This notice covers Sip, OrderLoop and the apps built after them on the same setup, including their Google and Apple sign-in. GoodForMe and Shelve work differently and have their own policies, linked below. Each app's own page lists what that app does on top of this.
Your data stays on your device
What you save in an app, including photos, is stored on your iPhone. The apps don't sync or back it up to our servers. Device backups, where enabled, follow your Apple settings.
Signing in with Apple or Google
Signing in is optional. When you sign in with Apple or Google, the app's server receives an account identifier and the email address the provider shares (with Apple this can be a private relay address). It keeps those, an internal account id, when the account was created and, where the app has daily limits, your usage count. It uses them to authenticate requests and apply those limits. Each app has its own server and account list; an account in one app is not shared with another. We don't use your email for marketing.
The app keeps its session token in your device's Keychain; the server stores only a hash of it. For Sign in with Apple, the server also keeps an encrypted Apple token so it can revoke the sign-in when you delete your account.
Deleting your account
Use Delete account in the app's Settings. It deletes that app's server account, usage counters and session, and revokes the Apple sign-in. Data on your phone stays until you delete the app.
Purchases
Purchases are handled by Apple. We never see your payment details, and deleting an account doesn't cancel a purchase.
Hosting and logs
The apps' servers run on Cloudflare. Request logs keep an internal user id, timing and outcome, never your tokens or email.
Each app's own page
- Sip
- OrderLoop
- GoodForMe (posts and feedback are stored on its server)
- Shelve (privacy details on its App Store page)