Privacy Policy
Effective July 31, 2026
sip is built so that this policy can be short.
Everything stays on your device. Your settings and drink logs live in a local database inside the app’s own storage. A small daily summary is shared with sip’s widgets through Apple’s app group container, which is also on your device. That summary holds your drops so far today, your goal, your next reminder time, your streak, the times of the drops you logged today, the day they belong to, and the display settings the widgets and watch faces need to draw your day (your active hours and reminder pace).
If you pair an Apple Watch, sip sends that same daily summary to your watch through Apple’s Watch Connectivity, directly between your devices. The watch keeps its copy in its own on device storage, where its watch face widgets can read it, and drinks you log on the watch travel back the same way. No server is involved.
We collect nothing. sip has no accounts, no analytics, no ads, no tracking, and no third party code. The app makes exactly one kind of network connection, the optional water tower relay described below, and only if you raise or join a water tower. If you never do, sip makes no network connections at all. Nothing is sold. There is nothing to sell. Your drink log never leaves your device, so we cannot share it or lose it.
A water tower is a shared monument you and people you invite raise together, and it is the one thing in sip that talks to a server. If you raise or join a tower, sip sends a small relay at sip.clean.tools the tower’s name, the first name you typed for yourself, and your gallon count, and fetches the same three things about the other members so the tower can rise on everyone’s phone. That is the whole payload. Your drink times, your amounts, your settings, and everything else stay on your device. There are still no accounts: the invite carries a secret key, and only people who hold it can see or join the tower. Leaving a tower removes it from your phone, though the gallons you poured stay in the tower under the name you gave it. Erase all data removes every tower from your phone too.
Reminders are scheduled locally on your device through Apple’s notification system. They never touch a server.
If you share a sippet, the eight second clip is rendered entirely on your device from your own day. It leaves your device only inside the message you choose to send, through Apple’s share sheet. The share text includes a link to sip.clean.tools carrying the time of your next drop so a friend can join you; anyone who receives your message can see that time. Sharing a sippet makes no network connection of its own; the clip travels only inside the message you send. Rendered clips are deleted when the share sheet closes, and Erase all data removes them too.
If you turn on “my face in sippets”, sip uses the front camera during drink alongs you start, and only then. The frames stay in your phone’s memory so a small porthole of you can appear in sippets you choose to send. Nothing is saved unless you send a clip; the frames are cleared when the share window closes, and a fresh drink along clears the old ones. sip asks the system for camera permission the first time you say yes, and saying no just means sippets show sippy alone. The camera never runs in the background and is never used anywhere else.
Your data may be included in the device backups you control (iCloud backup or a computer backup). Those backups are managed and encrypted by you and Apple, not by us.
Deleting the app deletes your data. Settings also offers Erase all data, which does the same from inside the app.
Questions: support@clean.tools