Puribo Privacy Policy
Last updated: 10 November 2026
Puribo is an Android app with a small companion, Jelli, who lives on your phone and reminds you to drink water and take breaks. This policy says what data Puribo uses, why, and what you can do about it.
Puribo is made by Joao Pasqualini Costa (Puribo Studio), based in Brazil ("we"). We decide how your personal data is used, which makes us its controller. You can reach us at support@puribo.app.
The short version
- Your habits live on your phone first, and Puribo works without an email address.
- We don't show ads, and we don't sell your data.
- We never see your exact location. Your phone reduces it to an area about 5 km wide.
- Jelli floats over other apps, but Puribo can't read what's on your screen. It doesn't use the Accessibility API.
- You can delete your account in the app at any time.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Account. A random account ID, made the first time you open Puribo. Your email address, only if you choose to back up. Sign-in times and the IP address used. | To keep your account, let you sign back in, and protect the service from abuse. | Providing the service you asked for. Our legitimate interest in keeping it secure. |
| Preferences. Your time zone, water goal, units and similar settings. | To make Puribo work the way you set it up. | Providing the service. |
| Habit history. Drinks, calm moments, focus sessions, routines, candies and outfits. Today this stays on your phone. Once the app backs it up to your account, a copy is also kept on our servers so you can restore it. | To show your progress and, with backup, to bring it back on a new phone. | Providing the service. |
| Approximate location. If you allow it, or if you type a city. See Location. | To show the weather and dress Jelli for it. | Your consent, which you give through Android's permission and can take back in Android's settings. |
| Purchases. Whether you have Puribo Plus, which plan, when it started and ends, the store and the transaction IDs. Google handles your payment, and we never see your card details. | To give you what you paid for, restore it on a new phone, and keep accounting records. | Providing the service. Legal obligations on tax and accounting. |
| Crash reports. What went wrong, the screens and actions just before it, the settings in use, your device model, Android version, app version and account ID. | To find and fix bugs. | Our legitimate interest in keeping Puribo working. |
| Usage analytics. Things like app opens, which screens and features get used, and the outfit and settings you've chosen, tied to a random ID and your account ID. Never your email, never where you are, and never the details of what you log for your health. You can turn this off, or on, in the app under Account, then About, "Share usage stats". | To learn what helps and what gets in the way. | Your consent where the law requires it, which includes the EU and UK. Otherwise our legitimate interest in improving Puribo. |
| Messages. Whatever you send us when you write to us. | To answer you. | Our legitimate interest in helping you. |
What Puribo's permissions do
- Display over other apps lets Jelli appear on your screen. Its window is only as big as Jelli, except for a block screen you start yourself. It can't see the apps underneath.
- Notifications and alarms deliver your reminders. They're planned on your phone.
- Do Not Disturb access lets Puribo respect your quiet time.
- Approximate location is used only for the weather, only while the app is open.
Location
Puribo asks only for approximate location, and only while the app is open. Your phone turns it into an area about 5 km wide, and keeps that area, not the original reading. If you'd rather not share it, you can type a city or use Puribo with no weather at all.
To get a forecast, your phone sends that area to our server, which looks up the weather. If you search for a city, we send what you type to look it up. We don't save either one with your account, and our logs leave them out. The weather provider gets the location from our server, so it doesn't get your IP address or your account.
What we don't do
- We don't show ads, and we don't sell or rent your personal data.
- We don't use what you log about your habits for advertising.
- We don't make decisions about you by automated means that have legal or similarly serious effects. Reminder timing is worked out on your phone.
Who else handles your data
We use these companies to run Puribo. They may only use your data to provide their service to us, or as this policy says. We may also share data when the law requires it, or to protect people's safety or our rights. If Puribo ever moved to a new owner, your data would move with it under this same policy, and we'd tell you first.
| Company | What for | What it handles |
|---|---|---|
| Supabase | Accounts and database, hosted in the United States | Account, preferences, Plus status, and backups once available |
| Cloudflare | Our API and weather cache, on servers worldwide | Requests from the app, including IP address |
| Open-Meteo | Weather forecasts and city search | An approximate location or city name, sent by our server |
| RevenueCat | Managing Puribo Plus purchases | Account ID, purchases, device and country details, IP address |
| Google Play billing, and crash reports through Firebase Crashlytics | Payments under Google's own terms and privacy policy, and crash reports | |
| PostHog | Usage analytics | Usage events, account ID, device details |
| Resend | Sending sign-in and backup emails | Your email address |
Data sent to other countries
Some of these companies work outside your country, including in the United States. Where the law requires a safeguard for this, such as under the GDPR or Brazil's LGPD, we rely on the standard contractual clauses or similar protections these companies offer. You can ask us for details.
How long we keep it
- On your phone: until you delete it, delete your account or uninstall Puribo.
- Your account and anything on our servers: until you delete your account.
- Purchase records: Google and RevenueCat keep them for as long as tax, accounting and fraud rules need. After you delete your account, RevenueCat's copy is tied only to your old random account ID, not to an email address. You can ask us to remove it.
- Crash reports and analytics: only as long as they're useful for fixing problems and understanding how Puribo is used, then they're deleted by those services.
Your rights
Depending on where you live, including under the GDPR, the UK GDPR and Brazil's LGPD, you can ask us to tell you what data we have about you, give you a copy, correct it, delete it, or limit or stop how we use it. Where we rely on your consent, you can take it back at any time.
To do any of this, email support@puribo.app. If you never added an email, include your account ID, which you'll find in the app under Account, then About. We'll answer as quickly as we can, and within the time your local law sets.
You can also complain to your data protection authority. In Brazil that's the ANPD. In the EU and UK, it's the authority where you live.
Deleting your Puribo account
In the Puribo app:
- On Home, tap the person icon to open Account.
- Tap Delete account.
- Tap Delete everything to confirm.
This permanently deletes your account and anything on our servers, and erases your history and settings from that phone.
If you can't use the app, email support@puribo.app from the address on your account, or include your account ID. We'll confirm when it's done.
Deleting your account doesn't cancel a subscription. Google Play handles billing, so cancel Puribo Plus in Google Play first, under Payments & subscriptions.
Children
Puribo is for people aged 13 and over, and isn't meant for younger children. If your country sets a higher age for agreeing to this kind of data use, you need a parent's or guardian's permission to use Puribo. If you think a child under 13 has given us personal data, write to us and we'll delete it.
Security
Data travels between your phone and our servers over encrypted connections. Our database only lets each account read its own rows, and access for our own systems is kept to what each job needs. No system is perfectly secure, so if something goes wrong that affects you, we'll tell you as the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, we'll also tell you in the app before it takes effect.
Contact
Joao Pasqualini Costa (Puribo Studio), Brazil
support@puribo.app