Sipped — Privacy Policy

This policy explains what Sipped collects, why, where it goes, and how you stay in control of it. We wrote it in plain English on purpose.

If anything here is unclear, email us at mysipped@gmail.com and we'll explain it. Sipped is operated by Brook Bissinger Davis ("Sipped," "we," "us"), an individual developer based in the United States. This policy covers the Sipped app, including builds distributed for beta testing through Apple TestFlight. Our website (mysipped.com) only links to an external beta-signup form and does not collect personal information beyond the standard hosting logs kept by our host.

Who Sipped is for

Sipped is about wine and other beverages, so it's intended for people of legal drinking age in their location (21+ in the United States). We don't direct Sipped to anyone under that age and we don't knowingly collect their information. If you believe a minor has used the app, contact us and we'll delete the data.

What we collect

Here's the full picture, grouped by type.

Account and profile

Email address — required for every sign-in method.
Name and email from Google — if you sign in with Google.
Display name and phone number — if you link your own contact card to your profile.
Avatar photo — stored only on your device. We do not upload or sync it to our servers.

Your drink records

When you log a bottle, we store what you enter and what the app fills in: beverage name, vintage, price, status (tried, want, bought, cellared), your notes, ratings, and dates. This is the heart of the app — your personal drink memory — and it's tied to your account.

Label photos

When you add or scan a label, we keep that photo to read the label and to display it next to your bottle record. It stays stored until you delete the bottle. See Photos and AI processing for exactly what happens to it.

Purchase locations

When you save where you got a bottle, we store the business name and type (winery, restaurant, shop, and so on). We do not store the geographic coordinates — see Device permissions for how location is used.

People and connections

Sipped lets you connect with other people and tag bottles to them — for gifting and sharing. To do this we may collect:

Contacts you choose to import — names, and phone numbers or emails of friends, so you can tag and invite them.
Connection requests — records of invitations between Sipped users.

About importing contacts: when you import a friend's details, you're sharing information about another person. Please only import contacts you have a reason to add, and be aware that their name and contact details will be stored in Sipped to support tagging and invitations. You can delete any person and their stored details at any time, directly in the app. If a friend wants their information removed, they (or you) can contact us at mysipped@gmail.com.

Notifications

Push notification token — a device identifier from Apple's notification service, used to send you connection-request alerts.

Beta testing data (TestFlight)

While Sipped is in beta through Apple TestFlight, Apple automatically collects crash logs and usage information and shares them with us. This may include your name and email address, and you can't opt out of that collection while using TestFlight. Apple describes this in its TestFlight privacy notice.

Within the app itself, we do not run third-party analytics or crash-reporting tools.

Photos and AI processing

This is the part most people want to understand, so here's exactly how it works.

Label photos

When you add or scan a label, the photo is sent to Anthropic's API (as an encoded image) so the AI can read the label and fill in the details.
The photo is also stored in our cloud storage (Supabase) so we can show it next to your bottle record. It stays there until you delete that bottle. Deleting the bottle removes the photo.

Shelf scan photos

When you scan a shelf, the image is sent to Anthropic's API so the AI can identify the bottles on it.
We do not store shelf scan images. They're held only in memory during your session and discarded right after. Nothing is written to our storage.

Text sent for recommendations

To suggest bottles and build your taste profile, we may send text about your drink records (such as names and your notes) to Anthropic's API. We don't send this for advertising, and we don't sell it.

A few things to know about all AI processing:

All images and data are transmitted over a secure HTTPS connection.
By Anthropic's stated practice, inputs sent to its API are not used to train its models by default. Rather than make that promise on Anthropic's behalf, we point you to their own policy: Anthropic Privacy Policy.
Stored label photos are saved with publicly accessible links. Anyone who has the link to a stored label image could view that image, and the link follows a predictable pattern. These are images of beverage labels rather than personal documents, but we want you to know this plainly. We're evaluating a move to private, signed links in a future update.

How we use your information

Sign you in and operate your account.
Read labels, identify bottles, and fill in beverage details automatically.
Save and display your drink records and label photos.
Remember what you like and suggest bottles and gifts.
Let you connect with friends and tag bottles to them.
Send connection-request notifications.
Fix bugs, improve the app, and respond when you reach out.

We do not sell your personal information, and we do not show third-party ads.

Who we share it with

We share information only with the service providers that make Sipped work.

Provider	What they receive	Notes
Anthropic	Label and shelf images; text about your drink records for recommendations.	Inputs not used for training by default. Policy
Supabase	Account data, profile, drink records, stored label photos, locations, connections.	US-based; SOC 2 Type II. Policy
Google	Sign-in request, if you use Google sign-in.	Policy
Apple	Beta testing data via TestFlight.	Policy

We may also disclose information if the law requires it, or to protect our rights and the safety of our users.

Device permissions

Sipped asks for these permissions only when you use the related feature, and you can change them anytime in your device settings.

Camera — to photograph labels and scan shelves.
Photo library — to pick existing photos for labels.
Contacts — to import friends and link your own contact card.
Location (while in use) — a one-time lookup to identify nearby businesses when you save a purchase location. We store only the business name; we do not store your coordinates.
Notifications — to send connection-request alerts.

How long we keep it

Account data, profile, drink records, locations, connections: kept while your account is active.
Stored label photos: kept until you delete the associated bottle.
Shelf scan photos: not kept — discarded after processing.

You can delete your account at any time in the app, from Profile → Delete Account. When you do, we delete your account data and associated records. Deleted data may remain in our host's daily backups for up to 7 days before it ages out.

Your choices and rights

You can:

Edit or delete any bottle record, which removes its stored label photo.
Manage which contacts you've imported and which connections you keep.
Turn off camera, photo, contacts, location, or notification access in your device settings.
Delete your account and its data at any time in the app, from Profile → Delete Account (you'll confirm by typing DELETE).
Request a copy of your data — email mysipped@gmail.com.

Beta testing is limited to the United States. Depending on your state — for example, California under the CCPA/CPRA — you may have rights to access, correct, delete, or port your data. To exercise any of these, contact us at mysipped@gmail.com. We won't discriminate against you for using these rights.

How we protect your information

We transmit images and data over secure HTTPS connections and rely on the security practices of our providers (Supabase, Anthropic, Apple, Google). No method of storage or transmission is perfectly secure, and we've been straightforward above about the public-link limitation on stored label photos.

Changes to this policy

We'll update this policy as the app changes. When we make a material change, we'll update the date at the top and, where appropriate, notify you in the app.

Contact us

Questions about this policy or your data, email us at mysipped@gmail.com.