Privacy policy

Updated 29 October 2026

Yagel Oshri, an individual operating Tipa in Israel. Postal address: 11 Hayasmin, Elyachin, 3890800, Israel. Email: yagel557@gmail.com. Yagel Oshri is the controller of the information described here. This policy covers the Tipa app and tipaofficial.com.

At a glance: Tipa has no user account. Your profile and drinking diary are stored on your device, but the app sends usage and purchase information to providers. Usage events include water amounts and goals. Installation identifiers do not necessarily make this information anonymous. The public website has no usage analytics or advertising pixels.

1. Information on your device

Your entered name, weight, onboarding answers, daily goal, drinking records, streak and reminder, sound and haptic settings are stored locally. We do not provide a Tipa account or a diary cloud-sync service. Our measurement code does not send your name, weight or personal answers; it does send numeric activity data described below.

Reminders are scheduled on your device with permission. The app does not request precise location, contacts, photos, microphone access or access to your device’s health database.

2. Purchases and subscriptions

Apple or Google processes payment. We do not receive your payment-card number. RevenueCat verifies purchases, subscription status and restored access using an automatically generated user identifier, transaction and product information, dates, store country and technical device and app information.

For advertising attribution, the app also supplies RevenueCat with AppsFlyer attribution identifiers and, on Android, a Meta anonymous identifier, and invokes device-identifier collection subject to availability and permissions. Connected attribution services may receive trial, purchase, renewal and refund events. These identifiers can link activities and are not necessarily anonymous.

3. App analytics and advertising measurement

Google Analytics for Firebase: screen views, onboarding stages, cup selections, sips and undo actions, selected or changed goals, goals reached, reminder settings, paywall actions and purchases. A sip event includes its volume in ml; a goal-reached event includes the goal and the day’s recorded total.
AppsFlyer and Meta: installation attribution, advertising performance, onboarding completion, paywall views and goals reached, including numeric parameters attached to those events. Depending on the provider, permissions and applicable law, information may also support tailored advertising and linkage with other activity.
Providers may receive installation or advertising identifiers, IP address, device and operating-system details, language, app version and event times. IP addresses may indicate a general area.
The code contains a TikTok library, but its measurement integration is not enabled in the version inspected for this update.

On iOS, Apple’s tracking permission governs advertising-identifier access and tracking subject to that permission. Refusing it does not disable all usage analytics. Android settings let you limit or delete your advertising identifier; this also does not stop all measurement events. The current app has no single switch that disables every measurement service. You can contact us to request access, deletion or to object to processing.

4. Website and support

Vercel hosts the website and may process IP addresses, browser details, page URLs and security or operational logs to deliver and protect it. The website loads Google Fonts and animation files through jsDelivr; these requests disclose your IP address and technical request information to those providers. The public website does not run Google Analytics, Meta Pixel or TikTok Pixel.

The drinking demo runs in page memory without storing a diary. An essential login cookie is used only for the administration interface. See our cookie policy.

If you email us, we receive your address, message and any information or attachments you choose to send, through our email provider Google. Providing support information is voluntary; without necessary details we may be unable to help. Do not send passwords, card numbers or medical records.

5. Purposes and legal bases

Information supports purchases, restoration, support, security and fraud prevention, usage analysis and advertising measurement. Where GDPR or equivalent law applies, requested service delivery relies on performance of the contract; security and handling enquiries on legitimate interests subject to your rights; and legally required records on legal obligations. Processing that requires consent must rely on separate, valid consent. Reading this policy, continuing to browse or accepting terms does not by itself consent to tracking.

6. Recipients and international transfers

Recipients include Apple, Google, RevenueCat, AppsFlyer, Meta, Vercel and the website-file providers described above. Some act for us and others also process information under their own responsibility and terms. We do not sell information for money. Disclosure to advertising partners may nevertheless fall within broad legal definitions of “sharing” or “sale” in some jurisdictions.

Information may be processed outside Israel or your home country, including the United States, where protection laws may differ. You can request details of providers, processing locations and arrangements applicable to your information. Lawful transfer requirements, including contractual safeguards or adequacy decisions where required, apply separately from this notice.

Provider notices: Apple, Google, RevenueCat, AppsFlyer, Meta, Vercel and jsDelivr.

7. Retention, security and deletion

Your local diary remains until the app and its data are removed. iOS Offload, system backups or device restoration may preserve or restore information. Removing the app does not erase data already received by providers and does not cancel a subscription.

Purchase records support access, restoration, refunds and legal obligations. Support correspondence is retained for handling the enquiry and as needed for disputes or legal obligations. Analytics and logs follow each service’s retention configuration; there is no uniform deletion period across providers. On a deletion request, we assess what can be removed and explain applicable retention exceptions.

The website uses HTTPS and access to administration is restricted. No security measure guarantees absolute protection; protect your device and store account.

8. Your rights

Israeli law provides rights to inspect personal information and request correction. Where local law provides them, you may also request deletion, restriction, a portable copy, object to processing or targeted advertising, and withdraw consent without affecting earlier lawful processing. You may contact Israel’s Privacy Protection Authority or the competent authority where you live.

EEA and UK residents have additional rights under applicable law, including a complaint to their supervisory authority. Where US state privacy laws apply to the processing, requests may also cover categories, recipients and opting out of sale, sharing or targeted advertising. We will not discriminate for exercising a right. A browser’s Global Privacy Control signal is not automatically transmitted to the separate mobile app. This website has no advertising tracking to disable.

Email yagel557@gmail.com with “Privacy request”. We will ask only for information needed to identify the data and verify the request, such as a transaction identifier without payment details. We cannot retrieve a diary held only on your device. We respond within applicable legal deadlines and explain extensions or limitations.

9. Children and changes

Tipa is not intended for children under 13. Higher local ages and requirements for consent to processing also apply where required. Parents concerned about a child’s information should contact us. Permission for a purchase is not automatically permission for tracking.

Updates appear here with a new date. Additional notice or fresh consent required by law must be provided separately; a policy update does not itself create new consent.