Privacy Policy
Last Updated: April 2026
DiyoWater Inc. ("Diyo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy applies to all users of the App and Site regardless of location within the United States.
1. Information We Collect
Information You Provide Directly
- Account registration information (email address, username, display name, date of birth)
- Profile information (bio, avatar photo)
- Recipes, photos, comments, ratings, and other content you create or upload
- Ingredient scan data when using Mix AI (images of ingredients you photograph)
- Communications you send to us (support requests, feedback)
- Preferences and settings you configure
Information Collected Automatically
- App usage data (features used, screens viewed, session duration, tap and interaction patterns)
- Device information (device type, operating system version, app version, unique device identifiers)
- Approximate location at city or region level, inferred from your IP address, used for venue discovery — we do not collect precise GPS location without your explicit permission
- Ingredient scan metadata (ingredients identified, recipes matched, scan frequency)
- Interaction data (recipes liked, saved, shared; venues viewed; creators followed; search queries)
- Log data and diagnostics (crash reports, performance data, error logs)
Information From Third Parties
- Authentication data from Apple Sign In or Google Sign In, if used
- Payment confirmation from Apple App Store or Google Play (we do not receive or store full payment details)
2. How We Use Your Information
We use the information we collect to operate, maintain, and improve the Diyo App; personalize your experience; power AI features such as Mix AI; process your subscription; communicate with you; ensure security and prevent fraud; comply with legal obligations; generate aggregated, anonymized analytics; train and develop our AI models using anonymized data; and provide and measure advertising and sponsored content if introduced.
3. How We Share Information
Service Providers. We share data with trusted service providers including Amazon Web Services (cloud hosting and storage), AWS Pinpoint (behavioral analytics, push notification delivery), RevenueCat (subscription management), and content moderation tools. These providers are contractually bound to use your data only as directed by Diyo.
Legal Compliance. We may disclose information if required by law, court order, or governmental authority.
Business Transfers. In the event of a merger, acquisition, or sale of assets, user data may be transferred with notice to users.
With Your Consent. We may share your information in other ways with your explicit consent.
4. What We Do NOT Do With Your Data
- We do not sell your personal information to third parties
- We do not share your personal information with third-party advertisers for their independent use
- We do not share individual user profiles or activity logs with business partners
- We do not build individual profiles for sale to third parties
- We do not share your precise location with any third party
- We do not use your personal information for "cross-context behavioral advertising" as defined under the CCPA
If any of these practices change in the future, we will update this Privacy Policy, provide you with notice, and offer applicable opt-out or consent mechanisms before implementing any such change.
5. Children and Teens
Diyo is not directed to children under 14. If we learn that we have collected personal information from a child under 14, we will delete it promptly.
Users aged 14 and older may use Diyo subject to our Terms of Service. Users under 18 must have parental or guardian consent.
We do not knowingly sell or share the personal information of users we know to be under 16 years of age. We do not knowingly process the personal information of users under 18 for targeted advertising, profiling, or sale.
6. Advertising and Your Choices
Current Status. Diyo does not currently display third-party advertising within the App. We do not currently use your personal information for targeted advertising.
Future Advertising. If we introduce advertising, we will update this Privacy Policy before implementing any advertising-related data practices, provide at least 30 days' advance notice, and provide opt-out mechanisms as required by applicable law.
Ad Preferences. You can manage your advertising and data-sharing preferences in the App at Settings > Privacy > Ad Preferences. We honor Global Privacy Control (GPC) signals as valid opt-out requests.
7. Business Data Sharing — Aggregated and Anonymized Analytics
Diyo may share aggregated, anonymized trend data with business partners.
What we may share
- Trending drink categories in a geographic area
- Aggregate engagement metrics for a venue's public profile (never broken down by individual user)
- Anonymized beverage trend data
- Aggregate interaction patterns
What we never share
- Individual user identities, names, or contact information
- Individual user behavior or activity logs
- Any data that could identify a specific user
- Precise or approximate location data of any individual user
8. AI Technology and Data Use
Diyo uses AI to match ingredients you scan to existing recipes. Diyo does NOT use generative AI to create recipes.
To improve our AI, we may use anonymized and aggregated data derived from user interactions, including anonymized scan data and aggregated recipe interaction data. We remove all personally identifiable information before using any data for AI improvement purposes.
What We Do NOT Use for AI Training
- Your name, email address, or account credentials
- Your location data
- Any data that could directly identify you
Your Choices. You may opt out of having your anonymized usage data contribute to AI model improvements at Settings > Privacy > AI Improvement, or by contacting us at support@diyowaterapp.com. Data already incorporated into trained models in anonymized, aggregate form cannot practically be extracted or deleted from those models.
9. Your Privacy Rights
We provide the following rights to all Diyo users regardless of state of residence. Contact us at support@diyowaterapp.com to exercise any right. We will respond within 45 days.
- Right to Know: Request information about the categories and specific pieces of personal data we have collected about you
- Right to Access: Receive a copy of your personal data in a portable format
- Right to Delete: Request deletion of your personal data, subject to legal exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt Out: Opt out of the sale or sharing of your personal information and opt out of profiling
- Right to Non-Discrimination: We will not discriminate against you for exercising these rights
- Right to Appeal: If we deny your request, you may appeal by contacting support@diyowaterapp.com with "Privacy Appeal" in the subject line
10. State-Specific Privacy Rights
California Residents (CCPA/CPRA)
You have all rights in Section 9 plus the right to limit use of sensitive personal information and to opt out of "sale" or "sharing" as defined by the CCPA. We honor Global Privacy Control signals. Contact: support@diyowaterapp.com.
Virginia Residents (VCDPA)
You have the rights to access, correct, delete, and obtain a portable copy of your personal data; to opt out of targeted advertising, sale, and profiling; and to appeal a denial.
Colorado Residents (CPA)
You have the rights described above plus the right to opt out via universal opt-out mechanisms such as Global Privacy Control.
Texas Residents (TDPSA)
You have the right to confirm processing, access, correct, delete, and obtain a portable copy of your data; to opt out of targeted advertising, data sales, and profiling.
Connecticut Residents (CTDPA)
You have the right to access, correct, delete, and obtain a portable copy of your personal data; to opt out of targeted advertising, sale, and profiling; and to appeal a denial.
Oregon, Montana, and Other States
If you reside in a state with a comprehensive privacy law, we will comply with the applicable requirements. Contact us at support@diyowaterapp.com to exercise your rights.
11. Data Retention
- Account data: Duration of account activity plus 30 days after deletion
- Usage and interaction data: 24 months from collection, then anonymized
- Ingredient scan images: Deleted within 30 days; anonymized scan metadata may be retained longer
- Aggregated and anonymized data: Retained indefinitely (contains no personal information)
- Legal and compliance records: As required by applicable law
12. Data Security
We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, access controls, and regular security assessments. No method of electronic transmission is completely secure.
13. Push Notifications
Diyo may send push notifications with your consent. You can opt in or out at any time through your device settings or the App's notification settings.
14. Changes to This Policy
We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect. If we make changes that materially expand how we use your personal information, we will obtain your consent where required.
15. Contact
© 2026 DiyoWater Inc. All rights reserved.