Aqoir App- Privacy Policy

Last updated: October 11, 2026

Denver Life Sciences, Inc. (“Denver Life Sciences,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it. This Privacy Policy describes how information is collected, used, stored, and disclosed when you use the Aqoir Mobile Application (“App”) and related Aqoir hardware products (“Aqoir Bottle”).

This policy applies to the Aqoir App, including its alpha, beta, and production versions.

1. Information We Collect

1.1 Information You Provide

We may collect limited personal information, including:

• Name or nickname
• Email address
• Profile information: date of birth, sex, skin tone, height, and weight, and, in the health questionnaire, ethnicity, exercise habits, alcohol and nicotine use, supplements, medications, and chronic conditions (see “Profile and health questionnaire” below)
• Feedback, survey responses, or support communications

Providing this information is optional unless it is required to use a feature of the App or for communication.

1.2 Health & Wellness Data

When you use the Aqoir Bottle with the App, we may collect wellness-related signals, including:

• Hydration-related metrics
• Optical sensor signals (e.g., photoplethysmography-derived features)
• Usage interactions with the Aqoir Bottle
• App interaction data (e.g., session duration, feature usage)

Important:
Aqoir is not a medical device, and the App does not diagnose, treat, or prevent any medical condition. All measurements are provided for general wellness, lifestyle, and informational purposes only.

1.3 Automatically Collected Data

We may automatically collect:

• Device type, operating system, and app version
• Crash logs and performance diagnostics
• Usage analytics and crash reports, associated with an Aqoir account ID rather than your name or email address (see “Analytics and crash reporting” below)

This data helps us improve app stability, performance, and user experience.

2. How We Use Your Information

We use collected information to:

• Enable Aqoir App functionality
• Provide hydration and wellness insights
• Improve algorithms, models, and user experience
• Monitor system performance and debug issues
• Communicate with users about updates or issues
• Conduct internal research and product development

We do not sell personal data.

3. Data Storage & Security

• Data may be stored on secure cloud infrastructure located in the United States or other jurisdictions.
• We use industry-standard administrative, technical, and physical safeguards to protect your data.
• Access to data is limited to authorized personnel involved in development, research, and support.

No system is 100% secure, but we take reasonable steps to protect your information.

4. Data Sharing & Disclosure

We may share data only in the following circumstances:

• With service providers who assist in app infrastructure, sign-in, analytics, weather, or support, including Google (Firebase, Google Sign-In, and Google Cloud), Apple, Open-Meteo, API Ninjas, and SendGrid, and, for internal security alerts, Slack (which receives your Aqoir account ID and shortened forms of your email address and Google or Apple account ID). Each receives only the information described in this policy for its service.
• If required by law or legal process
• To protect the rights, safety, or security of users, Denver Life Sciences, or the public

We do not share personal data with advertisers.

5. Research & Development Use

De-identified and aggregated data may be used for:

• Algorithm training and validation
• Product improvement
• Scientific or technical research

Any published or shared research will not include information that identifies you personally.

Apple Health (HealthKit)

If you choose to connect Apple Health, the App asks your permission to read the following data from the Health app:

• Step count
• Active energy burned
• Body weight (body mass)
• Body temperature
• Resting heart rate
• Heart rate and heart rate variability
• Sleep analysis

The App only reads from Apple Health. It does not write any data to Apple Health.

How we use it

We use this data to tailor your daily hydration recommendation to your activity, body measurements, and sleep.

What leaves your device

When the App asks for a hydration recommendation, it sends the following Apple Health values to our servers: today’s step count and active energy, your most recent body weight, body temperature, resting heart rate and heart rate variability, and the start and end of your most recent sleep. Heart rate readings and total sleep duration are read on your device but are not sent. Our servers keep these values with the other inputs used to calculate the recommendation. Any use beyond providing your recommendation is described in Sections 2 and 5. See also “How long we keep data” below.

What we do not do

• We do not use Apple Health data for advertising or marketing, and we do not sell it.
• We do not share Apple Health data with advertisers or data brokers.
• We do not send Apple Health data to Google Firebase (see below).

Your control

You decide what the App can read. You can change or revoke access at any time in iOS under Settings → Health → Data Access & Devices → Aqoir. If you do not grant access, the App still works, with recommendations that are less personalized. To ask us to delete data we already hold, see Section 6.

Analytics and crash reporting (Google Firebase)

The App uses Google Firebase services provided by Google LLC: Firebase Analytics, Firebase Crashlytics, and Firebase Performance Monitoring.

What these services collect

• App events: screens you view, features you use, Bluetooth connection and Aqoir Bottle status (for example battery level, firmware version, and your Aqoir Bottle’s Bluetooth address and name), whether readings and calibration steps start, succeed, or fail, error messages, and the outcome and timing of the App’s requests to our servers.
• Device and app information: collected automatically by Firebase, such as device model, operating system version, app version, and the time and approximate region of use.
• Crash reports: stack traces and the state of the App at the time of a crash or serious error.
• Performance data: collected automatically by Firebase Performance Monitoring: app start-up time, screen rendering, and the timing of the App’s network requests (Firebase records request addresses without URL parameters), together with device and app information such as device model and app version (Firebase Performance Monitoring).
• Custom performance timings: in the App’s release builds we also send Firebase Performance Monitoring timings and counts the App measures itself, for readings, calls to our servers, Bluetooth connections and scans, sign-in, and app start-up. Each is labelled only with technical details, such as the type of step, its outcome (for example success or a network error), the reading type, the bottle model, and whether a sign-in was a new sign-up, plus the device and app information Firebase adds automatically. They contain no health measurements, account or subject identifiers, or free text.
• Identifiers: an app-instance identifier generated by Firebase, the internal Aqoir account ID we assign to you (we do not use your name or email address as the identifier), and your Aqoir Bottle’s Bluetooth address and name.

What we do not send

We do not send Apple Health data, health measurements such as your hydration score, blood pressure, or weight, or free-text notes to Firebase. Other free-text fields, such as error messages, are sent to Firebase and are not designed to contain health data. We do not use Firebase data to show you advertising.

Why

To keep the App stable and fast, find and fix crashes, and understand which features are used so we can improve them. We also copy Firebase Analytics events into our own Google Cloud storage (BigQuery) for analysis.

Google’s role

Google processes this data on our behalf under its own terms. See Firebase privacy and security and the Google Privacy Policy.

How long Google keeps it

• Crash reports: Google states that “Firebase Crashlytics keeps crash stack traces, extracted minidump data, and associated identifiers (including Crashlytics Installation UUIDs and Firebase installation IDs) for 90 days before starting the process of removing it from live and backup systems” (Firebase data retention).
• Analytics events: kept for the period set in our Google Analytics settings. Google offers “2 months” or “14 months” for event data (Google Analytics data retention).
• Performance data: Google states that “Performance Monitoring keeps IP-associated events for 30 days, and it keeps installation-associated and de-identified performance data for 60 days before starting the process of removing it from live and backup systems” (Firebase data retention).

Signing in with Google or Apple

You can create and access your Aqoir account with Google or with Apple. When you do, the App sends a sign-in token from Google or Apple to our identity service, which verifies it with the provider and then creates or finds your Aqoir account.

What we receive

• From Google: your Google account’s stable account ID, your email address, and whether Google has verified that email address. We do not store a name from Google.
• From Apple: your Apple account’s stable account ID, your email address (which may be a private relay address if you choose Hide My Email), and your name, which Apple provides only the first time you sign in.

The App does not ask for access to any other Google data, such as your contacts, email, or files, and does not use your Google sign-in to call any other Google service.

How we use and store it

We use this information to create and identify your Aqoir account, to let you sign in again, and we may link the sign-in to an existing account that uses the same verified email address. We store your Aqoir account ID, the Google or Apple account ID, your email address, and (for Apple) your name in our account database on our cloud infrastructure. After you sign in, the App keeps a login token for our servers in your device’s secure Keychain.

Signing in with email

If you sign in with your email address instead, we send you a one-time code using the email delivery service SendGrid, which receives your email address and the code.

What we do not do

We do not sell Google or Apple account information and we do not share it with advertisers. We do not send your Google or Apple account information to Firebase; the only account identifier we give Firebase is our own Aqoir account ID (see above).

Location

The App asks for location permission (“while using the app”). The prompt says: “This app needs location access to automatically detect your city for personalized health insights.” The App uses location in two ways:

• Choosing your city. If you tap “Use my current location” during setup, your device’s coordinates are converted into a city name using Apple’s location services, and the city is shown to you. If you instead search for a city by typing its name, the text you type is sent to a city-lookup service (API Ninjas). As with any web request, the services involved can also see your device’s IP address.
• Hydration recommendations. If you have allowed location, each time the App requests your hydration recommendation it sends your approximate location to our servers, rounded to about 1 km (two decimal places), so we can look up local weather (temperature and humidity) for the recommendation. Our servers send these rounded coordinates to the weather provider Open-Meteo, and keep them with the other inputs to that recommendation, subject to Sections 2 and 5.

You can turn location off at any time in iOS under Settings → Privacy & Security → Location Services → Aqoir. Without it, recommendations are made without local weather.

Bluetooth and data from the Aqoir Bottle

The App asks for Bluetooth permission to discover and connect to your Aqoir Bottle. While connected, the App receives data from the device and uploads it to our servers to calculate your readings. This includes:

• Optical sensor signals (red, infrared, and green LED photoplethysmography samples)
• Motion (accelerometer) readings and distance-sensor readings
• Battery level, firmware and hardware version
• Device identifiers (the device’s Bluetooth address and identifier) and the device clock time
• The App version and a record of failed or cancelled readings, to help us diagnose problems

The sensor, battery, version, and identifier data above goes to our servers. Device status events (for example battery level, firmware version, your Aqoir Bottle’s Bluetooth address and name, and whether a connection or reading succeeded) are also sent to Google Firebase as described above. You can revoke Bluetooth access in iOS under Settings → Privacy & Security → Bluetooth → Aqoir; the App then cannot connect to the Aqoir Bottle.

Profile and health questionnaire

When you set up your account, the App asks for your first and last name, date of birth, sex, skin tone, weight, and height, which are stored in your Aqoir profile on our servers.

In calibration and study sessions the App also asks you to complete a health questionnaire. It asks for:

• Name, year of birth, weight, height, sex, skin tone, and ethnicity
• Exercise habits: strength and cardio workouts per week and average daily steps
• Alcohol and nicotine use
• Supplements: creatine, vitamin B6, magnesium, and potassium
• Medications (yes or no for each): blood pressure, corticosteroids, pain, diuretics, beta blockers, angina or arrhythmia, diabetes, and stimulants
• Conditions (yes or no for each): diabetes, hypothyroidism, hyperthyroidism, anemia, peripheral vascular disease, kidney disease, heart arrhythmias, tremors, low blood pressure, and high blood pressure

We use these answers to personalize and check your readings and, in calibration and study sessions, to account for factors that can affect hydration measurements. The answers are sent to our servers, and are checked there for implausible values. They are not sent to Firebase.

Calibration and study measurements

During calibration and study sessions you may be asked to enter, or the App may record, additional information so we can calibrate and validate the App’s readings:

• Blood pressure: systolic and diastolic values, and heart rate, that you enter from a reference blood pressure device
• Body weight weigh-ins during a session
• Urine specific gravity (USG) values you select
• Thirst level and the volume of water you drink at each step
• Pre-session check: how hydrated and how warm you feel, hours since your last meal, recent caffeine, alcohol, and exercise, stress level, sleep quality, whether you feel unwell, room temperature and humidity, withdrawal symptoms, current medications, how long since you last urinated, how long since your last bowel movement, and notes
• Caffeine questionnaire: your usual caffeinated drinks and habits, including cola, energy drinks, and headache tablets per week, tea or coffee days per week, what happens when you skip caffeine, changes in the last two weeks, and notes
• Post-session questions: thirst, body and hand temperature, whether you used hand warmers, withdrawal symptoms, room temperature and humidity, whether you moved since your last reading, and other sensations

These entries are sent to our servers and are kept with your account and the related readings. Health measurements and free-text notes are not sent to Firebase.

Hydration logging and plan

• Water-intake logs: the amount, the type of fluid (including alcohol), and a custom fluid name if you enter one
• Activity log: what you drink and eat (including free-text descriptions), activities, notes, weight, urine specific gravity, and hand temperature (hot or cold). The App offers this log on its main screen as well as during sessions.
• Hydration plan: your wake window, intake settings, and any pledges you accept
• Reading feedback: ratings you give about a reading

These entries are sent to our servers and kept with your account.

Diagnostic logs

The App writes diagnostic logs on your device and uploads them to our servers (Google Cloud Logging) so we can find and fix problems. The App is designed to remove or mask health values and other sensitive data from these logs before upload. The logs are tagged with your Aqoir account ID.

How long we keep data

We keep the information described in this policy on our servers until you delete your account. Diagnostic logs are kept in our logging system under its own retention settings, which may be shorter. Information held by Google (Firebase) is kept as described in the Firebase section above.

6. Your Choices & Rights

You may:

• Request access to or deletion of your data
• Withdraw from any testing or study program at any time
• Stop data collection by discontinuing app use

Requests can be sent to:

lab@dls.co

7. Children’s Privacy

The Aqoir App is not intended for children under 13. We do not knowingly collect personal data from children.

8. International Users

If you use the App outside the United States, your data may be transferred to and processed in the U.S. or other locations where our service providers operate.

9. Changes to This Policy

This Privacy Policy may be updated as Aqoir evolves. Material changes will be communicated within the App or via email. Continued use of the App constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy:

Denver Life Sciences, Inc.
Email: lab@dls.co
Website:https://dls.co/