SipIt
Privacy Policy
SipIt (“SipIt,” “we,” “us,” or “our”) is a beverage recipe-sharing application operated by an independent developer based in Michigan, United States.
This Privacy Policy explains how we collect, use, disclose, store, and otherwise process information when you access or use the SipIt mobile application and its related services, collectively referred to as the “Service.”
By accessing or using SipIt, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
1.1 Account and Authentication Information
You may browse certain public parts of SipIt without creating or signing in to an account. You must sign in to use certain features, including:
- uploading recipes;
- uploading recipe photos;
- liking recipes;
- saving recipes;
- creating and managing a profile; and
- accessing certain personalized features.
SipIt uses Firebase Authentication, a service provided by Google LLC, to create and manage user accounts and authentication sessions.
SipIt may support the following sign-in methods:
- Google Sign-In; and
- Sign in with Apple.
Depending on the sign-in method you select and the information you authorize the provider to share, we may receive or process:
- a Firebase user identifier, also known as a Firebase UID;
- a third-party authentication provider identifier;
- your email address;
- your name or display name;
- your profile photo URL;
- authentication tokens;
- sign-in status;
- session information; and
- information necessary to maintain account security.
We generally do not receive or store the password associated with your Google or Apple account.
Third-party sign-in providers may independently collect and process information in accordance with their own privacy policies and terms.
1.2 Browsing Without an Account
SipIt may allow you to browse public recipes, feeds, and search results without creating or signing in to an account.
Browsing without an account does not create a Firebase Authentication user or a SipIt database account. SipIt may store a preference on your device indicating that you chose to browse without an account.
Posting, liking, saving, reporting, blocking, profile management, and other personalized features require sign-in. Because browsing without an account does not create an account, there is no account profile or user-generated content associated with that browsing mode to recover or delete.
1.3 Profile Information
When you create or update a SipIt profile, we may collect:
- username or display name;
- profile photo;
- age range;
- gender; and
- selected interests relating to drink types, flavors, and drink styles.
Your age range and gender are optional. SipIt uses selected interests and any age range or gender you provide to personalize recipe recommendations as described below.
Your username, profile photo, posted recipes, and certain activity associated with your public content may be visible to other SipIt users.
You should not include sensitive personal information in publicly visible profile fields or content.
1.4 Recipes and User-Generated Content
When you create, upload, publish, or interact with content through SipIt, we may collect and store:
- homemade beverage recipes;
- franchise beverage recipes and customizations;
- recipe titles;
- recipe descriptions;
- ingredient names and quantities;
- preparation instructions;
- recipe notes;
- beverage categories;
- franchise brand selections;
- selected franchise menu items;
- selected customization options;
- requests to add franchise menu items or customization options, including the brand, requested item or option name, and any note you provide;
- whether each recipe is public or private;
- recipe photos;
- thumbnail images;
- likes;
- saved recipes;
- recipe reports;
- user reports;
- user-block records;
- content creation and modification dates; and
- other information you choose to submit.
Content that you publish may be visible to other users.
When you create a recipe, you can choose whether it is public or private. A private recipe and its photos are not visible to other users through the Service. You can change a recipe’s visibility later.
Other users may be able to view, share, screenshot, or otherwise retain copies of content that you make publicly available. We cannot control copies of your content that another person saves or shares outside SipIt.
Do not upload private, confidential, or personally identifying information that you do not want others to see.
1.5 Photos and Images
SipIt may request access to your device’s camera or photo library so that you can select, take, and upload images.
We access your camera or photo library only after you grant the applicable device permission. You may change or withdraw these permissions through your device settings.
Images uploaded through SipIt may include:
- recipe photos;
- recipe thumbnail images; and
- profile photos.
Uploaded images are stored and served through Firebase Cloud Storage.
Information associated with an uploaded image may include:
- the image file;
- file name;
- file size and format;
- storage path;
- download URL;
- upload time; and
- technical file metadata.
Although SipIt may compress, resize, or process images before or after uploading them, we cannot guarantee that every type of embedded image metadata will always be removed.
1.6 Likes, Saves, Searches, and Other Activity
We process information about actions you take through SipIt, including:
- recipes you like;
- recipes you save;
- recipes you upload;
- recipes or user accounts you report;
- user accounts you block;
- search terms you submit; and
- search categories and filters you select.
Search terms, categories, and filters are sent to SipIt’s backend to return search results and may appear in technical request logs. SipIt does not maintain a separate server-side history of recipes you view.
The app stores up to five recent search terms on your device for quick access. You can remove individual recent searches in the app, and they are also removed if you delete the app or clear its local data.
We use this information to provide requested features, maintain accounts, organize content, personalize recommendations as described below, and prevent abuse.
1.7 Recipe and User Reports
SipIt allows users to report recipes and user accounts that they reasonably believe violate SipIt’s Terms of Service, Community Guidelines, or applicable law.
When you submit a report, we may collect:
- your account identifier;
- the identifier of the reported recipe or user account;
- the selected report reason;
- any additional explanation you provide;
- the date and time of the report;
- information about the reported content or account; and
- other information necessary to review the report.
Reports are reviewed by SipIt. A submitted report may be used to investigate possible violations and determine whether enforcement action is appropriate.
Submitting a report does not guarantee that content will be hidden or that an account will be disabled.
We may not provide the reporting user with detailed information about our investigation or actions taken against another user.
When SipIt moves a report into review, the owner of the reported recipe or account receives an in-app notification that includes the selected report reason. The notification does not identify the reporting user or include the reporting user’s optional explanation.
1.8 Preferences and Personalization
SipIt may personalize recipe recommendations using:
- selected interests relating to drink types, flavors, and drink styles;
- saved recipes;
- liked recipes;
- age range, if provided; and
- gender, if provided.
If you provide an age range or gender, SipIt may use liked and saved recipe activity from other users whose age-range or gender selections match yours to rank recommendations. Your own likes and saves may likewise influence recommendations shown to users with matching selections and may contribute to general recipe-popularity signals. Recommendation results do not display another user’s age range, gender, or identity.
SipIt does not currently use your recent searches or recipe-view history to personalize recommendations.
Recommendations are automated suggestions and may not always accurately reflect your preferences.
1.9 Device, Log, and Technical Information
We and our service providers may automatically process limited technical information necessary to operate, secure, maintain, and troubleshoot the Service, including:
- device type;
- operating system;
- application version;
- language and regional settings;
- IP address;
- request timestamps;
- sign-in and authentication logs;
- installation or device identifiers;
- network request information;
- error information;
- server logs; and
- security-related information.
The specific information processed may depend on your device, operating system, authentication provider, and the services used by SipIt.
1.10 Communications and Support Requests
If you contact us, request support, request review of a moderation decision, or request account deletion, we may collect:
- your name;
- email address;
- account information;
- the contents of your message;
- screenshots or attachments you submit; and
- other information necessary to investigate and respond to your request.
If you send general feedback or a bug report through the app’s settings, the app submits your message, the feedback type, any rating, steps to reproduce, and expected behavior you enter, together with your account email address, SipIt user ID, app version, iOS version, and device model. Formspree processes and stores these submissions in SipIt’s Formspree account and may deliver a copy to SipIt by email.
1.11 In-App Notifications
SipIt shows in-app notifications to signed-in users, including a welcome message, the first like on a recipe, a weekly summary of likes received by your recipes, approval of requested franchise menu items or customization options, and reports that SipIt has moved into review. SipIt stores these notifications with your account so they can be displayed in the app.
2. How We Use Information
We may use information to:
- create and manage user accounts;
- authenticate users;
- provide access to public content without requiring an account;
- maintain login sessions;
- provide profiles and personalized features;
- allow users to create and share recipes;
- store and display uploaded images;
- allow users to like and save recipes;
- keep private recipes and their photos from being visible to other users;
- show in-app notifications;
- review requests to add franchise menu items and customization options;
- operate search, filtering, and content-discovery features;
- provide franchise menu items and customization options;
- generate recipe categories, tags, and metadata;
- personalize recipe recommendations;
- moderate user-submitted text;
- receive and review recipe and user reports;
- apply user-blocking choices to hide blocked users’ content where supported;
- determine whether content or account enforcement is appropriate;
- enforce our Terms of Service and Community Guidelines;
- detect, prevent, and investigate spam, fraud, abuse, unauthorized access, and security incidents;
- respond to questions, feedback, bug reports, privacy requests, and support requests;
- maintain and improve the Service;
- troubleshoot technical issues;
- protect the rights, safety, and property of SipIt, our users, and others;
- comply with legal obligations; and
- establish, exercise, or defend legal claims.
SipIt does not currently use personal information for third-party targeted advertising.
3. Firebase Services
SipIt uses limited Firebase services provided by Google LLC for account authentication, image storage, app initialization, and abuse prevention.
3.1 Authentication
Firebase Authentication helps SipIt create and manage signed-in accounts, process sign-in, maintain authenticated sessions, and protect accounts against unauthorized access and abuse. It is not used to create an account when you browse without signing in.
Depending on how you sign in, authentication-related information may include account identifiers, provider information, email address, name or display name, profile photo URL, authentication tokens, session information, IP address, user-agent information, and security or sign-in logs.
3.2 Image Storage
Firebase Cloud Storage is used to store and serve user-uploaded recipe photos, thumbnails, and profile photos, along with related technical information such as storage paths, download URLs, upload times, and file metadata.
Uploaded images may remain stored until you delete the applicable content or account, subject to the retention practices described in this Privacy Policy.
3.3 App Check
SipIt uses Firebase App Check to help verify that requests to SipIt and Firebase services come from genuine, untampered instances of the SipIt app.
App Check may process app or device attestation information, App Check tokens, request information, and related technical information for security and abuse-prevention purposes. SipIt does not use App Check for advertising or tracking.
4. Third-Party Sign-In Providers
4.1 Google Sign-In
When you use Google Sign-In, Google may provide SipIt with information authorized by you, such as:
- your Google account identifier;
- email address;
- name; and
- profile photo URL.
Google separately processes information relating to your Google account and sign-in activity under its own privacy policy.
4.2 Sign in with Apple
When you use Sign in with Apple, Apple may provide SipIt with:
- an Apple account identifier;
- your name; and
- your email address.
If you use Apple’s Hide My Email feature, SipIt may receive an Apple-generated relay email address instead of your personal email address.
Apple separately processes information relating to your Apple Account and sign-in activity under its own privacy policy.
5. Backend Hosting and Database Infrastructure
SipIt uses Railway to host and operate portions of the Service, including backend APIs, databases, logs, backups, and related cloud infrastructure.
Information processed through this infrastructure may include account identifiers, profile information, recipes, recipe-related activity, reports, block records, image references, IP addresses, request timestamps, authentication and security records, server logs, and account-deletion requests.
Recipe photos, thumbnail images, and profile photos are stored through Firebase Cloud Storage rather than Railway unless this Privacy Policy states otherwise. SipIt’s backend systems may store references to those images, including file paths and download URLs.
Information hosted through Railway may be stored or processed in the United States or another region selected for SipIt’s infrastructure.
6. Text Moderation and Metadata Generation
SipIt uses OpenAI to review user-submitted recipe text for potentially prohibited content and Google Gemini to generate text-based recipe metadata.
For content moderation, SipIt sends a recipe’s title, description, notes, ingredients, and preparation steps to OpenAI. If the text is flagged, the recipe is not published and you are asked to edit it. Usernames are checked against SipIt’s own list of blocked and reserved terms and are not sent to OpenAI. Report reasons and explanations are not sent to OpenAI.
For metadata generation, SipIt sends a recipe’s title, type, description, notes, ingredients, preparation steps, and, for franchise recipes, the selected brand, base drink, size, and customizations to Google Gemini. Gemini returns categories, related search terms, and tags used for search and organization.
Moderation and metadata generation apply to public recipes. A recipe you save as private is not sent to OpenAI or Google Gemini; it is reviewed when you make it public.
SipIt does not send user-uploaded images to OpenAI or Google Gemini for these text-moderation or metadata-generation features.
Automated moderation and metadata systems may make mistakes. SipIt may consider automated results together with contextual information and manual review, and may modify, reject, regenerate, or remove generated metadata.
7. How We Disclose Information
SipIt does not sell your personal information.
We may disclose information in the following circumstances.
7.1 Public Content
Information you intentionally publish may be visible to other SipIt users or the public, depending on the applicable feature.
Public information may include:
- username;
- profile photo;
- recipes;
- recipe photos;
- recipe descriptions;
- ingredient lists;
- preparation instructions;
- engagement counts; and
- other content you choose to publish.
7.2 Service Providers
We may disclose information to service providers that help us operate SipIt, including providers of:
- authentication and image storage, including Firebase;
- backend hosting, databases, backups, logs, and cloud infrastructure, including Railway;
- text-based content moderation, including OpenAI;
- text-based recipe metadata generation, including Google Gemini;
- in-app feedback and bug report processing, storage, and delivery, including Formspree;
- email communications, including Google;
- security and fraud prevention; and
- technical support.
These providers may process information as necessary to provide services to SipIt and in accordance with their applicable terms and data-processing practices.
7.3 Authentication Providers
When you use a third-party login method, SipIt and the selected provider may exchange information necessary to authenticate you and maintain the connection between your SipIt account and the provider.
7.4 Legal and Safety Disclosures
We may disclose information if we reasonably believe that disclosure is necessary to:
- comply with applicable law, regulation, court order, subpoena, or legal process;
- respond to a lawful governmental request;
- investigate a possible violation of our rules;
- detect or prevent fraud, abuse, unauthorized access, or security incidents;
- prevent serious harm;
- protect the rights, safety, or property of SipIt, our users, or others; or
- establish, exercise, or defend legal claims.
7.5 Business Transfers
If SipIt or assets associated with SipIt are involved in a merger, acquisition, financing, reorganization, sale, or similar transaction, information may be transferred as part of that transaction.
7.6 With Your Direction or Consent
We may disclose information when you direct us to do so or otherwise provide your consent.
8. Data Retention
We retain information for as long as reasonably necessary to:
- provide the Service;
- maintain your account;
- display content you choose to publish;
- fulfill the purposes described in this Privacy Policy;
- review reports and maintain enforcement records;
- protect the security and integrity of SipIt;
- prevent fraud and abuse;
- resolve disputes;
- enforce our agreements; and
- comply with legal obligations.
Our usual retention periods are:
| Information category | Typical retention period |
|---|---|
| Account and profile information | For as long as your account remains active. |
| Recipes, recipe photos, profile photos, and other user-submitted content | Until you delete the content or delete your account, subject to the exceptions below. |
| Likes, saved recipes, user-block records, and personalization preferences | For as long as your account remains active, unless deleted earlier through available features or account deletion. |
| In-app notifications | For as long as your account remains active, unless deleted earlier. Dismissing a notification hides it in the app but may not immediately delete the stored record. |
| In-app feedback and bug reports | Stored according to the applicable Formspree account settings and, if delivered by email, for as long as reasonably necessary to review and respond to the submission, resolve the issue, and maintain related support records. |
| Recipe reports, user reports, review requests, and enforcement records | For as long as reasonably necessary to review the matter, protect users, prevent abuse, resolve disputes, and comply with legal obligations. These records are deleted with the associated account unless a limited record must be retained for one of those purposes. |
| Server, security, authentication, technical logs, and backups | According to the configured retention cycles of SipIt and its service providers, or longer when reasonably necessary to investigate a security, abuse, fraud, or legal issue. |
| Account-deletion records | Limited records used to complete, retry, and confirm deletion may be retained for up to 90 days after deletion is completed. Direct account identifiers are removed earlier under SipIt’s operational retention schedule. Requests sent by email are processed after we verify account ownership. |
We may retain certain information for longer where reasonably necessary for:
- security investigations;
- fraud prevention;
- legal compliance;
- legal claims;
- dispute resolution;
- enforcement records; or
- backup and disaster-recovery systems.
Backup copies may remain for a limited period before being overwritten or deleted.
We may retain aggregated or de-identified information that can no longer reasonably be linked to you.
9. Account and Content Deletion
You may delete individual recipes through the features provided in SipIt, where available.
You may delete your SipIt account through the account settings in the application, or by emailing a deletion request to sipit.app.official@gmail.com from the email address associated with your account. We may ask for additional information to verify that you own the account before processing an emailed request.
To delete your account in the app, you must confirm your identity by signing in again with the same Google or Apple account linked to your SipIt account. SipIt then disconnects its access to your Google account or revokes its Sign in with Apple authorization.
Once the request is accepted, SipIt immediately blocks access to the account and begins deleting your account, uploaded photos, recipes, profile information, and other associated data. If a deletion step fails, SipIt retries automatically, and the app shows the progress of your request.
When your SipIt account is deleted, we will delete or de-identify personal information associated with the account, including user-generated content such as recipes and uploaded photos, unless retaining certain information is reasonably necessary or legally required.
Certain information may remain temporarily or in limited form for:
- legal compliance;
- security purposes;
- fraud and abuse prevention;
- investigation of serious or repeated violations;
- dispute resolution;
- enforcement of our agreements; or
- backup-system operation.
Deleting your SipIt account does not automatically delete your account with Google, Apple, or another third-party provider.
Content that another person has copied, screenshotted, downloaded, or shared outside SipIt may remain outside our control after deletion.
10. Your Choices and Privacy Rights
Depending on your location and the features available through SipIt, you may have the ability or right to:
- access your account information;
- update or correct profile information;
- delete recipes and uploaded images;
- change your preferences;
- withdraw camera or photo-library permission;
- manage third-party sign-in permissions;
- request a copy of certain personal information;
- request correction of inaccurate information;
- request deletion of personal information;
- object to or restrict certain processing;
- report recipes or user accounts; and
- delete your SipIt account.
To submit a privacy request, contact: sipit.app.official@gmail.com
We may need to verify your identity before processing certain requests.
We may deny or limit a request where permitted by applicable law, including where necessary to protect another person’s rights, prevent fraud, maintain security, or comply with legal obligations.
11. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure.
These measures may include:
- authentication controls;
- access restrictions;
- secure network communications;
- account authorization checks;
- storage security rules;
- server-side validation; and
- monitoring for suspicious or abusive behavior.
However, no application, server, database, storage system, or internet transmission is completely secure. We cannot guarantee the absolute security of your information.
You are responsible for protecting your device and third-party login accounts and for promptly contacting us if you suspect unauthorized access to your SipIt account.
12. Children’s and Teen Privacy
SipIt is intended for users who are at least 16 years old.
Users under 16 may not create a SipIt account, submit personal information, or upload content through the Service.
We do not knowingly collect personal information from users under 16. If we learn that personal information has been collected from a user under 16, we will take reasonable steps to delete it.
A parent or guardian who believes that a user under 16 has provided personal information to SipIt may contact: sipit.app.official@gmail.com
Users who are at least 16 but have not reached the age of legal majority where they live should use SipIt only with the permission and supervision of a parent or legal guardian.
13. International Users
SipIt is operated from Michigan, United States.
If you access SipIt from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries in which our service providers operate.
Those countries may have privacy and data-protection laws that differ from the laws in your jurisdiction.
Where required by applicable law, we will take appropriate steps regarding international data transfers and user privacy rights.
14. Franchise Brands and Menu Information
SipIt may include references to third-party beverage brands, menus, products, and customization options, including Starbucks and Dunkin’.
These references are provided to help users identify beverages and share customized beverage recipes.
Menu information may be based on publicly available information, user submissions, or other sources. Menus, ingredients, product names, availability, pricing, customization options, and preparation methods may change or vary by location. Users should verify current menu and ingredient information directly with the applicable store or official brand source before ordering or consuming a beverage.
Starbucks and its related names and marks are owned by Starbucks Corporation or its affiliates. Dunkin’ and its related names and marks are owned by Dunkin’ Brands or its affiliates. All other marks belong to their respective owners.
SipIt is independent and is not affiliated with, authorized by, endorsed by, sponsored by, operated by, or supported by Starbucks, Dunkin’, or their owners or affiliates. Those companies do not review, approve, verify, or support SipIt or its content.
SipIt does not send personal information to Starbucks or Dunkin’ as part of providing the Service. See the Third-Party Brand Disclaimer.
15. Third-Party Services and Links
SipIt may contain links or connections to third-party websites, applications, or services.
We are not responsible for the privacy, security, availability, content, or practices of third-party services.
You should review a third party’s privacy policy and terms before providing information to that service.
16. No Sale of Personal Information or Targeted Advertising
SipIt does not currently sell personal information.
SipIt does not currently use personal information to provide third-party targeted advertising.
SipIt does not currently use Google AdMob or another in-app advertising network.
If our advertising or data-sharing practices change, we will update this Privacy Policy and provide any notice or choices required by applicable law.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to:
- SipIt’s features;
- our information practices;
- our service providers;
- applicable law; or
- security and operational needs.
When we update this Privacy Policy, we will revise the Effective Date at the top.
If a change is material, we may provide additional notice through SipIt or another reasonable method.
Your continued use of SipIt after the updated Privacy Policy becomes effective means that the updated policy applies to your subsequent use of the Service.
18. Contact Us
For questions, privacy requests, account-deletion requests, or concerns about this Privacy Policy, contact:
SipIt
Michigan, United States
Email: sipit.app.official@gmail.com