Privacy policy
Sipfold is in testing. This policy describes how the app works today and will be reviewed before public launch.
Sipfold ("we") is operated by Merchard, LLC in Texas. This policy explains what the Sipfold app collects, how we use it, and your choices. Questions: support@sipfold.com.
What we collect
- Account. If you sign in with Apple: an Apple account identifier, and the name and email Apple shares (Apple may give us a private relay address instead of your email). If you sign in with email: your email address.
- Your logs. The drink, the shop, your verdict (would order again, yes or no), and anything you add: hot or iced, tags, a seasonal flag, and a note.
- Photos. The photo you take or choose for each log, including the metadata inside it (such as when and where it was taken).
- Location. Only while you use the app, and only if you allow it: your location to show nearby cafés and suggest the shop you're at, and your location at the moment you save a log.
- Reports and blocks you make, and messages you send us.
We don't use advertising or third-party analytics, we don't track you across other apps or websites, and we don't sell or share your personal information.
How we use it
- To run the app: sign you in, show your history, and build each café's page from members' logs.
- To mark logs as verified: we check whether your location at log time was near the shop, whether the photo was taken shortly before you uploaded it, or whether you used the in-app camera. We store the result and the reason with the log.
- To keep Sipfold safe: review reports, remove content that breaks our terms, and prevent abuse.
- To email you sign-in codes. We don't send marketing email.
What other people see
- Your name (as you provided it), and your logs at a shop: the drink, verdict, optional details, date, photo, and whether the log is verified.
- Never your location. Others only see "verified" or not.
- Never your photo's metadata. Photos shown to others are re-encoded copies with all metadata, including location, removed. The original you upload is stored privately and never shown.
Deleting a log
Deleting a log hides it from shop pages and scores. The record stays in our database and still appears in your own history, because you did have the drink.
Deleting your account
You can delete your account in the app (Profile → Delete account). When you do:
- Your login methods, sessions, and name are deleted. If you used Sign in with Apple, we revoke Sipfold's access with Apple.
- Your logs are anonymized, not erased: they are detached from you, your precise locations and notes are deleted, and dates are rounded to the day. The drink, shop, verdict, and rounded date remain, so café scores keep their history.
- You choose whether your photos are deleted too. If you don't delete them, they stay on shop pages without your name.
Who processes your data
We use a few service providers, only to run Sipfold: Render (servers and database, United States), Cloudflare R2 (photo storage), Resend (sign-in code emails), and Apple (Sign in with Apple, maps). Café names and addresses come from Foursquare Open Source Places; we don't send your data to Foursquare.
How long we keep data
We keep your account and logs until you delete them as described above. Reports are kept to handle abuse. Sign-in codes expire after 10 minutes.
Your choices and rights
- Location and camera access are optional; you can change them in iOS Settings. Without location, logs can still be verified by photo time or the in-app camera.
- You can delete logs and your account in the app at any time.
- To ask what we hold about you, or to correct it, email support@sipfold.com. Depending on where you live (for example Texas or California), you may have additional rights, and we will honor them.
Children
Sipfold is not intended for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date above and tell you in the app if the change is significant.