Privacy

Effective date

This policy is effective as of October 12, 2026. It describes Sipelle version 1.2.0 and later. A note near the end covers earlier versions.

Who we are

Sipelle is made by Nicholas Titus, in the United States. This policy covers the Sipelle app and this website. If you have any questions about it, email us at info@sipelle.app.

The short version

Sipelle is for adults 21 and over, wherever you live. The first time you open it, the app asks for your first name, date of birth and gender, and sets up an account for you. There is no email, no password and no login. Your details, your drink preferences, your likes and dislikes, and the menus you scan are saved to that account on our servers. We show no ads, we don't sell your data, and we don't track you across other apps. You can delete your current account in the app at any time.

You must be 21 or older

Sipelle is about alcoholic drinks. You must be 21 or older to use it, wherever you live, also where the legal drinking age is lower.

The app checks the date of birth you enter on your phone, before it creates an account or sends anything about you. If the phone finds the date is under 21, it first asks our server for today's date, in case the clock on the phone is wrong. That request carries nothing about you. If our server's date also finds the date under 21, the date is not saved and not sent, and the app is blocked on that phone until the app is deleted and installed again. If the phone cannot reach our server, the app asks you to check your connection and try again, and blocks nothing. The phone keeps only a marker that says the app is blocked. The block marker holds no date and no age and is never sent to us by the app. Your device ID and subscription status also stay on the phone.

Before a date that passed is sent to us, the app checks it once more against the time on our server, in case the clock on the phone is wrong. If that check finds the date is under 21, the date is not sent, the app is blocked, and the app asks our server to delete the account it had just set up.

Our server checks the date again when your profile is saved, and refuses a date under 21. The server check allows a one-day margin for time zones.

The date of birth is a date you type. We do not check it against an ID.

Sipelle isn't directed at children, and we don't knowingly collect personal data from anyone under 21. If you believe someone under 21 has used Sipelle, contact us and we'll delete what we can locate.

What we collect and why

Saved to your account:

• Your first name. Required. Used to greet you.
• Your date of birth. Required. Used to confirm you are 21 or older. It is checked on your phone, and checked again on our server when it is saved.
• Your gender (Male or Female). Required.
• Your date of birth and gender do not yet change what you see. In this version, recommendations come from the drinks you like and the preferences you pick. Your date of birth and gender are saved for recommendation features we are building.
• Your drink preferences: the category, flavors and drink types you pick. Used to highlight drinks on the menus you scan.
• Your likes and dislikes: each drink you give a thumbs-up or a thumbs-down, with the drink's name, category and tags, the address of its picture, the time of the tap and the scan it came from. Likes are used to point out similar drinks on later menus and to fill your Liked list. Dislikes are saved and shown on the button. They are not used for anything else yet.
• Your scan history: for each menu you scan, the drinks read from it (name, category, printed description, our description and taste note, price, nutrition estimates, tags, and the description used to draw the picture), the venue name when the menu prints one, the device ID the scan was made with, and the time of the scan. Scan history is saved for features we are building. The app does not yet show it back to you. A venue name and a time together can show where you were. A scan is not saved when your phone could not reach your account at that moment, or when the save fails on our server.
• An account ID: a random ID that identifies your account.
• Sign-in records. The IP address and device type seen at sign-in are kept with your account until the account is deleted.

Collected as you use the app:

• Menu photos. Sent to our servers and to AI providers to be read. Our servers do not keep the photo.
• A device ID: a random ID the app creates on your phone. Used for the daily scan allowance, your subscription and analytics. It is recorded with each saved scan, so it is connected to your account.
• Usage and crash data: screens you view, product events such as scans, likes and purchases, error reports, and basic device details (model, operating system, app version, language and time zone). It is tied to the device ID. Your drink preference choices are included. Drink names are not.
• Your IP address. Used for daily rate-limit counters, and kept with your sign-in as described above. We record an approximate location (city and country level) worked out from your device's internet address, for analytics. Our analytics provider does not keep the internet address itself. The approximate location is kept with your usage history, and erased along with it when you delete your data in the app or ask us to by email.
• Purchase status: whether your device has an active Sipelle Premium subscription, verified through our subscription service and remembered on our servers and your phone. It is tied to the device ID.

What we never do with your details: your first name, date of birth and gender are never sent to our analytics provider and never sent to an AI model.

What we don't collect

Your email address (unless you email us), your phone number, your contacts, or an advertising ID. The app never asks for location permission and never reads your phone's GPS or other location sensors, which is different from the approximate, IP-derived location described above.

Camera and photos

Sipelle uses your camera only while you are scanning a menu, never in the background. You can also choose a menu photo from your photo library. The photo is sent to our servers and to third-party AI providers to be read. To draw the pictures, the AI providers receive the drink names and descriptions read from the menu. They receive nothing about you.

Our servers do not keep the photo. The AI providers keep request data under their own policies, in some cases for 30 days or more.

The details read from the menu are saved to your scan history. Menu photos are never published or shown to other users.

Where your data is kept

On our servers: your account and everything saved to it are stored in the United States, with our backend provider Supabase.

On your phone: a copy of your first name, drink preferences, likes and dislikes, so the app is fast and works with poor signal; the key that signs the app in to your account; the device ID; your subscription status; and any changes waiting to be sent. Your date of birth and gender stay on the phone only until they have been sent to your account. After that the app cannot show or change them. On iPhone, this local data is included in your device backups.

Who processes your data

We use a few service providers to run Sipelle:

• Supabase: database, account sign-in and server functions. United States.
• OpenRouter and the model providers it routes to, currently OpenAI, Microsoft Azure, Google and Black Forest Labs. They receive the menu photo, to read it, and the drink names and descriptions read from it, to draw the pictures. They receive nothing about you: no name, date of birth, gender, account ID or device ID.
• PostHog: analytics and crash reporting, hosted in the United States. It receives usage and crash data, the device ID and your drink preference choices. It never receives your name, date of birth, gender, account ID, the names of drinks you like or dislike, or venue names.
• RevenueCat: subscription management. Every copy of the app installed from the App Store or Google Play has a record there under the device ID, not only subscribers. It receives your purchase history and the device ID so Sipelle Premium can be granted and restored. It never receives your name or payment details.
• Apple App Store and Google Play: subscription billing. We never see your payment details.
• Cloudflare: hosts this website and the file the app checks to see whether the service is running.
• Google Fonts: supplies the typefaces on this website. Your browser requests them from Google.

These providers process data only to run Sipelle. They are required to give the same or equal protection. We don't sell personal data or share it for advertising.

How long we keep it

• Your account and everything saved to it: until you delete it. An account that has not been used for 24 months is deleted automatically. The 24 months are counted from the last time the account was used, never from the day it was created.
• Sign-in records (the IP address and device type seen at sign-in): kept with your account until the account is deleted.
• Menu photos: not kept on our servers. The AI providers keep request data under their own policies, in some cases for 30 days or more.
• Scan log entries (device ID, drink names and printed descriptions), used to find and fix problems: 30 days.
• Top Drinks counts (which drinks a device has scanned, used to rank Top Drinks): kept with no time limit. After your data is deleted they are kept with no link to you.
• Rate-limit counters (device ID and IP address): about a week.
• Subscription status for your device: while the subscription is active, and up to 30 days after we last checked it.
• Analytics, including the approximate location described above: 1 year, or until you delete your data in the app.
• Request logs and sign-in logs kept by our backend provider: 7 days.
• Generated drink pictures: kept and shared with everyone who scans the same drink. They contain nothing about you.
• Backups: deleted data can remain in routine backups for up to 7 days before it is overwritten.
• Emails you send us: up to 2 years.

How to delete your data

From version 1.2.0 you can delete your data in the app. On the Home screen open Drink Preferences and tap Delete My Data, or open Liked and tap Delete My Data at the foot of the list. Then confirm.

This deletes your current account from our servers: your first name, date of birth and gender, your drink preferences, your likes and dislikes, and your scan history, along with the scan log entries kept for your device. It is also removed from your phone. The app then returns to its first screen.

We also ask our analytics provider to erase the usage statistics kept under your phone's device ID, including past drink preference choices. The provider finishes this in the background, usually within a few days. Once the deletion is confirmed, the app sends no more usage statistics, unless you set Sipelle up again on that phone.

What stays:

• The device ID and your subscription status stay on your phone, so that a paid subscription and the daily scan allowance keep working.
• Top Drinks counts are kept with no link to you.
• Rate-limit counters, subscription status, the purchase records held by Apple, Google and our subscription service, our backend provider's logs and backups are kept for the periods above.

Deleting your data does not cancel a subscription. Cancel it in your App Store or Google Play settings.

To correct your name, date of birth or gender, delete your data in the app and set the app up again. To withdraw consent, delete your data.

"Your current account" is the account the app on your phone is signed in to now. If you deleted the app, changed phones, or the app has started over, an older account may remain on our servers that the app can no longer reach. See sipelle.app/delete-data for how to ask us to delete it. An account that is not used is deleted automatically after 24 months.

Your rights

Wherever you live, you can delete your data yourself in the app at any time. Depending on where you live, you may also have the right to see, correct or delete your personal data, to get a copy of it, and to object to how we use it. In the United States these rights depend on the state you live in. For anything else, email us at info@sipelle.app. We won't treat you differently for using your rights.

International transfers

Our service providers Supabase, PostHog, RevenueCat and OpenRouter, with the model providers it routes to, process your data in the United States. If you use Sipelle from outside the United States, your data is transferred there. Sipelle is not offered in the European Economic Area, the United Kingdom or Brazil.

Security

We send data over encrypted connections (HTTPS). Each account can read and change only its own data. No payment details ever touch our servers.

Changes to this policy

If this policy changes, we'll update this page and the effective date. We'll note any material changes in the app or on the site.

Earlier versions

Versions of Sipelle before 1.2.0 had no account. They asked you to confirm that you were of legal drinking age. The public releases kept your first name on your phone only. Test builds before 15 August 2026 also sent it to our analytics provider.

Earlier versions collected the device ID, menu photos, usage and crash data (including your drink preference choices), your IP address and purchase status, as described above. In those versions our analytics provider worked out an approximate location from your IP address.

Delete My Data arrives in version 1.2.0. On an earlier version, update the app to use it, or email us at info@sipelle.app.

When you update to 1.2.0 the app shows its new first screen, and nothing is saved to an account until you complete it.

Contact

Questions about your privacy? Email us at info@sipelle.app.