Last Updated: October 12, 2026
This privacy policy applies to the P app for iPhone, iPad, and Apple Watch, including its widgets.
Data Storage and Backup: Your pee logs, including any notes, volumes, and locations you add, are stored on your device. If you’re signed in to iCloud, they sync through your private iCloud account so they’re available on your other devices. The developer of this app can’t access the pee logs stored in your private iCloud data. The sections below describe the limited information P does share, such as the Leaderboard summary, analytics, and purchase records.
Apple Health: If you turn on Handwashing Detection or Water Intake, P asks for permission to read two types of Apple Health data: handwashing events recorded by Apple Watch and water intake. P only reads this data and never writes anything to Apple Health. P uses handwashing events to suggest pees you may have forgotten to log, and it uses water intake to show your water entries alongside your pee pattern in the app and in its widgets. P may check for new entries in the background to keep its badge and widgets up to date. P reads your Apple Health data on your device. It doesn’t upload your Apple Health entries to the developer, to iCloud, or to any third party, and it never uses Apple Health data for advertising or marketing. If you choose to log a suggested pee, P saves it like any other pee, so it syncs through your private iCloud account and is marked as logged from a handwashing suggestion. When you log a suggested pee, P’s analytics record that the pee came from a handwashing suggestion and how long ago it happened, but not your Apple Health entries. If you export a CSV file or PDF, you can choose to include your water intake, and the file goes only where you choose to share it. You can stop P’s access at any time in the Health app or turn off these features in P’s settings.
Leaderboard Feature: P keeps a summary record for your iCloud account in P’s public CloudKit database on Apple’s servers. This record is separate from your private iCloud data, and the developer can see it. It includes the total number of pees you’ve logged, your current and longest streaks, the time of your most recent pee, an emoji based on the average time between your recent pees, your subscription status, how many friends you have, whether you’ve used Buy a Lie, and your P settings, such as reminder timing and quiet hours, so they stay the same on all your devices. The record is identified by a random CloudKit ID, not your name or email address. The Leaderboard is on by default. Once your streak reaches 30 days, other P users may see your ranking number, streak length, total number of pees logged, and badges based on the information above. The Leaderboard never shows your name. You can opt out by turning off the Leaderboard switch in the app settings. This removes you from the Leaderboard, but it doesn’t delete the summary record, because P also uses it to sync your settings.
Sharing and Friends: Friend invitations are sent through iCloud. When someone accepts your invitation, that person can see your name from your iCloud account, the time of your most recent pee, your current streak and whether it includes Buy a Lie, your quiet hours, and whether you can receive reminders. Friends can also choose to get a notification when you log a pee. When you accept a friend invitation, your name becomes visible to that user. Reminders and messages between friends travel through iCloud, and P encrypts custom messages before sending them. Your name is not visible to any other users of the app or the developer, and is not sent anywhere off your device except to users you have accepted as friends.
Location Data: If you enable the “See Where You Peed” feature, location data associated with your bathroom visits is stored privately on Apple’s servers as part of your iCloud data. This location data is not accessible to the developer of this app.
Friend Country Flags: If you enable “See Where You Peed” and a saved pee has a location, P derives a country list from your saved pee locations. The derived country list is used in the app’s UI for your enjoyment. P’s analytics record only how many countries are on the list, never which ones. Country detection happens entirely on your device. If you separately turn on “Show Country Flags to Friends” as part of the friend feature, flags of countries where you peed show to your friends on the app. The published flags never include your raw coordinates, pee timestamps, cities, per-country pee counts, or any other location detail. Turning off “Show Country Flags to Friends” clears the published list so it’s no longer visible to friends.
Water Break and Screen Time: Water Break is optional and off by default. If you turn it on, P asks for Screen Time permission through Apple’s Family Controls framework, and you choose apps, categories, or websites in Apple’s picker. Apple gives P private tokens for your choices instead of the names of the apps or websites, and those tokens stay on your device. When it’s been too long since your last pee, P uses Screen Time to cover the selected apps with a Water Break screen until you confirm you drank water. P doesn’t monitor or record how much you use any app, and it doesn’t send Screen Time data off your device. P’s analytics record only general Water Break events, such as turning it on or off, how many items you selected, when Water Break covers your selected apps, and when you dismiss it. You can turn off Water Break in P’s settings or remove P’s Screen Time access in the Settings app.
Analytics: P uses Google Analytics for Firebase to understand how people use the app and to find problems. It records app events, such as opening a screen, logging a pee, changing a setting, or seeing an offer, along with the time of each event. Some events include counts or durations, such as streak length or how long ago a logged pee happened. Analytics also records device and app details, such as device model, iOS version, language, and app version; an approximate location, such as your country, that Google derives from your IP address; an ID assigned by Firebase; and a random identifier that P creates and stores in your iCloud account so it’s the same on all your devices. Analytics data doesn’t include your name, email address, notes, pee locations, or Apple Health entries. We keep a copy of this data in Google BigQuery for analysis. P also uses Firebase Remote Config to turn features on or off. The P website, pwaterapp.com, uses Google Analytics to count visits and see which pages people read.
Crash Reports and Diagnostics: P uses Sentry to receive crash reports and error details, such as device model, iOS version, app version, and what the app was doing when the problem happened. P sets Sentry not to attach personal information, such as your name. To find and fix sync problems, P also sends technical sync events, such as how long a sync took, how many records it moved, and any error codes, to the developer’s diagnostics server, which is hosted by Cloudflare. These events are tied to a random CloudKit ID for your account, not your name. Pee details, such as pee times, are sent only for an account we’re investigating with that user’s approval. P also sends its own diagnostics server a daily count of pees logged from handwashing suggestions and whether the feature was on at the last check that day, without Apple Health dates or account identifiers; random daily retry IDs are kept for 30 days, and population-wide daily totals are kept for as long as P is available.
Data Protection Promise: The developer of this app will not sell or rent your pee data or your Apple Health data. P is designed so the developer can’t read the pee logs in your private iCloud data, and it shares only the limited information described in this policy.
Purchases: Apple handles all payments, and the developer never sees your payment details. When you buy or subscribe, Apple sends the developer’s server notices about purchases, renewals, cancellations, and refunds. These notices include the product, price, App Store country or region, Apple transaction IDs, and the random identifier described under Analytics. We use them to provide your purchases, to answer support questions, and to understand how subscriptions are doing. When you claim a special offer, P sends the offer and the random identifier to the developer’s server so Apple can confirm the offer is valid. If you purchase a Buy a Lie streak repair, P saves a record of the purchase, including when you bought it, your streak at the time, and the days it covered, in P’s public CloudKit database so it works on all your devices. The developer can see this record.
App Store Refund Requests: If you request a refund through Apple for an in-app purchase or subscription, we may send Apple limited information to help Apple evaluate the request, including whether the purchase was delivered, whether a free trial was available before purchase, and our refund recommendation. For auto-renewing subscriptions, Apple calculates elapsed-time consumption itself. We use this only to help Apple review refund requests, never for advertising or tracking, and it is sent only when you request a refund. By purchasing or subscribing and agreeing to this Privacy Policy, you consent to this sharing.
Advertising Measurement: To measure how well our ads work, the developer’s server sends Meta (Facebook) a record when someone starts a free trial, subscribes, renews, buys a lifetime subscription, or turns off auto-renew. Each record includes the event, product, price, currency, App Store country or region, Apple transaction IDs, and a scrambled (hashed) version of the random identifier described under Analytics. It doesn’t include your name, email address, pee data, or Apple Health data. P doesn’t include Meta’s software, never asks for permission to track you, and can’t access your device’s advertising identifier. If you installed P after tapping an Apple Search Ads ad, P uses Apple’s AdServices framework to record which campaign led to the install.
P records the first tagged link it receives from an App Store page or another source, whether onboarding was still in progress, and the app version. It sends this record and the result of Apple’s advertising attribution check to the developer’s server with the random identifier described under Analytics so the developer can compare arrivals with advertising attribution and purchases. These records don’t include your pee logs, notes, locations, or Apple Health entries. P keeps tagged-link records for up to 400 days and server-side Apple Search Ads attribution records for up to 28 months.
Service Providers: P relies on Apple (iCloud, CloudKit, and the App Store), Google (Firebase and BigQuery), Sentry, Cloudflare, and Meta for the purposes described above. We share data with them only for those purposes, and they are required to give your data the same or equal protection described in this policy.
Keeping and Deleting Your Data: Your pee logs stay in your private iCloud data until you delete them. You can delete individual pees in the app, and you can remove P’s data from your iCloud storage in the Settings app. Deleting P removes the data stored only on your device. You can turn off Apple Health access in the Health app, Screen Time access in the Settings app, and the Leaderboard in P’s settings at any time.
P keeps analytics, diagnostic, and purchase data for as long as P is available, so the developer can compare trends over time and handle support, refunds, and accounting, except for the shorter periods described above for tagged-link records, server-side Apple Search Ads attribution, and handwashing retry IDs. Crash reports are kept for 30 days. P doesn’t currently have a setting to turn off analytics.
Your Leaderboard summary record and Buy a Lie records stay in P’s public CloudKit database until you ask us to delete them by emailing [email protected]. You can also send questions about this policy to that address.
P is a fun way to get reminders to drink water. It is not intended to provide medical diagnosis or advice. You should not use P as a substitute for professional medical advice. If you have medical concerns, you should seek professional medical advice.
Subscriptions: P offers optional premium subscriptions that provide access to additional features. Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. You can manage and cancel subscriptions in your App Store Account Settings.
No Medical Advice: By using P, you acknowledge and agree that the app does not provide medical advice, diagnosis, or treatment. Any health-related information provided is for informational purposes only.
Developer: P is developed and maintained by Ganotis Holdings, Inc.
← Back to Home