Privacy Policy

(Last updated: October 14, 2025)

PLEASE READ THE FOLLOWING PRIVACY POLICY CAREFULLY BEFORE USING THIS APP. BY ACCESSING OR USING OUR APP (OTHER THAN TO READ THIS PRIVACY POLICY FOR THE FIRST TIME), YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY.

Policy summary

This privacy policy explains how gotBottle collects, uses, and protects your personal information when you use our mobile application.

What information we collect:

How we use your information:

Third-party services we use:

Your rights:

You have the right to access, correct, delete, or restrict the processing of your personal data. You can also withdraw consent at any time and lodge complaints with data protection authorities.

Full Policy

Information We Collect

We collect different types of information to provide and improve our services:

Information You Provide Directly

Currently, gotBottle does not require you to create an account or provide personal information directly. However, you may provide information when contacting us for support.

Information Collected Automatically

Information Collected with Your Permission

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Device permissions for Personal Data access

Depending on the User's specific device, this Application may request certain permissions that allow it to access the User's device Data as described below. By default, these permissions must be granted by the User before the respective information can be accessed. Once the permission has been given, it can be revoked by the User at any time. In order to revoke these permissions, Users may refer to the device settings or contact the Owner for support at the contact details provided in the present document. The exact procedure for controlling app permissions may be dependent on the User's device and software. Please note that the revoking of such permissions might impact the proper functioning of this Application. If User grants any of the permissions listed below, the respective Personal Data may be processed (i.e accessed to, modified or removed) by this Application.

Approximate location permission (non-continuous)

Used for accessing the User's approximate device location. This Application may collect, use, and share User location Data in order to provide location-based services. The geographic location of the User is determined in a manner that isn't continuous. This means that it is impossible for this Application to derive the approximate position of the User on a continuous basis.

Camera permission

Used for accessing the camera or capturing images from the device.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics for Firebase (Google LLC)

Firebase Analytics is an analytics service provided by Google LLC that helps us understand how users interact with our app. To understand Google's use of data, please review Google's Privacy & Terms.

Firebase Analytics may share data with other Firebase services such as Crashlytics, Remote Config, or Cloud Messaging to provide integrated functionality. Data collected includes app usage patterns, user interactions, and device information.

This app uses mobile device identifiers (including Android Advertising ID and iOS Identifier for Advertising) and similar technologies to provide Firebase Analytics services.

You can opt-out of Firebase Analytics through your device's advertising settings or by disabling analytics data sharing in your device settings. For iOS devices, you can also use the "Limit Ad Tracking" setting.

Data collected: Device identifiers, usage data, app interactions, device information, and technical performance data.

Place of processing: United States and other Google data centers worldwide - Google Privacy Policy. Google participates in data transfer frameworks including Standard Contractual Clauses and adequacy decisions.

Device permissions for Personal Data access

This Application requests certain permissions from Users that allow it to access the User's device Data as described below.

Device permissions for Personal Data access (this Application)

This Application requests certain permissions from Users that allow it to access the User's device Data as summarized here and described within this document.

Personal Data collected: Approximate location permission (non-continuous) and Camera permission.

Infrastructure monitoring

This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved.
Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application.

Firebase Crashlytics (Google LLC)

Firebase Crashlytics is a crash reporting service provided by Google LLC that helps us identify and fix app crashes and stability issues. Crashlytics automatically collects crash reports, including stack traces and device information, when the app encounters an error.

This service helps us improve app reliability by providing detailed crash reports that allow us to identify and resolve issues quickly.

Data collected: Crash logs, stack traces, device model, operating system version, app version, and timestamp of crashes.

Place of processing: United States and other Google data centers worldwide - Google Privacy Policy. Google uses appropriate safeguards for international data transfers.

Location-based interactions

Non-continuous geolocation (this Application)

This Application may collect, use, and share User location Data in order to provide location-based services.
Most browsers and devices provide tools to opt out from this feature by default. If explicit authorization has been provided, the User’s location data may be tracked by this Application.
The geographic location of the User is determined in a manner that isn't continuous, either at the specific request of the User or when the User doesn't point out its current location in the appropriate field and allows the application to detect the position automatically.

Personal Data collected: geographic position.

The rights of Users

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following:

  • Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
  • Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
  • Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
  • Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
  • Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
  • Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including the United States where our third-party service providers (Google) operate data centers.

When we transfer personal data to countries that do not provide adequate protection according to the European Commission, we implement appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally valid transfer mechanisms

For more information about these safeguards, please contact us using the contact information provided below.

Additional information about Data collection and processing

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs).

How "Do Not Track" requests are handled

This Application does not support "Do Not Track" requests.
To determine whether any of the third-party services it uses honor the "Do Not Track" requests, please read their privacy policies.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Provide notice through the app or other reasonable means
  • For significant changes affecting your rights, obtain your consent where required by law

We encourage you to review this policy periodically. Your continued use of the app after any changes indicates your acceptance of the updated policy.

Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Legal information

This privacy policy has been prepared to comply with applicable privacy laws and regulations, including:

Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to remove that information from our systems.

California Residents

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information to third parties.

Scope: This privacy policy applies solely to the gotBottle mobile application and does not cover any third-party websites, applications, or services that may be linked to or integrated with our app.