Sip is built to keep as little about you as possible. This page explains what stays on your device, what is sent for identification and climate lookup, and how to delete your account.
Your plants and photos
Your plant list, rooms, schedules, watering history and photos are stored on your iPhone, and Sip's widget reads that same local store. Sip doesn't sync or back them up to its servers. Device backups, where enabled, follow your Apple settings.
Sign in with Apple
Sign in with Apple lets Sip authenticate identification requests and enforce the daily limit. Sip's server stores your Apple account identifier, the email address Apple provides (which may be a private relay address), an internal account identifier, when the account was created, and your daily identification usage. These are kept in a Cloudflare D1 database. We don't send you marketing email.
Sip's server also stores an encrypted Apple token (a refresh token) so it can revoke your Apple sign-in when you delete your Sip account. It is deleted with the account. The app keeps its session token in the device Keychain; the server keeps only a hash of it.
Plant identification
When you identify a plant, the one to three photos you picked and your climate description are sent to Sip's server (a Cloudflare Worker), which forwards them to OpenRouter and the AI provider serving the identification model. Sip's server doesn't save the photos or climate description in its database or logs. OpenRouter and its providers handle requests under their own policies.
Location
If you grant location access, Sip uses Apple's reverse geocoding (CLGeocoder), which sends your device's coordinates to Apple, to find your city and country once. Sip turns that into a climate description you can edit in Settings. Your precise coordinates are not sent to Sip's server; only the climate description is. Without location access, Sip uses your device's region or a general indoor description.
City and climate lookup
When you pick your city in Settings, the name you type is sent to Open-Meteo (open-meteo.com) to find matching places, and the chosen place's coordinates are sent to Open-Meteo to look up average temperatures. A place suggested from location access you've already granted can also be used for this lookup. No account is involved.
Operational logs
Sip's server runs on Cloudflare. Identification logs record an internal user identifier, the model used, request duration, outcome and cost, to keep the service reliable. They don't include your Apple token, email, photos or climate description.
Purchases and notifications
The unlock purchase is handled by Apple through StoreKit. We don't see or store your payment details, and deleting your Sip account doesn't cancel an Apple purchase. Watering reminders are local notifications planned on your iPhone.
Deleting your data
Use Delete account in Sip's Settings to delete your server account, its usage counters, session and stored Apple token, and to revoke your Apple sign-in. Delete individual plants in the app, or delete the app to remove your plants and photos from your phone.
Contact
Questions about privacy: [email protected].