Privacy Policy

Last updated: 12 June 2026

Who we are

Slip ("we", "us") makes an app that lets you leave an encrypted note tied to a physical place, which unlocks only when a person you trust arrives there. This policy explains what data the app handles and why. If anything here is unclear, email hello@getslip.app.

What we collect

• Account identity. Slip requires an account. When you sign in (with Apple or Google), we receive a stable account identifier. We use it only to identify your device(s) and your trusted connections.
• Your Slips. The note text, any attached photos or voice memos, the place you chose, and who it's for. This content is encrypted on your device before it leaves it. It syncs through your own private iCloud (Apple CloudKit) and is delivered to recipients in encrypted form. We do not hold the keys and cannot read it.
• Location. The app uses your location to detect when you (or a recipient) arrive at a Slip's place so it can unlock there. Location is processed on your device; we don't collect a history of where you've been. Precise location is requested only around the moment of arrival, and only with your permission.
• Trusted connections. The people in your Circle and the public keys used to encrypt to them.
• Diagnostics. Basic, non-identifying technical logs needed to operate our minimal server component (see below).

Permissions the app may ask for

• Location — to know when you've reached a Slip's place so it can unlock. Optionally in the background during an active approach, with the system indicator visible.
• Notifications — to tell you when a Slip is nearby or ready to open.
• Local Network — only for the optional "must arrive together" message, so your device can find the other recipients' devices directly when you're all at the place. No server is involved and nothing is tracked.
• Camera — only when you choose to scan a friend's code to add them to your Circle in person. We do not store camera images.
• Photos / Microphone — only if you attach a photo or record a voice memo to a Slip. Attachments are encrypted like the rest of the note.

Our server

Slip is built to keep your content off our servers. The only server-side component is a lightweight relay (hosted on Cloudflare) that:

• passes along encrypted trust-handshake messages between devices,
• shortens invite links, and
• receives abuse reports (see below).

This relay never receives decrypted Slip content.

Reporting & moderation

If you report a Slip or a sender, we store the report (and the limited information you include) so we can act on abuse, in line with App Store requirements. We keep reports only as long as needed for safety and to meet our legal obligations.

Service providers

We rely on a few infrastructure providers who process data on our behalf: Apple (iCloud/CloudKit storage and push notifications), Google Firebase (sign-in), and Cloudflare (our relay and this website). We don't sell or share your personal data with anyone for advertising.

Data retention & deletion

Slips live in your iCloud and on the devices they're shared with; you can delete them at any time. You can delete your account from within the app, which removes your account-linked data we control and revokes your trusted connections. Some encrypted items already delivered to a recipient's device remain under their control.

Children

Slip is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. Because most of your content is end-to-end encrypted and under your control, the fastest path is usually within the app; for anything else, email us and we'll help.

Changes

If we update this policy we'll change the date above and, for material changes, notify you in the app.

Contact

Questions or requests: hello@getslip.app.