Privacy policy

Drinks, check-ins and settings

They are stored on your devices: on your iPhone and in its backup, and on your Apple Watch, which passes the drinks you log there to your paired iPhone. We never receive them. You can export your log yourself as CSV; it goes only where you send it. Ramadan mode works out imsak and iftar on your devices; your location and Ramadan settings never leave them.

Our server

On first launch the iPhone app registers with our server (api.usulapps.com) in the background, without asking for your name, email or any sign-in. The server creates a random account ID and a random device ID and keeps them with your time zone, the app version, and Apple App Attest data (a key the server checks so that only genuine copies of Cupline get in). If you allow Cupline's notifications, it also keeps the notification token, the notification types the app asks for, your device language, and which of its notifications you opened, so that it can cap how often it sends them. Your IP address is not stored. None of this is used for tracking, combined with data from other companies, or shared with anyone, and it never includes your drinks, caffeine, check-ins, settings, Health data or location. The Apple Watch app does not talk to our server, and neither does Cupline for Android.

Usage data (optional, off by default)

Only if you turn on Share usage data in Cupline's settings on your iPhone, the app also sends events about how you use it, with your account ID: that the app was opened, that onboarding was finished, that a drink was logged and whether in the app or through Siri and Shortcuts (not which drink, how much or when), that the Cupline Plus screen was shown and where from, and that a purchase was started, completed or cancelled, with the product's ID. The events never include caffeine amounts, times, sleep, Health data, Ramadan settings, your location or anything you typed. We use them only to see which parts of Cupline are used and what to improve. Raw events are kept for 90 days and then only as daily totals. Turning the setting off stops the events at once and deletes the raw events already stored.

News and offers (optional, off by default)

Promotional notifications are sent only if you turn on News and offers in Cupline's settings. That choice is separate from the last-call reminder, the morning check-in and usage data, and you can turn it off at any time.

Apple Health

Only if you turn it on, Cupline saves the caffeine you log to Apple Health and reads your sleep to show your sleep pattern. Health data is used only for those two things, stays on your devices, is never sent to us or anyone else, and is never used for advertising. You can turn it off in Cupline's settings or in the Health app at any time.

Purchases

Subscriptions are handled by Apple. We do not see your payment details. With usage data on, our server receives the purchase events described above.

Diagnostics (not linked to you)

When something goes wrong, the app sends our server an anonymous error report: the error code, the app version and build, the operating system and its version, the kind of device (phone, tablet or watch), the language setting, when it happened and how often, and for a crash a short code for the place in the app's code where it happened. A report contains no account ID, device ID or IP address, nothing you typed and no health data, and it is not linked to your account. To stop abuse, our server tells senders apart for one day only: next to the error code it stores a shortened, salted hash of the sending IP address, made with a salt that is held only in memory and replaced every day, and it deletes that hash the next day. We use reports only to find and fix problems. Raw reports are deleted after 90 days; daily counts per error code are kept for up to 400 days. Diagnostics are on by default; turn off Send diagnostics in the app's settings to stop them.

Feedback

When you send feedback from the app or from the form on our support page, we receive the kind of feedback, your message and, only if you add it, your email address, which we use only to answer you. Please leave out health details. In the app, Attach app info is off unless you turn it on, and it shows every value before sending: the app version and build, the operating system, the kind of device, the language, your Account ID and up to five error codes the app showed in the last 7 days. Only then is the feedback linked to your account. A photo is sent only if you pick one yourself, and the app removes its metadata first. Messages, email addresses and photos are stored encrypted, used only to answer you and improve the app, and never shared or sold. Feedback is deleted after one year and photos after 30 days, and deleting your data also deletes the feedback linked to your account.

Deleting your data

Delete my data in Cupline's settings on your iPhone deletes your account ID and everything our server keeps with it at once, and turns usage data off; the app then starts again under a new random ID. You can also write to us with the Account ID shown in Cupline's settings and we will delete it. Deleting the app deletes what it stored on your devices, but not what our server keeps, so use Delete my data first. Caffeine already saved to Apple Health stays there until you delete it in the Health app.

Deleted data can remain in our encrypted server backups for up to 14 days, until those backups are replaced.

Contact

Questions about privacy: write to support@usulapps.com, or see the support page.