This Privacy Policy explains how IDEATOWEB LTD ("we", "us", "our") collects, uses and protects your information when you use the SipStep app for iPhone and Apple Watch and the website at sipstep.com (together, the "Service"). We are the data controller for the purposes of UK data protection law.

1. Information we collect

Account information

When you sign in with Sign in with Apple, we receive an Apple user identifier and, if you choose to share it, your name and email address. You may add a profile name and photo.

Hydration and activity data

• Drinks you log — the amount, drink type and time of each entry.
• Steps and distance read from Apple Health, used to show your activity and adjust your daily water goal.
• Activity sessions (a walk or run you record) — duration, distance, steps, pace, calories and, on Apple Watch, heart rate.
• Optional health profile — if you choose to enter it, your year of birth, sex, height and weight, used only to personalise your daily goals within safe limits.

Goals, settings and preferences

Your daily water and step goals, measurement units, theme, chosen language, and your notification and privacy preferences.

When you first open the app we ask what brings you to SipStep (for example drinking enough water, walking more or keeping an eye on your weight). If you answer, we store your answers to set up your Today screen, and we look at them only in total, across all users, to understand what people use SipStep for. The question can be skipped.

Social features

If you use the optional social features: the friends you follow and who follow you, friend requests, users you block, challenges you join, and any stories or profile photo you post. Stories are visible only to your friends and are removed automatically after 24 hours.

Device and subscription information

• A push notification token, so we can send the reminders and notifications you enable.
• Your subscription status for SipStep Plus. Payments are handled by Apple; we and our payment processor RevenueCat receive confirmation of your subscription but never your card details.
• Basic technical information (such as app version and, on our servers, IP address in request logs) needed to operate and secure the Service.

2. Health data and Apple HealthKit

With your permission, SipStep reads steps and distance from Apple Health and writes the water you log and the workouts you record back to Apple Health, so they count towards your Activity rings. Data obtained through HealthKit is used only to provide the app's features. In line with Apple's requirements, we never use HealthKit data for advertising or marketing, and we never sell it or share it with third parties for their own purposes. You can turn Health access on or off at any time in the iOS Health app.

3. How we use your information

• To provide the app and sync your data across your iPhone and Apple Watch.
• To send the reminders and notifications you switch on.
• To personalise your daily goals (using your optional health profile) within doctor-minded safe limits.
• To power optional social features — friends, challenges and stories.
• To manage your SipStep Plus subscription.
• To keep the Service secure, prevent abuse, and comply with our legal obligations.

Our lawful bases are the performance of our contract with you (to provide the Service), your consent (for example, Health access and notifications, which you can withdraw at any time), and our legitimate interests in operating and securing the Service.

4. Who we share information with

We share data only with service providers who process it on our behalf to run the Service:

• Apple — Sign in with Apple, App Store payments, HealthKit and push notification delivery.
• RevenueCat — to manage and validate your subscription.
• Google Firebase (Cloud Messaging) — to deliver push notifications.
• Bunny.net — to host profile images you upload.
• Our hosting provider for the sipstep.com servers and database.

Where you use social features, the limited profile information you choose to make visible (such as your name, photo and daily progress) is shared with the friends you connect with, according to your privacy settings. We do not sell your personal data to anyone.

Some of these providers are based outside the UK/EU (for example in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as Standard Contractual Clauses.

5. Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from within the app — go to Settings → Delete account. Deleting your account permanently removes your account and all associated data from our servers, including your logs, activity sessions, goals, friends, challenges and profile. This action cannot be undone. Data written to Apple Health stays in Apple Health and is controlled by you in the iOS Health app.

You can delete your account from inside the app (Profile → Settings → Delete account) or, without installing anything, from sipstep.com/delete-account.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can exercise most of these directly in the app; for anything else, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. Our ICO registration number is ZC130233.

7. Children

SipStep is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, provide notice in the app.

9. Contact us

IDEATOWEB LTD
Unit 82A James Carter Road, Mildenhall, Bury St. Edmunds IP28 7DE, United Kingdom
Company No. 16908716 · ICO Reg. ZC130233
Email: [email protected]