Privacy policy
Who we are
Gulp is made by Astel, run by Ryan, based in Jakarta, Indonesia. We are responsible for the personal information described here. You can reach us at [email protected].
We wrote this policy to be read by people, so it tries to say plainly what we keep and why. The short version is that we collect what Gulp needs to work and to get better, we don't sell your data, and Gulp has no ads.
What we collect
Information you give us
- Account. When you sign in with Apple or Google, we receive an account identifier and, if you choose to share it, your email address. Apple may give us a private relay address instead of your real one.
- Profile. Your display name, your age range (under 13, 13 to 17, 18 to 24, or 25 and over), and your Gulpal's look.
- Your day. Your daily goal, wake-up and bedtime, units, time zone and reminder settings.
- Drink log. Each drink you log: when, the drink type, the size, and whether it counted toward your goal.
- Squads. The squads you start or join, squad names, invite codes, splashes you send and receive, and the activity your squad sees.
- Gift notes. The note you add to a gift, up to 60 characters, which the person you send it to can see.
- Reports and blocks. If you report or block someone, we keep who reported or blocked whom, a snapshot of the reported text and any note you add. We use this only for moderation, and the person you report or block isn't told it was you.
- Messages to us. Anything you send when you email us for help.
Information collected as you use Gulp
- Purchases. When you buy Gulp+ or drops, Apple or Google handle the payment. We receive the product, a transaction identifier, and whether the purchase is active or refunded, through our purchase provider. We never see your card details.
- Drops and items. Your drops balance, a ledger of how each drop was earned or bought, and the Kit items you own.
- Notifications. A push token for your device, so we can tell you when someone in your squad splashes you or your lake fills. Window reminders are scheduled on your phone itself.
- Product analytics. Events about how the app is used (for example, that a gulp was logged or a screen was opened), with your device type, operating system, app version and a pseudonymous identifier. We use PostHog, hosted in the United States, for this and for feature flags. Session replay is off, so PostHog never records your screen. PostHog estimates a rough location from your IP address, and we use it only for overall statistics, such as which countries Gulp is used in.
- Crash reports. When the app crashes or hits an error, Sentry receives a technical report: the error and stack trace, device model, operating system, app version and your account identifier, so we can tell whether an error keeps happening to the same person. It doesn't receive your name, your email, screenshots or the layout of your screen.
Your drink log and health data
Your drink log is health-related, since it records what and when you drink. You log it by choice, and you can delete it at any time in the app. We use it only to run Gulp, we never sell it, and we never share it for advertising.
Consumer health data. If you live in Washington, Nevada or another US state with a consumer health data law, this section is our consumer health data notice. The consumer health data we collect is your drink log and the goal and day settings described above. We collect it from you, use it only to provide Gulp, and share it only with the service providers listed below so they can run Gulp for us. We never sell it. You can see it in the app, delete it there, or write to [email protected] to access or delete it or to withdraw your consent.
How we use it
- To run Gulp: count your gulps, keep your rhythm and streak, fill your squad's lake, deliver splashes, and keep your drops and items.
- To send the notifications you've allowed, at most four reminders a day and only during your waking hours.
- To process purchases and check what you're entitled to.
- To keep Gulp fair and safe, for example by spotting implausible logs or misuse of invites.
- To fix bugs and understand which features help people, using analytics and crash reports.
- To answer you when you contact us.
We don't sell your personal information, we don't share it for advertising, and Gulp shows no ads.
If you're in the EU, EEA or UK, our legal bases under the GDPR and UK GDPR are: performing our contract with you to run Gulp and process your purchases; your consent for notifications, which you can withdraw at any time in settings; and our legitimate interests in analytics to improve Gulp, keeping Gulp safe, moderating reports, and preventing fraud and misuse. Where we rely on legitimate interests, you can object, as described under your rights.
What your squad sees
People in your squad see your display name, your Gulpal, today's counted gulps, whether you're on rhythm or soaked, your streak, and the squad's shared activity, such as who splashed whom and when the lake filled. They don't see your drink sizes, your volume or your settings. Anyone with your squad's invite link can ask to join it, so share it with people you know.
Who we share it with
We use a few trusted companies to run Gulp. They process data on our behalf and only for the jobs below.
| Provider | What they do for Gulp |
|---|---|
| Supabase | Database, sign-in, real-time updates and server functions, hosted in the United States |
| Apple and Google | Sign in, app distribution, payments and push delivery |
| Expo | Push notifications and app updates |
| RevenueCat | Purchase and subscription records |
| PostHog | Product analytics and feature flags |
| Sentry | Crash and error reports |
| Resend | Account and transactional email |
| Cloudflare | This website and invite links |
We may also share information if the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy would keep applying to your data.
We're based in Indonesia, and some of our providers process data in the United States and other countries. When personal information is transferred out of the EU, EEA, UK or Switzerland, we rely on Standard Contractual Clauses (with the UK addendum where it applies) or another safeguard the law allows.
How long we keep it
We keep your information while your account is open. When you delete your account, we delete or anonymize it within 30 days, and it leaves our backups within 90 days. We keep purchase records for as long as tax and accounting rules require. Analytics data is kept for about a year, and crash reports for up to 90 days. Reports are kept as long as we need them to handle the report and keep Gulp safe.
Deleting your data
You can delete your account at any time in the app: go to Me and tap Delete account. That removes your account, drink log, Gulpal, drops, items and squad membership. Splashes and activity you were part of are removed or shown without your name. Subscriptions are billed by Apple or Google, so cancel them in your store account too. If you can't use the app, email [email protected] from the address on your account and we'll delete it for you.
Your rights
You can do most of this in the app, and for anything else, email [email protected]. We'll answer within a month, or sooner where the law requires, and we may need to confirm it's really you first.
In the EU, EEA and UK
Under the GDPR and UK GDPR, you have the right to access the data we hold about you, correct it, delete it, get a copy in a portable format, restrict how we use it, object to uses based on our legitimate interests, and withdraw any consent you've given at any time. You can also complain to your local data protection authority.
In California and other US states
If you live in California (under the CCPA, as amended by the CPRA) or another US state with a privacy law, you have the right to know what personal information we collect, use and disclose, and to access, correct and delete it. You also have the right to opt out of the sale of personal information, its sharing for cross-context behavioral advertising, and targeted advertising. We don't do any of those, so there's nothing to opt out of. We won't treat you differently for using your rights, you can use an authorized agent to make a request for you, and if we turn down a request, you can appeal by replying to our answer.
Children
Gulp is for everyone, including families, and there's no separate kids mode. Children under 13, or under the age of digital consent where they live (up to 16 in parts of the EU), should use Gulp only with the permission of a parent or guardian, who agrees to our terms for them.
For profiles in the under 13 age range, Gulp shows no ads (it has none for anyone), hides the Share button, and collects only what's needed to run Gulp. A parent or guardian can ask us to see or delete their child's data at any time by writing to [email protected], and we'll delete it.
This website
gulp.astelapps.com uses no cookies, no analytics and no third-party scripts, and the fonts are served from our own site. Cloudflare, which hosts it, processes basic request information such as IP addresses to deliver pages and protect against abuse.
Changes and contact
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect. Questions are always welcome at [email protected].