Privacy Policy
Effective July 22, 2026
SipReceipt asks for your camera so it can keep you honest about drinking water — not so it can watch you. This policy explains exactly what we collect, why, who processes it on our behalf, and, most importantly, how sip verification runs entirely on your device with no image ever leaving your phone. We do not sell your data or use it for advertising.
The short version on your camera
When you verify a sip, all camera analysis happens entirely on your device — SipReceipt checks that a real person is present while you drink. No photo is taken, and no image is ever sent to us or to any third party. Your device simply reports a pass or fail, and we store only that result and its timestamp. The camera feed never leaves your phone.
Data we collect
The table below summarizes every category of data we collect, what falls inside it, and why we need it.
| Category | What we collect | Why we collect it |
|---|---|---|
| Contact Info | Email address and name — entered directly, or received from Apple if you use Sign in with Apple | To create your account, sign you in, and send transactional emails (verification, subscription confirmations, account deletion notices). |
| Identifiers | A user ID assigned by our authentication provider, and a push notification token if you opt in to reminders | To recognize you across sessions and to deliver the reminder notifications you have requested. |
| Hydration Data | Your sip reminder schedule (sip reminder times and repeat days), verified drinks, verification results (pass/fail), streaks, and timestamps | To provide the core service — counting your completed sips and running your verified streak. |
| Camera (on-device only) | During a sip verification, the live camera feed is analyzed entirely on your device to confirm a real person is present. No photos are taken, and no images are ever transmitted to us or anyone else — the camera never leaves your phone. | To verify, in the moment, that you actually took a sip. Only the pass/fail result and its timestamp leave your device and are stored — never any image. |
| Purchases | Subscription status, plan, billing period, and an opaque customer identifier from Apple | To grant access to Pro features and process renewals. Card details are handled entirely by Apple and are never sent to or stored by SipReceipt. |
| Diagnostics | Crash reports and error diagnostics (stack trace, app version, OS version, device model) and masked server request logs | To keep the service reliable and diagnose problems. PII scrubbing is enabled and we do not record your screen. |
We do not collect: your location, your contacts, your photo library, health data from other apps, browsing history outside SipReceipt, or advertising identifiers. Camera access is used only during an active sip verification.
Camera verification (100% on-device)
Sip verification is SipReceipt's defining feature and the only reason we ask for camera access. When a reminder fires and you choose to verify, the app opens the camera with a short countdown and checks that a real person is present while you drink.
All of that analysis runs entirely on your device. No photo is taken, and no image is ever uploaded — to us or to any third party. Nothing is sent to a server, and there is nothing to link back to you, because nothing leaves your phone except a single pass/fail result.
On our side, we keep only that verification result (pass or fail) and its timestamp so your streak and history stay accurate. The camera feed is never captured, stored, uploaded, or written to your history, a backup, or any shareable surface.
Verification is optional. You can use reminders and manual logging without the camera, and you can revoke camera permission at any time in Settings → SipReceipt → Camera. iOS will ask for camera permission the first time you try to verify a sip.
How we use your information
We use the information we collect to:
· Create and maintain your account
· Count your completed sips and run your verified streak
· Verify a sip in the moment when you use camera verification
· Send reminder notifications you have opted into
· Process your subscription and unlock the app
· Send transactional emails and respond to support requests
· Diagnose errors and keep the service reliable
We do not use your data for advertising, profiling, or any purpose other than running SipReceipt for you. We do not sell your personal information to any third party, ever.
Service providers
We work with a small number of trusted service providers to operate SipReceipt. They may process your data on our behalf only for the limited purposes described below.
Clerk — Authentication and identity
Email, name, password (handled directly by Clerk — we never see or store your password), and session tokens.
Apple — Sign in with Apple and iOS subscription payments (In-App Purchase)
If you use Sign in with Apple, we receive your name (first sign-in only) and email — or a private relay address if you choose "Hide My Email." For subscriptions, your Apple ID and payment details are handled directly by Apple; we never see your Apple ID or card.
RevenueCat — iOS subscription state sync
An opaque user identifier and your subscription entitlement state, so the app knows whether to unlock Pro features.
Resend — Transactional email delivery
Your email address and the contents of transactional messages we send (verification, subscription receipts, account deletion notices).
Expo — Push notification delivery
A device push token (if you opted in) and the title/body of the reminder notifications we send you.
Sentry — Crash and error diagnostics
Crash reports and error diagnostics (stack trace, app version, OS version, device model). PII scrubbing is enabled and we do not use session replay (no screen recording).
Railway — Application hosting and database
The account and hydration data described above, stored at rest in an encrypted PostgreSQL database in the United States. Camera frames are not stored here.
Vercel — Marketing site hosting and anonymous traffic analytics on sipreceipt.com
Standard web request data (pages visited, referrer, browser, country) for the marketing site. The iOS app does not use Vercel Analytics.
We do not track you across other apps or websites
SipReceipt does not use advertising identifiers (such as Apple's IDFA), does not share your data with advertisers or data brokers, and does not track your activity across other companies' apps or websites. We do not display third-party advertising in the app.
Data retention and deletion
Camera frames are transient — they are discarded as soon as a verification completes. Your account and hydration data are retained for as long as your account is active. You can delete your account at any time from Settings → Delete account; we then schedule it for permanent deletion and remove your personal and hydration data within 30 days. During that grace period you can sign back in and cancel the deletion to restore everything.
Payment records may be retained by Apple as required by their own legal obligations. Anonymized diagnostic logs may be retained for up to 90 days for reliability purposes.
Security
All data is encrypted in transit using TLS, including camera frames on their way to the verification service. Your account and hydration data are stored in a managed PostgreSQL database with encryption at rest and access limited to authenticated services. Passwords are hashed by our authentication provider and are never accessible to SipReceipt.
Your rights
You have the right to access, correct, or delete the personal information we hold about you. You can manage most of this directly in the app. To request a full data export or any other privacy request, contact us at the address below. California residents have additional rights under the CCPA, including the right to know what is collected and to opt out of its sale — and we do not sell personal information.
Children
SipReceipt is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. If we make material changes — especially to how camera frames are handled — we will notify you by email or with an in-app notice before the changes take effect. The effective date above reflects the most recent version.
Contact
Questions about this policy or your data? Email us at [email protected].