Privacy policy

Water Passport is a personal collecting record for drinking-water sources. It has no account, no sign-in and no analytics, and it never asks for your location.

Where your passport lives

Your passport name, home city, check-ins, taste ratings, notes, bottle details, bottle-fit observations, private sources and stamps are stored in a file in the app's own storage on your device. They are not uploaded, synced or sent to any server of mine. There is no Water Passport account to hold them.

The app never asks where you are

Water Passport does not request location permission and has no access to your device's position. You choose one of the launch cities, and the app asks the source register for sources near that city's reviewed centre - a fixed point in a directory, not a point on you.

What leaves the device, and when

Two things are requested over the network, both only when you are looking at a city, and neither carries anything personal:

• The reviewed register - hosted on Supabase. A request carries a set of coordinates for the city centre, a search radius and a result limit. It carries no passport, no name, no check-ins and no identifier of yours.
• OpenStreetMap - the Overpass API and the Nominatim place lookup, used where the reviewed register has no coverage. The same city-centre coordinates are sent, and nothing else.

As with any internet request, these providers can see the technical basics that reach them - an IP address, a device's network details - and handle those under their own policies. If the register cannot be reached, the city simply appears empty; nothing is queued or retried later.

Your check-ins are never uploaded. Nothing you record travels the other way.

Home taps stay private

A source you mark private never leaves the device as a place. It is not counted in anything public, it carries no coordinates into anything you share, and it is never named on a card or a map. A shared record shows a city, never a source.

Sharing

The app makes a share image only at the moment you choose to share. It goes through the operating system's share sheet, to whichever destination you pick. Nothing is shared automatically.

Taking your data with you, and deleting it

Under Archive → Your data your passport exports as one plain, readable JSON file - every entry, your number, your stamps and where you placed them. Keep it wherever you keep files. Restoring from a file replaces the passport on this device rather than merging the two.

There is no server-side copy to request or delete, because none is ever made. Deleting the app removes its locally stored data from your device.

No analytics, no tracking, no ads

No product analytics, no advertising, no tracking, no data sales, and no third-party analytics or attribution SDKs. The app's privacy manifest declares no tracking, no collected data and no required-reason API use, which is what the code does.

Purchases

Water Passport is free and sells nothing. No purchase service is contacted.

Source information is not a safety assessment

Public source listings help you locate drinking-water sources. They do not guarantee access, operation, quality or safety, and nothing in the app is a statement about whether water is safe to drink. Condition describes the fitting; visual cleanliness describes what a person could see. Neither is a health assessment. Follow local signs and official guidance.

Register records carry authority-level provenance and an audit date. Points shown from OpenStreetMap are labelled unverified and are never mixed into the reviewed set. © OpenStreetMap contributors, under the Open Database Licence (ODbL).

Children

Water Passport is not directed at children under 13.

Changes

If this policy changes, the updated version is posted at this address with a new date.

Contact

Questions: use the support form.