The short version: Sippy runs on your phone. The camera check happens entirely on your device and is never recorded, stored, or uploaded. We do not sell your data. We do not have accounts, and we cannot see your sips.
Who we are
Sippy is operated by an independent developer based in Florida, USA (“we”). Questions: support@getsippy.app.
The camera
Sippy uses your front-facing camera only during a sip check, and only while that check is on screen.
- Video frames are analyzed live, in memory, on your device.
- Frames are never written to storage, never sent to a server, never sent to us, and never sent to any third party.
- No face data, facial geometry, or biometric template is created, stored, or transmitted.
- The camera session stops the moment the check ends.
What we do keep, on your device: whether a check passed or failed, which leniency mode was used, how long it took, and a rough lighting category. These help us improve reliability. They contain no imagery.
What is stored on your device
Your hydration log, streaks, shields and tokens, bottle profiles, alarm windows, and settings are stored locally on your iPhone using Apple's on-device storage. Deleting the app deletes this data.
Anonymous usage analytics
To understand whether Sippy's features work reliably, the app may send anonymous event counts — for example, “an alarm fired,” “a sip check passed,” or “a check failed in low light” — to our privacy-focused analytics provider, TelemetryDeck. These events are simple counters: they contain no imagery, no face data, no personal identifiers, no advertising IDs, and no location, and they are not used to track you across apps or websites. TelemetryDeck's privacy policy: telemetrydeck.com/privacy.
Apple Health
If you turn it on, Sippy writes water-intake entries to Apple Health. Sippy does not read your other Health data. Health data is governed by Apple's own privacy protections and is never transmitted to us or used for advertising, marketing, or sold to anyone. You can revoke access at any time in the Health app.
Purchases and subscriptions
Purchases are processed by Apple. We use RevenueCat to manage subscription status and purchase records. That means RevenueCat processes purchase history, a randomly generated app user ID, and basic device/country information on our behalf. We never receive your payment card details. RevenueCat's privacy policy: revenuecat.com/privacy.
This is why our App Store privacy label declares Purchases.
Notifications and alarms
Sippy schedules alarms and notifications on your device. These are handled by iOS and require no server.
What we do NOT do
- No advertising, no ad networks, no tracking across apps or websites, no data brokers.
- No sale or sharing of personal information (as defined by the CCPA/CPRA).
- No account required, no email collected to use the app.
Children
Sippy is not directed at children under 13 and we do not knowingly collect personal information from them.
Your rights
Because your hydration data lives on your device, you control it — delete the app and it is gone. For purchase records held by Apple or RevenueCat, or to ask any privacy question, email support@getsippy.app and we will respond within 30 days. Depending on where you live (for example California, or the EU/UK under GDPR), you may have rights to access, correct, delete, or port data, and to complain to a supervisory authority.
Changes
If this policy changes materially, we will update this page and the date above, and note it in the app.