What the Hydraverse app collects, why it collects it, and how to have it deleted.
Effective 22 August 2026 · Last updated 6 September 2026
This policy covers the Hydraverse iOS app and the Hydraverse self-watering planter it controls. Hydraverse Pty Ltd (Ringwood, Victoria, Australia) is the data controller. We handle personal information in line with the Australian Privacy Principles.
The short version. We collect the email address you sign up with — and your name, if you sign in with Google or Apple and they pass it to us — a record of the planters on your account, and, where notifications are supported, a push-notification token so we can send you alerts. We do not use analytics, advertising, or tracking of any kind, and we never sell your data. Your soil-moisture readings and watering history stay on your phone.
| Information | Why we hold it | Where it is stored |
|---|---|---|
| Email address, and a password if you set one | To create your account and sign you in. Passwords are stored only as salted hashes — we never see or hold your actual password. If you sign in with Google or Apple there is no password at all: they confirm who you are and we never receive your Google or Apple password. | Supabase |
| Your name, and which sign-in method you used | To greet you in the app. We only have a name if Google or Apple gave us one when you signed in — if you signed up with an email address and password, we do not ask for it. | Supabase |
| Your planters: device identifier, channel, the name you gave the plant, the photo you chose, and the date it was added | So your planters appear on any device you sign in to. | Supabase |
| Push notification token and device platform | To deliver alerts such as a low reservoir or a planter going offline. Not currently active on iPhone. | Supabase and Google Firebase |
| Your notification preferences | To remember which alerts you switched on or off. | Supabase |
| Planter heartbeat: the device identifier and the time it last reported in | To tell you when a planter has gone offline. This is about the device, not about you. | Supabase |
| Soil moisture readings and watering history | To draw your charts and activity log. | On your phone only — this is not uploaded to our servers. |
You can create your account with an email address and password, or by using Sign in with Google or Sign in with Apple. If you choose one of those, Google or Apple confirm who you are and pass us your email address and, usually, your name. We never see your Google or Apple password, and signing in this way gives us no access to anything else in those accounts — not your contacts, files, photos, or anything you have stored there.
Apple lets you pick Hide My Email when you sign in. If you do, Apple gives us a relay address ending in @privaterelay.appleid.com instead of your real one. We cannot see the address behind it, and anything we send there is forwarded to you by Apple. You can stop that forwarding at any time in your Apple ID settings, under Sign in with Apple.
The app uses Bluetooth for one purpose: to find your planter during setup and hand it your Wi-Fi network name and password so it can connect on its own. Those Wi-Fi credentials go straight from your phone to your planter over that Bluetooth connection — they are not sent to us and we never store them.
The app also communicates with your planter over your local network to read moisture levels and start watering. When you are away from home, those commands travel via our message broker, HiveMQ Cloud, instead, so you can still check on and water your plants.
We use these service providers, and only for the purposes above:
We may also disclose information if the law requires it. Data may be processed on servers outside Australia by these providers.
We keep your account information for as long as your account exists. When your account is deleted, the planters, push tokens, and notification preferences attached to it are deleted along with it. History kept on your phone is removed when you delete the app.
Hydraverse is not directed at children and we do not knowingly collect information from children under 13. If you believe a child has given us their information, contact us and we will delete it.
Connections between the app, our servers, and your planter are encrypted in transit. Our database restricts every record to the account that owns it, so one customer cannot read another's data. No system is perfectly secure, but we take reasonable steps to protect your information.
If we change how we handle your information we will update this page and change the "last updated" date above. Significant changes will be announced in the app.
Hydraverse Pty Ltd
Ringwood, Victoria 3134, Australia
contact@hydraverse.com.au