consumer-complaint-against-business-or-company).

Not covered by HIPAA. Parched is not a healthcare provider or health plan, and HIPAA doesn't apply to it. We protect your information as this policy describes.

Canada

Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle the personal information of people in Canada. If you live in Québec, Québec's Act respecting the protection of personal information in the private sector also applies (see "Québec" below).

Privacy Officer: the operator of Parched, support@appsbynikki.com.
Your rights. You can ask whether we hold personal information about you, for access to it and a copy, and for it to be corrected if it is wrong or incomplete. You can withdraw your consent, subject to legal and contractual limits; we tell you what withdrawing means for the service before we act on it. We reply in writing within 30 days. If we need up to 30 more days, we tell you why within the first 30. Access is free.
Your information is processed outside Canada, in the countries listed in section 14, where it is subject to those countries' laws and may be accessed by their courts, law enforcement and national security authorities.
Breaches. If a breach of our safeguards creates a real risk of significant harm to you, we report it to the Office of the Privacy Commissioner of Canada and tell you, as section 13 describes. We keep a record of every breach for at least 24 months.
Complaints. Please contact us first. We look into it and reply in writing within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca).

Québec

Person in charge of the protection of personal information: the operator of Parched, support@appsbynikki.com.
Who can see your information. Inside Parched, only the operator can access personal information, and only to run, secure and support the service. Everyone else who receives it is listed in sections 7 and 8.
Outside Québec. Your information is communicated outside Québec (section 14). Before doing so we assessed the privacy risks for each service provider, and we rely on written agreements with them.
Sensitive information. Your drinks and daily goal are sensitive information. Each drink is saved when you log it, and your daily goal when your account is created, because the app needs it to work (section 5).
Default settings. Apple Health or Health Connect sync is off until you turn it on. Notifications are off until you allow them. The goal calculator is used only if you choose to, and its answers stay on your phone.
Profiling. The goal calculator suggests a goal from your answers, on your phone, and only if you use it (section 17). We use no other technology to profile you, and Parched never uses your location.
Keeping and destroying information. We keep information only as long as sections 11 and 12 describe, then destroy it or make it anonymous.
Your rights. You can ask for access to your information, its correction, a copy in a structured, commonly used technological format, and the withdrawal of your consent. We reply in writing within 30 days.
Incidents. If a confidentiality incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people affected, and we keep a register of incidents.
Complaints. Send privacy complaints to support@appsbynikki.com. The person in charge of the protection of personal information reviews each one and replies in writing within 30 days. You can also complain to the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca).

Australia

We handle personal information about people in Australia in line with the Australian Privacy Principles in the Privacy Act 1988.

Access and correction. Email support@appsbynikki.com. We respond within 30 days and don't charge you.
Not identifying yourself. Using Parched requires signing in with Apple or Google, so that your drinks, groups and subscriptions belong to an account. Your display name doesn't have to be your real name, and Sign in with Apple lets you hide your email address.
Health information. We collect your daily goal when your account is created, as part of setting up the app you asked for, and each drink when you log it (section 5). We use both only to provide Parched.
Overseas recipients. We are likely to disclose your personal information to overseas recipients in the United States, Germany and the Philippines (section 14).
Breaches. If an eligible data breach is likely to cause you serious harm, we notify the Office of the Australian Information Commissioner and you as soon as practicable.
Complaints. If you think we've breached the Australian Privacy Principles, email support@appsbynikki.com and tell us what happened. We look into it and reply within 30 days with what we found and what we will do. If you're not satisfied, or you haven't heard back within 30 days, you can complain to the Office of the Australian Information Commissioner (https://www.oaic.gov.au).

New Zealand

New Zealand's Privacy Act 2020 applies to how we handle personal information about people in New Zealand.

Privacy officer: the operator of Parched, support@appsbynikki.com.
Access and correction. Email us. We respond as soon as we reasonably can, and within 20 working days.
Overseas. Our service providers hold your information overseas on our behalf (sections 8 and 14).
Breaches. If a privacy breach is likely to cause anyone serious harm, we tell the Privacy Commissioner and the people affected as soon as practicable.
Complaints. Please raise it with us first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner (https://www.privacy.org.nz).

Singapore

If Singapore's Personal Data Protection Act 2012 (PDPA) applies to you, you can ask for access to your personal data and for information about how it has been used or disclosed in the past year, ask us to correct an error or omission in it, and withdraw your consent to our collecting, using or disclosing it. Withdrawing consent may mean we can no longer provide some or all of the service; we tell you what it means before we act on it. We respond as soon as reasonably possible. If we need more than 30 days, we tell you within those 30 days when we will respond.

Transfers out of Singapore. Your personal data is transferred to the countries in section 14 because that is needed to provide the service. Our service providers are bound by the contracts in section 14 to protect it to a standard comparable to the PDPA.
Legitimate interests. We rely on the legitimate interests exception, after assessing that our interests outweigh any adverse effect on you, for security and abuse prevention, crash reports and handling reports about groups. Ask our Data Protection Officer if you'd like more information about these assessments.
Data Protection Officer: support@appsbynikki.com.
Complaints. Email our Data Protection Officer and we will reply in writing. If you're not satisfied, you can complain to the Personal Data Protection Commission (https://www.pdpc.gov.sg).

Philippines

Parched is operated from the Philippines, and we follow the Data Privacy Act of 2012 for the personal information we process. These rights apply to you wherever the Act applies.

Our legal bases: the service you asked for (including your daily goal), our legitimate interests (section 6) and legal obligations.
Your rights. You have the right to be informed, to object, to access your personal information, to have it corrected, to have it erased or blocked, to receive a copy in a commonly used electronic format, and to be compensated for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your personal information. Your heirs can exercise these rights after your death or incapacity.
Response time. We respond within 30 working days. If a request is complex, we may take up to 15 more working days and will tell you why.
Data Protection Officer: the operator of Parched, support@appsbynikki.com.
Complaints. You can complain to the National Privacy Commission (https://www.privacy.gov.ph).

United Kingdom and European Economic Area

Parched isn't offered in the United Kingdom, the European Union or the wider European Economic Area. If data protection law there nonetheless applies to you, you have the right to access, correct and erase your personal information, to restrict or object to certain processing, to data portability, to withdraw consent at any time where we rely on it, and to complain to your data protection authority (in the UK, the Information Commissioner's Office, https://ico.org.uk). We have not appointed a representative in the UK or the EU, because Parched isn't offered there; we will appoint one before it is.

16. Children

Parched is not directed to children under 13, and you must be at least 13 to use it. If you're under 18 (or under the age of majority where you live), a parent or guardian must agree to the Terms of Use for you (Terms of Use §2). We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and its information. If you believe a child under 13 is using Parched, email support@appsbynikki.com.

The goal calculator is designed for adults and accepts ages from 18 to 100.

17. Automated decisions and profiling

The goal calculator works out a suggested daily goal on your phone, from your answers, using published research that the app shows you ("How it's worked out"). It is only a suggestion, and you can change your goal at any time. Parched works out other things automatically too, such as whether you met your goal, which badges you've earned and challenge results. None of this has legal or similarly significant effects on you, and we make no automated decisions that do.

18. Permissions

Notifications: for group alerts and reminders. You can allow or stop them at any time in your phone's settings, and switch off Group alerts or Reminders in Parched's Settings. Parched works without them.
Apple Health or Health Connect: permission to write water data, only if you turn on sync (section 9).
Sign in with Apple or Google: only if you choose to use an account.

Parched doesn't ask for access to your location, contacts, photos, camera or microphone.

19. Changes to this policy

If we change what information we collect, who receives it or why, we will update this policy, change its version and the "Last updated" date at the top, and tell you in the app or by email before a material change takes effect. Before we collect new kinds of health information, or use it for a new purpose, we will ask for your consent. Earlier versions of this policy are available on request.

20. Contact

Questions about this policy, and requests to use any of the rights above: support@appsbynikki.com.

Data Protection Officer (Philippines and Singapore); Privacy Officer (Canada and New Zealand); person in charge of the protection of personal information (Québec): the operator of Parched, support@appsbynikki.com.

Apps that look good and feel right.

What we've built.

Parched

The Panel

The New Hollywood

We're Nikki and Romeo.

Let's build yours.

Mobile apps

Websites