Privacy policy

1. Controller

Cyntro Systems GmbH
Theodor-Körnergasse 7
8720 Knittelfeld, Austria
Email: office@cyntro.at
Phone: +43 676 3956690

You can reach us at this address with any privacy question.

2. Data on your device

For Sipumo to work, the app stores on your iPhone:

• Drinks: amount, kind of drink, when you drank it, when you logged it and the daily goal that applied at that moment.
• Profile and settings: name (optional), the character you show as your picture in duels, daily goal, sex (optional, “not specified” is possible), whether you exercise a lot, date of birth (optional, date only), quick amounts, wake and sleep times, reminders, appearance and whether Apple Health is on.
• Duel: the groups you belong to and a copy of the group values of the last 60 days, so rankings also show without a connection.

The data sits in the app’s protected storage on your iPhone, which the app shares with its widgets. Syncing your drinks through iCloud is deliberately switched off. Date of birth, sex and exercise are used only for the goal suggestion, the date of birth also for a birthday greeting. They never leave your iPhone and are not part of the duel.

Purpose and legal basis: this processing provides the app features you use (Art. 6(1)(b) GDPR). We do not receive this data and cannot see it.

3. Apple Watch, widgets, Control Center and Siri

iPhone and Apple Watch exchange data directly over Apple’s connection between your paired devices, not through us. The watch receives your progress for the day, your goal, your quick amounts and the state of your duels (names and daily progress of the members). The iPhone receives the drinks you log on the watch.

Widgets, the complication and Control Center show your progress on your devices. If you use a shortcut with Siri, Apple processes your voice under its own privacy terms; Sipumo only receives the recognised command.

4. Notifications

Sipumo schedules reminders locally on your iPhone. If you are in a duel, iCloud uses Apple’s notification service (Apple Push Notification service) to signal that something changed in your group; the app then fetches the new values from iCloud. We send no notifications ourselves.

5. Apple Health (optional)

Only if you switch on writing to Apple Health and allow access in iOS does Sipumo, from that moment on, write water and tea to Apple Health as water intake with its time. If you change or delete an entry in Sipumo, it is changed or deleted in Health too. Sipumo reads no data from Apple Health.

Drink amounts in Apple Health can be health data. The legal basis is your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR), which you give with the switch and the permission in iOS. You can withdraw it at any time by switching it off or revoking access in the Health app. Values already written stay in Health until you delete them there. Apple’s terms apply to data in Apple Health.

6. Family duel through iCloud (optional)

The duel uses Apple’s iCloud (CloudKit). Whoever starts a group creates it in their own iCloud and shares it with an invitation link. Whoever accepts the link can read the group through Apple’s iCloud sharing and write their own values into it. You need to be signed in to iCloud.

What the members of your group see: the name you enter in Sipumo, the character you chose, your daily goal, your current streak and, for each day, your total and your goal. The app also stores a technical identifier of your iCloud account, issued by Apple for this app, so the group recognises you. Never shared are individual drinks, times, kinds of drink, date of birth, sex or your settings.

Purpose and legal basis: the duel only works if these values are shared. You use it only if you start or join a group (Art. 6(1)(b) GDPR). Insofar as daily totals count as health data, you share them with your explicit consent (Art. 9(2)(a) GDPR), given by starting or joining a group and withdrawn by leaving it.

Recipients: the members of your group and Apple as the provider of iCloud. The data lives in the iCloud accounts of those taking part. As the developer, we have no access to our users’ private and shared iCloud data. Apple processes iCloud data under its own privacy policy, including in the USA; Apple is certified under the EU-US Data Privacy Framework.

Retention: your values stay in the group until you leave it (your card and daily totals are then deleted) or the group is dissolved (it is then deleted for everyone).

7. Export

Export Data creates a CSV file with your entries and opens the iOS share sheet. Only you decide where the file goes.

8. What Sipumo does not do

• no servers of our own, no user account with us
• no advertising, no analytics or tracking tools, no third-party code for any of that
• no access to location, contacts, camera, microphone or photos
• no reading of data from Apple Health

Apple gives us as the developer aggregated App Store statistics and crash reports only if you allowed this in the iPhone settings (Share With App Developers). These reports contain no drink data.

9. Questions to us

If you email us, we process your address and your message to answer you (Art. 6(1)(b) GDPR, otherwise our legitimate interest in answering under Art. 6(1)(f) GDPR). We delete the message once it is dealt with, unless statutory retention duties require otherwise.

10. This website

sipumo.com is delivered by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data: IP address, date and time, page requested, referrer and browser identifier. This serves the delivery and security of the site (Art. 6(1)(f) GDPR; our legitimate interest is a stable and secure website). Vercel processes this data as our processor, including in the USA; Vercel is certified under the EU-US Data Privacy Framework. The logs are deleted automatically after a short time.

The website sets no cookies, uses no analytics and loads no fonts, scripts or images from other servers.

11. Children

Sipumo is also used by children. The app sends us no data, including none about children. People join a duel group only by invitation. Children under 14 should use the family duel only with their parents’ consent. With Apple’s Family Sharing and Screen Time, parents can decide which apps and iCloud features their child uses.

12. Voluntary information

You do not have to provide any information. Name, sex and date of birth are optional. Sipumo also works without Apple Health, without the duel and without notifications; only those features are then missing.

13. Security

iOS protects the data on your iPhone with its encryption. Apple encrypts the transfer to iCloud. This website is only available encrypted over HTTPS.

14. Retention and deletion

• Single entry: swipe it to the left in the list and delete it.
• Everything on the iPhone: delete the app; delete the watch app on the watch.
• Duel: Leave Group deletes your card and daily totals from the group; Dissolve Group deletes the group for everyone. Leave your groups before deleting the app.
• Apple Health: delete entries in the Health app.
• Emails to us: once the request is dealt with, subject to statutory retention duties.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Because your app data is with you, you can exercise most of these rights directly in the app. For anything else write to office@cyntro.at; we answer within one month.

You can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at, or with the authority where you live.

16. Changes

If the way Sipumo handles data changes, we update this policy. The version published here applies. The German version is the original; this English version is a translation.

Last updated: 6 November 2026