Privacy Policy
Last updated: January 11, 2026
Data Controller
Gluk is operated by:
PCI YAZILIM DAN ORG LTD STI
Evliya Çelebi Mah Sadi Konuralp Cad. No:5/2
IKSV Binası Şişhane, Beyoğlu, İstanbul, Turkey
Email: support@gluk.ai
1. Information We Collect
Gluk collects the following information to provide personalized hydration tracking:
- Account information: Email address
- Profile data: Weight, age, gender, activity level, hydration goal preference
- Wellness data: Hydration logs (beverages, volumes, timestamps), streaks
- Device information: OS version, app version, device type, crash reports
Data Classification: Gluk collects wellness and behavioral data to help you track hydration habits. This data is NOT classified as health data under GDPR Article 9. Gluk does not diagnose, treat, or monitor any medical condition.
2. Legal Basis for Processing
We process your data based on:
- Contract performance: To provide the hydration tracking service you registered for, including goal calculation, progress tracking, and streak rewards.
- Legitimate interest: To improve app performance, fix bugs, and ensure service security.
- Consent: For optional features such as push notifications and marketing communications. You can withdraw consent anytime in app settings.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, these legal bases correspond to GDPR Article 6(1)(b), (f), and (a) respectively.
3. How We Use Your Information
- Calculate your personalized daily hydration goal
- Track your hydration progress and streaks
- Send reminder notifications (if enabled)
- Improve app performance and fix bugs
- Provide customer support
We do NOT sell your data to third parties.
Automated Decision-Making: Gluk does not perform automated decision-making or profiling that produces legal or similarly significant effects.
4. Data Storage and Security
Your data is stored securely on Supabase servers located in the European Union (EU). We use:
- HTTPS/TLS encryption for data transmission
- Encryption at rest for stored data
- Secure authentication protocols
5. Third-Party Services
We use the following third-party services to operate Gluk:
| Service | Purpose | Data Processed |
|---|---|---|
| Supabase | Database & Authentication | Account, profile, logs |
| Firebase Analytics | Usage analytics | Anonymous usage patterns |
| Sentry | Error tracking | Crash reports, device info |
| RevenueCat | Subscription management | Purchase history |
| Airbridge | Attribution tracking | Install source, anonymous ID |
These services act as data processors on our behalf and are contractually bound to protect your data.
6. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (for Firebase, Sentry, RevenueCat, Airbridge). These transfers are protected by:
- EU Standard Contractual Clauses (SCCs)
- Service providers' compliance with applicable data protection laws
7. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | While account is active | Service provision |
| Hydration logs | While account is active | Service provision |
| Deleted accounts | Removed within 30 days | Legal compliance |
| Crash reports | 90 days | Bug fixing |
| Analytics data | 14 months | Service improvement |
8. Your Rights
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under applicable data protection laws:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Data portability: Export your data in a machine-readable format
- Withdraw consent: For consent-based processing (e.g., notifications)
- Object: To processing based on legitimate interest
- Lodge a complaint: With a competent supervisory authority in your country of residence
Users in other jurisdictions may have similar rights under local laws.
To exercise these rights, contact us at support@gluk.ai. We will respond within 30 days.
9. Children's Privacy
Gluk is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Gluk after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights:
Email: support@gluk.ai
Data Controller:
PCI YAZILIM DAN ORG LTD STI
Evliya Çelebi Mah Sadi Konuralp Cad. No:5/2
IKSV Binası Şişhane, Beyoğlu, İstanbul, Turkey