Privacy Policy
- From
- Hydara LLC
- Version
- 0.1
- Effective
- November 2026
- Earlier versions
- None. This is the first version.
What this covers
How Hydara LLC collects, uses, shares and keeps personal information when you visit hydara.com, send us a form or an email, and, once you have a Hydara unit, use the Hydara app and water-care service.
- We do not sell personal information or use it for advertising.
- The website uses no advertising or analytics cookies.
- You can ask for a copy of your data, or ask us to delete it.
About this policy
This policy covers hydara.com, the Hydara app (including its web version at app.hydara.com) and Hydara's water-care service. Hydara LLC is responsible for the personal information described here. "Hydara", "we" and "us" mean Hydara LLC.
The Hydara app and parts of the service are still being built. Where this policy describes something that has not started yet, it says so, and we will update this policy before it starts.
What we collect on the website
Forms you send
When you send a form on the website, such as the contact form, a service request, a partner application or an account deletion request, we receive what you enter. Depending on the form, that is your name, email address, phone number, ZIP code, details about your property and tub, your company's details if you run a pool or spa business, your message, and whether you want marketing email from us. If you recommend a service company to us, we also receive the company details you give.
Website forms are not stored in a database. Each one is sent by email to Hydara staff through our email delivery provider, Resend, and kept in Hydara's company mailbox.
Website forms never ask for consent to text messages. You can choose text alerts only in the Hydara app (see the SMS Terms).
Checks that stop spam and abuse
Pages with a form load Cloudflare Turnstile, which checks that a person is sending the form. To run the check, Cloudflare processes technical information about your browser, device and connection, including your IP address.
We also count the forms sent from each connection, using its IP address, and pause a connection that sends too many. Each count is cleared after 10 minutes.
Hosting logs
Vercel hosts the website. It records each request in its logs, including the IP address, the page requested, the time and the browser's description of itself (its user agent). We use these logs to run the website, fix problems and stop abuse.
Emails you send us
If you email us, we receive your email address and what you write, and keep it in Hydara's company mailbox.
What we collect when you use the Hydara service and app
The Hydara app is not available yet. When the app and the water-care service start under this policy, we will collect the following to provide the service.
- Account details: your name, email address, phone number and sign-in details. If you sign in with Apple or Google, we receive your name and email address (or Apple's private relay address) from them.
- Your property and tub: the service address, details about the tub, and any access notes you give us or your partner for service visits.
- Tub readings from the unit: the controller on your tub measures pH, ORP, temperature and TDS. We receive these readings with the time each was taken, along with the controller's own records, such as its settings and dosing records.
- Hand-test logs: results you or your partner enter for tests done by hand, such as free chlorine, calcium hardness and total alkalinity, with who entered each one and when.
- Alerts: the alerts we send about your tub, who received them, and any response.
- Photos: photos you or your partner's technician add in the app, for example of a hand test or of the installation.
- App and device information: your device type, the app version, a push notification token, and error reports that help us fix the app.
- Support: your messages to us and our replies.
- Billing: your billing address and payment history. Card details are handled by our payment processor, Stripe. Hydara does not store full card numbers.
Tub readings and alerts can show when a home is likely occupied or empty. We treat that as sensitive and limit who can see it.
Your Wi-Fi password
Hydara does not keep Wi-Fi passwords in its systems. How a new unit joins your home network has not been settled yet; we will describe it here once it is.
How we use information
- To answer your messages and requests, including service requests from ZIP codes where Hydara is not available yet.
- To review applications from pool and spa companies that want to become Hydara partners.
- To provide the water-care service: showing your tub's readings in the app, watching the readings, sending alerts, connecting you with your partner, handling warranty work, billing and support.
- To check that the unit and the service work as intended, including during pilot testing, and to improve them.
- To keep the website, the app and accounts secure, and to stop spam, fraud and abuse.
- To meet legal duties, such as keeping tax records, and to protect our legal rights.
- To send marketing email, only if you ask for it. Every marketing email has an unsubscribe link.
We do not sell personal information. We do not use it for advertising, and we do not track you across other companies' apps or websites.
Who we share it with
Service providers
Companies that run parts of Hydara for us, listed under Service providers.
Your Hydara partner
A local Hydara partner installs the unit, does the service visits and is your first contact. Hydara may act as your partner. Your partner sees only the customers and tubs assigned to it, including those tubs' readings, hand-test logs and alerts, for as long as it serves you. A partner never sees another partner's customers.
People on your account
If you invite someone to your account, such as a co-owner or a property manager, they see what their role allows.
The controller platform's provider
The controller on your tub reports its readings to its provider's cloud platform, where they are held under Hydara's account, and Hydara reads them from there.
Financing
If financing is offered and you apply, the financing provider collects your application and handles it under its own privacy policy. We share only the order and payment details needed to link the financing to your order.
When the law requires it
We share information when the law requires it, such as for a valid court order or a lawful request from a public-health authority. We review each request before answering it.
Text messages
We do not share your mobile number or your consent to text messages with anyone for their own marketing.
Service providers
These companies handle personal information for Hydara. Each provider may use the information only to provide its service to Hydara, under its data processing terms.
| Provider | What it does for Hydara | Information it receives |
|---|---|---|
| Vercel | Hosts hydara.com | Request logs, including IP addresses |
| Cloudflare | Runs the Turnstile check on website forms | Technical information about your browser, device and connection, including your IP address |
| Resend | Delivers website forms to Hydara staff by email | What you enter in a form |
| Google Workspace | Runs Hydara's company mailbox | Website forms and the emails you send us |
| Upstash | Counts form submissions to stop abuse | IP addresses, cleared after 10 minutes |
| Provider | What it does for Hydara | Information it receives |
|---|---|---|
| Supabase | Stores accounts, tub readings, hand-test logs, alerts, photos and service records | The account and tub information described above |
| Stripe | Takes payments and runs billing | Name, email address, phone number, billing and service addresses, and payment details |
| The controller platform's provider | Runs the cloud platform the controller on your tub reports to | Your tub's readings and the controller's records and settings |
| Twilio | Sends text alerts, if you choose them | Mobile number, message text, and opt-in and STOP records |
| Resend | Sends account, alert and report emails | Email address, name and message text |
| Expo, Apple and Google | Deliver push notifications | Push tokens and notification text (your tub's nickname, never your address) |
| Apple and Google | Let you sign in | Name and email address, or Apple's private relay address |
| Sentry | Reports app errors so we can fix them | Error details, with personal details filtered out |
| Axiom | Stores system logs | Log entries that identify accounts and devices by ID |
| Cloudflare | Provides domain name service and stores encrypted backups | Encrypted backup files |
| Our support desk provider | Runs our support desk | Name, email address and support messages |
Cookies
The website does not use advertising or analytics cookies. If we add website analytics later, we will update this policy first, and any analytics that sets cookies will run only after you choose to allow it.
When the app's web version starts, it will use cookies that keep you signed in.
The website does no cross-site tracking, so it works the same way whether or not your browser sends a Do Not Track or Global Privacy Control signal. If we add analytics that need your choice, we will treat a Global Privacy Control signal as a refusal.
How long we keep information
We keep information only as long as we need it for the purposes in this policy, then delete it.
| Information | How long we keep it |
|---|---|
| Contact messages, partner applications and emails you send us | 12 months after our last contact with you, unless you become a customer |
| Service requests from ZIP codes where Hydara is not available yet | Until service opens in your area, or 24 months, whichever comes first |
| Copies held by our email delivery provider | A short period set by the provider's plan |
| Hosting logs | A short period set by our hosting plan |
| Form submission counts | 10 minutes |
| Information | How long we keep it |
|---|---|
| Account details | Until you delete your account. Deletion is completed within 30 days of your confirmation. |
| Tub readings as the controller reports them | 13 months |
| Hourly summaries of readings | 3 years |
| Daily summaries of readings | No set end date |
| Safety, dosing and incident records | At least 3 years |
| Technical data from the controller platform | At most 90 days |
| Agreements you accept, and service reports | Set before the app launches |
| Invoices and tax records | The period our accountant sets for tax records |
| Fraud prevention and legal-duty records | Set before the app launches |
A legal hold can make us keep specific records longer, for example during a dispute about a particular tub. When you delete your account, some records are kept for safety and legal reasons; the Account Deletion Policy lists them.
Your choices, and how to ask for a copy or deletion
- A copy of your data: email us, or tick "Send me a copy of my data first" on the account deletion page.
- Correcting your data: email us. Once the app is available, you can change most details in it.
- Deleting your data: use the account deletion page, which works without the app, or email us. The Account Deletion Policy explains what happens.
- Marketing email: use the unsubscribe link in any marketing email.
- Text alerts: reply STOP to any text from Hydara, or turn text alerts off in the app.
- Push and email alerts: change them in the app's notification settings.
We offer these choices to everyone, wherever you reside. Before we act on a request, we confirm it by emailing the address we have for you, to protect your information. If you no longer have that address, contact us and we will confirm who you are another way.
How we protect information
We protect personal information with measures suited to how sensitive it is, such as encrypted connections, access limited to the people who need it, and checks on website forms. No system is perfectly secure. If a breach affects your personal information, we will tell you as the law of your state requires. To report a security problem, see Security and vulnerability disclosure.
Children
Hydara is for adults. Accounts are for people 18 or older, and the website and app are not meant for children. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.
Where Hydara operates
Hydara serves properties in the United States only, and this policy is written for people in the United States.
Changes to this policy
When we change this policy, we post the new version here with its version number and effective date, and keep earlier versions available. If a change is material, we will email account holders at least 30 days before it takes effect.
Questions
Questions about this document? Email support@hydara.com or use our contact form.
Postal address: Hydara LLC, Business address to come