The short version: Sippy runs on your iPhone. It has no accounts, no ads, no analytics, no tracking and no server, and nothing leaves your device under Sippy's control. The camera sip check is analyzed live on your phone, and nothing from the camera is recorded, stored or sent. We only get information you choose to send us, like a support email.
Who we are
Sippy is made by Remmy Rivera, an independent developer in Florida, USA (“we” or “us”). We are responsible for the small amount of personal information described here (under EU and UK law, we are the “controller”). This policy covers the Sippy iPhone app, its widgets and this website, getsippy.app. Contact: support@getsippy.app.
What Sippy sends: nothing
This version of Sippy has no analytics, advertising or tracking tools, no accounts and no server, and it doesn't use Apple Health. Apart from purchases, refund requests and the age check, which Apple handles (see Purchases and Children and teens), Sippy doesn't send anything off your phone. In TestFlight builds you can choose to share logs (see Diagnostic logs). If we ever add analytics, we will update this policy before that version ships.
The camera and motion sensors
- Sippy uses the front camera only while a sip check is on screen. The camera turns off when the check closes or Sippy leaves the screen.
- Apple's Vision framework analyzes each frame in memory, on your iPhone, to find a face, facial landmark points (such as your lips), the pose of your hand, and whether your bottle or straw is at your mouth. The phone's motion sensors (Core Motion) help detect the tilt of a sip.
- Nothing from the camera is recorded, stored or sent. There are no photos and no video, and no face print or other biometric template is kept. Each frame is thrown away as soon as it has been analyzed, and nothing is used to recognize who you are.
- Sippy also uses the motion sensors to give the app's water animation a slight tilt effect. That data isn't stored either.
Sippy does keep a log of each check's outcome on your phone, with no images. It's described under Diagnostic logs.
What Sippy keeps on your iPhone
Sippy stores the following on your iPhone only:
- Your hydration: your log and check-ins (with their times and whether each was camera-verified or on your honor), your daily goal, and your streaks, shields and reef pieces.
- Your schedule and alarms: wake and sleep times, how many check-ins a day you want (intensity), alarm persistence and sound, and whether alarms are paused.
- Your bottle: the bottle you picked, its size, any nickname you gave it, and whether it has a straw lid.
- Optional details: your activity level, weight and sex, if you enter them. They are used only to size your daily goal. You can change them anytime in You › Hydration, and clear weight (“Not set”) or sex (“Prefer not to say”).
- Hard Mode: whether it's on, the unlock fee you chose, your total unlock spend for each month, and Apple's transaction IDs for your unlock purchases (so each is counted once and Apple's refund sheet can find the latest).
- Renewal reminder: whether you turned it on, and whether you dismissed this year's reminder card.
- Diagnostic logs (see below).
- Widget snapshot: a small copy of today's progress and goal, your streak, your next check-in time, how many check-ins are planned and done, and whether alarms are paused. It's shared with Sippy's Home Screen and Lock Screen widgets through an App Group (a storage area on your phone that the app and its widgets share), so anyone who can see your screen can see it. The same area holds your alarm settings (Hard Mode on or off, persistence and sound), Sippy's bookkeeping for scheduled alarms (their IDs and how many times each was stopped) and whether Sippy Pro is active, so an alarm's Stop button works while the app is closed.
All of this may be included in your own iCloud or computer backups, which Apple or your computer manage under your account. We can't access them. Deleting Sippy removes this data from your phone.
Diagnostic logs
To help fix problems, Sippy keeps three short logs on your phone. They contain no photos, video or face data.
- Sip-check log (your most recent 200 checks): the date and time; the result (for example passed, timed out, cancelled, honor button, emergency bypass, unlock fee paid or camera error); straw or open-top mode; how long the check took and which step it reached; how many seconds a face, a hand near your mouth, a covered mouth and a drinking tilt were detected, and the longest stretch they held together; how many camera frames were analyzed and how many had a face; the frame size and orientation; any camera start-up error; whether camera access was allowed; and the app version.
- Alarm log (the most recent 300 events): when alarms were scheduled, kept or cancelled, the next alarm time, why alarms were switched off (for example paused, no alarm permission or no subscription), errors reported by iOS, and each time you pressed Stop, with the app version.
- Purchase log (the most recent 300 events): purchase, subscription, restore and refund events, with Apple's product and transaction IDs, the outcome and the app version.
In the App Store version of Sippy, there is no way to export these logs, and they are never sent to us. Only TestFlight beta versions (and the developer's own test builds) have a button to share them through the iOS share sheet. If a beta tester sends us a log, we treat it like a support email and use it only to fix bugs.
Purchases
Sippy Pro subscriptions and Hard Mode unlock fees are sold and processed entirely by Apple through the App Store. Sippy checks your purchase status with Apple on your device, using Apple's StoreKit. We never receive your name, email address, Apple Account details or payment details. Apple gives us sales reports that don't identify you. Apple's handling of your purchase is covered by Apple's Privacy Policy.
Alarms and notifications
Sippy schedules its alarms on your iPhone with Apple's AlarmKit, and they can appear on your Lock Screen. If you allow notifications, the only notification Sippy sends is an optional reminder, scheduled on your phone, about 35 days before an annual subscription renews. No server is involved.
Information we may receive
- Support emails. If you email support@getsippy.app, we receive your email address, your message and anything you attach. Porkbun, our domain registrar, forwards it to a Google (Gmail) inbox. We use it only to answer you, and we keep it no longer than 24 months after the conversation ends.
- Information from Apple. If you've chosen in iOS Settings to share analytics with app developers, Apple may give us crash reports and combined usage statistics that don't tell us who you are. You can turn this off in Settings › Privacy & Security › Analytics & Improvements. If you join the TestFlight beta, Apple also shares with us the name and email address you were invited with, plus any feedback, screenshots and crash reports you send. We use all of this only to run the beta and fix problems. It stays in Apple's App Store Connect, under Apple's rules for how long it's kept.
This website
getsippy.app is a plain static site hosted on GitHub Pages. It uses no cookies, analytics, pixels, external fonts or scripts. GitHub may log visitors' IP addresses for security and to keep the service running, under the GitHub Privacy Statement. We don't have access to those logs.
Who else is involved
- Apple sells and processes purchases, runs the App Store and TestFlight, stores your iCloud backups if you use them, and sends us crash reports if you opt in. Apple Privacy Policy.
- GitHub hosts this website and may log visitors' IP addresses. GitHub Privacy Statement.
- Porkbun registers the getsippy.app domain and forwards support email. Porkbun Privacy Policy.
- Google hosts the Gmail inbox that receives support email. Google Privacy Policy.
We don't sell or share personal information (as California law defines those terms). We don't use it for targeted advertising, and we don't work with ad networks or data brokers.
Do Not Track
Neither Sippy nor getsippy.app tracks you over time or across other websites or apps, and no third party can do that through them. Because there is no tracking to turn off, Do Not Track and Global Privacy Control signals need no action from us. Every visitor is treated the same way.
Health information
Your water intake, weight, sex and activity level are health-related information. They stay on your iPhone and are not collected by us: we never receive, share or sell them. This includes “consumer health data” under Washington's My Health My Data Act and similar state laws. We don't collect any.
If you're in the EU or UK
- Controller: Remmy Rivera, Florida, USA · support@getsippy.app.
- Support emails: used to answer you. Legal basis: our legitimate interest in replying, or, when your message is about your use of Sippy, carrying out our agreement with you (GDPR and UK GDPR Art. 6(1)(f) and 6(1)(b)).
- Crash reports and beta feedback from Apple: used to fix bugs. Legal basis: our legitimate interest in a working app (Art. 6(1)(f)).
- Website logs: kept by GitHub for security and to run the site. Legal basis: legitimate interests (Art. 6(1)(f)).
- Data on your phone: the app handles it on your device, and it is never sent to us. If the law treats this as our processing, the basis is providing the app you asked for (Art. 6(1)(b)). For optional weight and sex, the basis is your consent (Art. 6(1)(a) and 9(2)(a)), which you can withdraw anytime by clearing them.
- Recipients: Apple, GitHub, Porkbun and Google, as described above.
- International transfer: we are based in the United States, so anything you send us is processed in the US, by us and by those providers.
- Retention: support emails for no longer than 24 months after the conversation ends. Data on your phone stays until you delete it or the app. The logs keep only their most recent entries.
Your rights and choices
- Data on your phone: review and change it in the app (mostly in the You tab). Delete the app to erase it from your phone.
- Data we hold, such as support emails: email support@getsippy.app to see it, correct it, delete it or get a copy, or to restrict or object to how we use it. We reply within 30 days.
- EU and UK: you have the rights of access, rectification, erasure, restriction, objection and data portability. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).
- Data Apple holds, such as your purchase history: visit privacy.apple.com.
We won't treat you differently for using any of these rights.
Children and teens
Sippy is for people 13 and older, and its App Store age rating is 13+. It is not directed to children under 13. The app doesn't collect personal information from anyone, including children; we only receive what someone chooses to send us, such as a support email. If you're 13 to 17, please use Sippy only with a parent or guardian's permission. Hard Mode is only for adults 18 and older (or the age of majority where you live).
Age signals: in regions where Apple tells apps that local law requires an age check (for example, Texas), Sippy asks Apple's Declared Age Range feature for your age range. Apple may share an age category (for example, 13–15). Sippy uses it only to decide whether you're 18 or older, which decides whether Hard Mode is available, and keeps only that yes/no answer in memory while the app is open. It never stores, sends or logs your age information. If you decline to share, Hard Mode stays off (and is turned off if it was on). If Apple can't answer, for example while you're offline, Hard Mode can't be turned on until Sippy can check again. Everywhere else, Sippy doesn't ask, and Hard Mode asks you to confirm you're 18 or older (or the age of majority where you live).
Parents: if you believe a child under 13 has emailed us, write to support@getsippy.app and we will delete it. You can also use Apple's Family Sharing and Ask to Buy to approve downloads and purchases.
Changes to this policy
When we change this policy, we'll post the new version on this page and update the “Last updated” date at the top. If a change is material, we'll also say so in the App Store release notes for the Sippy update it comes with. If we ever add analytics, we will update this policy before that version ships.
Contact
Remmy Rivera · Florida, USA · support@getsippy.app