SipCue Privacy Policy

Effective date: July 26, 2026

This policy explains how SipCue, an Android hydration logging and reminder app published by Stackquiln, handles information. It applies to the SipCue app and support requests about it. The app is intended only for adults aged 18 or older.

The short version is that hydration entries and most preferences stay on your device. SipCue does not require an account and Stackquiln does not operate a server copy of your hydration history. Analytics and crash reporting are separate, optional controls that are off until you opt in.

For privacy questions or requests, email stackquiln@gmail.com.

Information handling at a glance

The exact services available depend on the release configuration and your choices.

Data stored on your device

SipCue stores local app data in its private Android storage. The hydration database uses SQLCipher encryption with a key protected by Android Keystore. Android cloud backup and device-to-device transfer are disabled for SipCue app data.

No SipCue account or Stackquiln backend is required. The app does not transmit your exact hydration entries, weight entry, reminder schedule, or goal to Stackquiln. Other apps or people with access to an unlocked or compromised device may still be able to see information displayed by SipCue.

Optional Analytics

Firebase Analytics is disabled until you separately opt in from Settings. If enabled, SipCue may send coarse events, such as an amount range instead of an exact hydration amount, screen or interaction categories, and ad lifecycle events. SipCue is designed not to send names, contact details, precise location, raw user-entered text, exact hydration logs, or payment-card details to Analytics.

When you withdraw consent, the app disables Analytics collection and requests a reset of its Analytics identifier and local Analytics data. Withdrawal does not make prior lawful processing unlawful, and aggregated statistics may no longer identify an app installation.

For a standard Google Analytics 4 property, Google currently provides a 2- or 14-month user- and event-level retention setting. Aggregated reporting data may remain beyond that setting. Because SipCue has no account and does not set a SipCue user ID, Stackquiln may be unable to associate an already uploaded event with a particular person.

Optional crash reporting

Firebase Crashlytics is a separate control and is disabled until you opt in from Settings. If enabled, it may process crash traces, timestamps, installation or session identifiers, app/package version, device model and state, operating-system version, and exception-related technical diagnostics. SipCue does not intentionally attach hydration entries or support-message content to crash reports.

Turning crash reporting off disables collection and requests deletion of reports that have not been sent. Firebase states that submitted Crashlytics stack traces and associated identifiers are generally kept for 90 days before deletion from live and backup systems begins.

Ads and consent

Ads are disabled in the bundled release defaults. If a production release enables them, Google Mobile Ads and Google's User Messaging Platform may process consent choices, IP address, device and app information, fraud-prevention signals, and ad interactions under Google's terms. SipCue waits until the consent service says ad requests may begin.

SipCue removes the Android Advertising ID permission and Android Privacy Sandbox advertising permissions. This reduces identifier access but does not prevent Google from processing other permitted connection, device, consent, fraud-prevention, or ad-delivery information. Available privacy choices can be revisited from Settings. A premium entitlement, when offered and active, removes SipCue ad placements.

SipCue does not sell personal information and does not share it for cross-context behavioural advertising through an Advertising ID.

Public remote feature configuration

SipCue may request a public JSON file hosted on Cloudflare to obtain non-sensitive flags such as whether an app placement is shown and ad pacing. The HTTPS request does not add a SipCue user identifier, app-instance identifier, advertising identifier, hydration data, or query parameters. Like any web host, Cloudflare may process an IP address, timestamps, security signals, and routine HTTP metadata.

When no Cloudflare URL is configured, or when the response is invalid or unavailable, SipCue uses its last valid configuration or safe bundled defaults. SipCue does not use Firebase Remote Config.

Purchases

Premium features are disabled in the bundled release defaults. If premium is offered, Google Play Billing provides localized product information, processes payment, and reports purchase state. Stackquiln does not receive or store payment-card details. Google may process Google-account, transaction, device, and fraud-prevention information under Google Play's terms.

Notifications

If you enable reminders, SipCue asks for notification permission and schedules local notifications. The schedule remains on your device. Android scheduling, battery, and permission controls may delay or prevent notifications.

Service providers

Depending on the release and your choices, information may be processed by:

• Google Analytics for Firebase and Firebase Crashlytics, under the applicable Firebase data-processing terms.
• Google Mobile Ads and User Messaging Platform, if ads are enabled.
• Google Play, if you obtain the app or a product through Google Play.
• Cloudflare, if a public remote-configuration URL is configured.
• The email provider used to receive a message you send to the published contact address.

These providers process information for the described services and may also process service, security, or compliance information under their own notices and terms.

International transfers

Providers may process information in the United States and other countries where they or their subprocessors operate. Privacy protections may differ from those in your country. Where transfer restrictions apply, providers may rely on an adequacy decision, the EU-U.S. Data Privacy Framework and its UK or Swiss extensions where valid and applicable, Standard Contractual Clauses, or another lawful mechanism described in their terms. The provider links above contain current location and transfer information.

Legal bases

Where the GDPR, UK GDPR, or similar law applies:

• local storage and core functions are used to provide the service you request;
• Analytics and Crashlytics rely on your consent;
• support is handled to take steps at your request and, depending on the message, through consent, legitimate interests, or legal obligations;
• limited security, fraud prevention, public configuration delivery, and legal compliance may rely on legitimate interests, performance of a service, or legal obligations; and
• purchase processing is necessary to perform the transaction you request and meet related legal duties.

You can withdraw consent in Settings without affecting processing that was lawful before withdrawal.

Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability; withdraw consent; and complain to a data-protection authority.

Most SipCue information is stored only on your device and can be viewed or erased directly. For other requests, email stackquiln@gmail.com with “SipCue privacy request” in the subject. Describe the feature or provider involved and the approximate date. Do not send hydration logs, government identification, or other sensitive information unless we specifically explain why limited verification is necessary.

We may ask for information reasonably necessary to verify and locate a request, respond without disclosing information to the wrong person, or preserve a legally required record. Requests are generally free, although the law may permit a reasonable fee or refusal for manifestly unfounded, excessive, or repetitive requests.

Where GDPR response periods apply, we normally respond within one month and may lawfully extend that period for a complex or numerous request after giving notice. If a request is denied or limited, we will explain the reason and available complaint rights where required.

EEA and United Kingdom

You may complain to the data-protection authority where you live, work, or believe an infringement occurred. You may contact us first so we can try to resolve the concern, but doing so does not remove your right to contact an authority.

California

If the California Consumer Privacy Act applies to Stackquiln and your information, you may have rights to know, access, correct, or delete covered personal information; receive information about categories, sources, purposes, and recipients; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service and pricing after exercising a right.

Depending on which optional features you used in the previous 12 months, the categories disclosed may include identifiers, internet or electronic-network activity, commercial information, and support correspondence. SipCue does not sell personal information, does not share it for cross-context behavioural advertising through an Advertising ID, and does not use sensitive personal information to infer characteristics. An authorised agent may submit a request, but we may require proof of authority and verification as permitted by law. We will respond within the time required by California law and explain any permitted extension.

Retention and deletion

Local data lasts until you reset it, clear app storage, or uninstall. Stackquiln does not operate a server copy of hydration logs. Provider-controlled records follow the provider retention described above or linked policies. Support correspondence is retained only as reasonably necessary to respond, maintain records, protect rights, prevent abuse, resolve disputes, or comply with law, after which it is deleted or de-identified where feasible.

See the Data and Deletion Guide for step-by-step controls. Deleting SipCue does not cancel a Google Play subscription; subscriptions must be cancelled through Google Play.

Security and incident response

SipCue uses private Android storage, an encrypted hydration database, Android Keystore key protection, HTTPS for configured remote requests, disabled Android backup/transfer, and data-minimising defaults. Access to provider consoles and support systems should be limited to people who need it.

No storage or transmission method is completely secure. Device compromise, operating-system vulnerabilities, provider incidents, or user actions may defeat safeguards. If Stackquiln becomes aware of a personal-data breach for which notice is legally required, affected people and authorities will be notified in the manner and time required by applicable law.

Eligibility and children

SipCue is intended only for adults aged 18 or older and is not directed to children. Stackquiln does not knowingly collect a child's personal information through SipCue. If you believe a child has provided information through an enabled third-party service or support message, contact us so the issue can be assessed and eligible information deleted.

Changes, language, and versions

We may update this policy when app behaviour, providers, or legal requirements change. Material changes will be reflected by a new effective date and, where required, an in-app notice or renewed consent. The English version controls unless mandatory local law requires otherwise.

Contact

Publisher/controller: Stackquiln

Email: stackquiln@gmail.com