Effective Date: July 22, 2026

hDrop Technologies Inc. (“hDrop,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit hdroptech.com, use an hDrop app or wearable device, purchase a product, contact support, receive communications, or participate in a survey, promotion, event, or research study.

1. Information We Collect

Depending on how you use hDrop, we may collect:

• Account and contact information: name, email address, phone number, mailing address, username, password hash, and communication preferences.
• Order and payment information: products purchased, order history, shipping and billing information, transaction identifiers, returns, and warranty claims. Payment providers process full card details; hDrop may receive limited information such as the card brand and last four digits.
• Device and usage information: IP address, browser type, app and firmware versions, device identifiers, operating system, pages or features used, crash logs, diagnostics, and security events.
• Hydration and sensor information: hydration estimates, sweat or fluid-loss measurements, physiological sensor readings, activity information, and related trends or insights.
• Location information: approximate location and, with permission, precise GPS location used for a requested feature or disclosed research activity.
• Profile and research information: age range, height, weight, sex or gender, sport or activity information, survey responses, study observations, and information described in an informed-consent form.
• Support and submitted content: comments, reviews, photos, messages, troubleshooting information, uploaded files, and other information you provide.
• Marketing information: newsletter enrollment, promotion entries, email engagement, and SMS or email preferences.
• Cookies and similar technologies: cookie identifiers, preferences, analytics information, and interactions with embedded content.
• Derived information: hydration trends, product recommendations, device-performance insights, and fraud or security indicators.

We collect this information directly from you, automatically from the Site, Apps, and Devices, from services you choose to connect, and from payment, shipping, support, research, and other service providers.

2. How We Use Information

We use personal information to:

• provide and operate hDrop products, Apps, Devices, accounts, and requested features;
• calculate and display hydration and sensor information;
• process payments, orders, shipping, returns, exchanges, and warranties;
• provide customer support and troubleshooting;
• secure accounts, prevent fraud, and investigate security incidents;
• send order, delivery, account, safety, security, and support communications;
• send marketing when you have opted in or another lawful basis applies;
• remember preferences and measure or improve our products and services;
• conduct promotions, surveys, events, and consented research;
• create aggregated or de-identified information;
• comply with law and enforce our agreements; and
• complete a merger, acquisition, financing, restructuring, or sale of the business.

Where required, our legal bases include performing a contract, obtaining your consent, pursuing legitimate business interests, complying with legal obligations, and establishing or defending legal claims. We use explicit consent or another legally permitted condition when hydration, sensor, or research information is considered health or special-category data.

3. How We Disclose Information

We may disclose necessary information to:

• cloud, hosting, database, security, support, email, SMS, analytics, survey, and other service providers;
• payment processors, e-commerce platforms, shipping carriers, fulfillment providers, and repair providers;
• research institutions, investigators, laboratories, or study sponsors identified in informed-consent materials;
• third-party services or people you direct us to connect with;
• courts, regulators, law enforcement, emergency responders, insurers, and professional advisers when legally permitted or required; and
• a buyer, successor, investor, or adviser involved in a corporate transaction.

Service providers may use information only to perform contracted services for hDrop. We do not permit advertising networks, data brokers, or third-party marketers to receive consumer health data or SMS opt-in information for their own marketing.

hDrop does not sell personal information for money and does not sell consumer health data. Based on the practices described here, hDrop does not share personal information for cross-context behavioral advertising or targeted advertising. We do not knowingly sell or share personal information belonging to anyone under 16.

4. SMS and Phone Number Privacy

We do not sell, rent, or disclose customer phone numbers or SMS opt-in information to third parties or affiliates for their own marketing.

Phone numbers may be used for order support, delivery updates, product support, troubleshooting, warranty assistance, security notices, and other customer-service communications. Support messages are sent in connection with an existing customer relationship or support request and are not used for unsolicited mass-marketing campaigns.

You may stop SMS messages by replying STOP or contacting [email protected]. Reply HELP for assistance. Message and data rates may apply. If hDrop offers recurring marketing texts in the future, they will require a separate opt-in, and consent will not be a condition of purchase.

5. Research and Consumer Health Data

Research participation is voluntary. Before collecting study-specific information, hDrop or the study sponsor will provide informed-consent materials explaining the study, information collected, recipients, retention period, risks, withdrawal process, and any limitations that apply after information has been de-identified or incorporated into completed research.

We do not use hydration or consumer health data to make decisions about employment, credit, housing, insurance, education admission, or access to essential services.

hDrop is a fitness and hydration technology company, not a health plan or healthcare provider. Information held directly by hDrop is generally not protected by HIPAA, but it may be protected by other privacy, security, consumer-health-data, research, and breach-notification laws.

6. Cookies and Embedded Content

We may use:

• Necessary cookies for login, security, shopping carts, checkout, fraud prevention, and consent records.
• Preference cookies to remember language, display, login, or comment choices.
• Analytics cookies to understand aggregate traffic, errors, and product performance.
• Embedded-content cookies from videos, social-media features, maps, or other third-party content.

Where required, non-essential cookies are used only after consent. You may manage them through our cookie-preference tool or your browser settings. Blocking necessary cookies may prevent login, checkout, or other requested functions.

Typical WordPress cookies may last from one browser session to one year. A “Remember Me” login may last approximately two weeks. The live cookie-preference tool should identify current providers, purposes, and durations.

7. Comments and Uploaded Media

When you leave a comment, we may collect the form information, IP address, and browser information for moderation and spam detection. A hash derived from your email address may be provided to Gravatar to determine whether you use that service.

Uploaded images may contain embedded location information. Remove EXIF or GPS metadata before uploading if you do not want others to access it.

8. Retention

We retain information only for as long as reasonably necessary for the disclosed purpose and applicable legal obligations.

• Account information is generally retained while the account is active and for a reasonable period afterward.
• Order, payment, shipping, return, warranty, and tax records are retained for applicable accounting, warranty, dispute, safety, and legal periods.
• Hydration, sensor, and location information is retained while needed for the requested feature or for the period stated in an applicable consent.
• Research information is retained as stated in the informed-consent materials and research protocol.
• Support records are retained while needed to resolve the issue and related warranty, safety, or legal matters.
• Marketing information is retained until you opt out, subject to a minimal suppression record.
• Giveaway information is generally deleted or anonymized within 24 months unless longer retention is legally necessary.

When retention ends, information is deleted, aggregated, or de-identified.

9. Security and Breach Notification

We use reasonable administrative, technical, and physical safeguards appropriate to the information involved. No system is completely secure.

If a security incident requires notification, hDrop will notify affected individuals and regulators as required by applicable law, including the FTC Health Breach Notification Rule when it applies.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• access personal information;
• obtain a portable copy;
• correct inaccurate information;
• request deletion;
• restrict or object to processing;
• withdraw consent;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses of sensitive information;
• appeal a denied request; and
• complain to a privacy regulator.

Email [email protected] with the subject Privacy Request. To appeal a decision, use the subject Privacy Appeal.

We may take reasonable steps to verify your identity and authority. An authorized agent may submit a request where permitted by law. We respond within the legally required period and do not discriminate against anyone for exercising a privacy right.

California residents may also request information about the categories, sources, purposes, and recipients of personal information collected during the preceding 12 months. These categories may include identifiers, commercial information, internet activity, geolocation, submitted content, demographic information, inferences, and sensitive information such as account credentials, precise location, and health or physiological information. hDrop has not sold this information or shared it for cross-context behavioral advertising during the preceding 12 months.

If hDrop offers a discount for joining an email list, participation is voluntary. The sign-up form will state the benefit and terms. You may withdraw by unsubscribing without invalidating a discount already lawfully earned or redeemed.

11. International Transfers

hDrop is based in the United States. Information may be processed in the United States or other countries where hDrop or its providers operate.

Where required, we use recognized safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, an adequacy decision, consent, or another lawful transfer mechanism.

12. Children and Teens

The Services are not directed to children under 13, and we do not knowingly collect their information without verifiable parental consent. Contact us if you believe a child under 13 provided personal information.

Users under the age of legal majority should use the Services with a parent or legal guardian. We obtain teen or parental consent when required for sensitive, precise-location, health, or other protected information.

13. Changes and Contact Information

We may update this Policy prospectively. Material changes will be announced through the Site, App, email, or another legally required method. We will obtain consent before using consumer health data for an additional category or purpose when required.

hDrop Technologies Inc.
Attn: Privacy
2400 Riverfront Drive, Apt. 427
Little Rock, Arkansas 72202, USA
Email: [email protected]
Phone: +1 (501) 707-8167

Washington Consumer Health Data Privacy Policy

Publish this section as a separate, prominently linked webpage.

hDrop may collect hydration, sweat, fluid-loss, physiological and sensor measurements; health-related activity and profile information; precise location connected to a requested health or activity feature; research responses; hydration or wellness inferences; and technical information needed to connect measurements with an account.

We use this information to operate hDrop products and Apps, display requested measurements, personalize requested features, provide support, secure accounts, maintain data integrity, conduct consented research, and improve or validate hDrop products.

Information comes from you; an hDrop Device, App, sensor, or account; a service you direct us to connect; a research investigator or partner identified in study materials; and processors acting on hDrop’s instructions.

Consumer health data may be disclosed to processors needed to provide a requested service. With legally required separate consent, it may be shared with research institutions, investigators, laboratories, study sponsors, or another recipient identified in the consent. It may also be disclosed to a person you direct, a successor in a business transaction, or a legal recipient when authorized or required by law.

hDrop does not sell consumer health data.

Specific corporate affiliates receiving consumer health data: None.

Washington consumers may:

• confirm whether hDrop collects, shares, or sells their consumer health data;
• access that data and obtain a list of recipients;
• withdraw consent from future collection or sharing; and
• request deletion and notification of the request to applicable processors and recipients.

Email [email protected] with the subject Washington Health Data Request. We may request information reasonably necessary to authenticate the request.

We respond within 45 days. When reasonably necessary, we may extend once by up to 45 additional days and will provide notice. Information is provided free of charge up to twice annually.

To appeal a refusal, email [email protected] with the subject Washington Health Data Appeal. We will respond within 45 days. A denied appeal will include a method for contacting the Washington Attorney General.

Nevada Consumer Health Data Privacy Policy

Publish this section as a separate, conspicuously linked webpage.

hDrop may collect hydration, sweat, fluid-loss, physiological and sensor measurements; health-related activity and profile information; precise location connected to a requested feature; research responses; hydration or wellness inferences; and account or technical information linked to consumer health data.

This information comes from you; an hDrop Device, App, sensor, or account; a service you direct us to connect; a research investigator or partner identified in study materials; and processors acting on hDrop’s instructions.

We process consumer health data to operate hDrop products and Apps, display requested results, personalize features, secure accounts, provide support, maintain data integrity, conduct consented research, improve or validate products, comply with law, and protect legal rights.

Consumer health data may be disclosed to contracted processors. With affirmative, voluntary consent that is separate from collection consent when required, it may be shared with research institutions, investigators, laboratories, study sponsors, or other identified recipients. It may also be disclosed to a person you direct, a successor in a business transaction, or a legal recipient when authorized or required by law.

hDrop does not sell consumer health data or share it with advertising networks, data brokers, or third-party marketers. We do not permit third parties to collect consumer health data over time and across unrelated websites or online services through hDrop’s Services.

Nevada consumers may request that hDrop:

• confirm whether it collects, shares, or sells their consumer health data;
• provide a list of third-party recipients;
• stop collecting, sharing, or selling their consumer health data;
• delete their consumer health data; and
• review and correct inaccurate consumer health data.

Email [email protected] with the subject Nevada Health Data Request. We may request information reasonably necessary to authenticate the request.

We respond within 45 days after authentication. When reasonably necessary, we may extend once by up to 45 additional days and will provide notice. Information is free for at least two requests per year and for additional requests that are not manifestly unfounded, excessive, or repetitive.

To appeal a refusal, email [email protected] with the subject Nevada Health Data Appeal. We will respond within 45 days. A denied appeal will include contact information for the Nevada Attorney General.

Material changes will be communicated through the Site, App, account email, or another clear method. We will obtain affirmative, voluntary consent before adding categories, recipients, or purposes when Nevada law requires it.