Privacy policy
RillPace for Android
Effective September 15, 2026
Private by design
RillPace does not require an account and contains no advertising, third-party analytics or cross-app tracking. Hydration entries, custom beverages, goals, waking hours and preferences are stored locally.
Health Connect
If you opt in, RillPace requests only permission to read and write hydration records. This is used to import water entries, save confirmed entries and prevent duplicates. You can revoke access and manage records in Health Connect. Local tracking remains available without it.
Wear OS, widget and reminders
The paired Wear OS feature sends hydration log messages between your watch and phone through Google Play services. The Android widget and reminder actions write to the same local database. Notification delivery is best effort and is controlled by Android.
Purchases and sharing
Google Play handles payment information. RillPace receives signed purchase status and verifies it before enabling Pro. CSV/PDF exports leave the app only after you explicitly choose a destination through the Android share sheet.
Retention and deletion
Local data remains until you delete it in Settings or uninstall the app. Deleting local data does not automatically delete records already written to Health Connect; those remain under your Health Connect controls.