Privacy notice
Last updated: 12 October 2026
This notice has not yet been reviewed by a solicitor.
Sipru is in private beta. This notice describes what the app actually does today, not what it is planned to do.
1. Who we are
Sipru is operated by Stepan Zarichnyi, a sole trader based in the United Kingdom. Contact: [email protected].
2. Two different roles
Sipru holds two kinds of personal data, and the law treats them differently.
| Role | Whose data | Examples |
|---|---|---|
| We are the controller | Yours, as a person with a Sipru account | Your e-mail address, display name, workspace settings, accessibility preferences, your client profile and the links between your account and the professionals you work with, billing (nothing is charged today), and any request for a specialist you make |
| We are the processor | The clients', leads' and contacts' of the professional using Sipru | Names, e-mails, phone numbers, notes, enquiries, quotes, contracts, invoices, projects, questionnaire answers and messages that a professional enters or receives in their workspace |
When a professional records a client, the professional decides why that data is held and is its controller. We process it only to give them the features of the app, under the data processing agreement. They are responsible for having a lawful basis for holding it and for telling the people it is about.
If you are a client of a professional who uses Sipru, the records they keep about you are theirs. A Sipru account you make yourself, to see your projects, is ours.
3. What we collect
Your account
- Email address — to create your account, sign you in and match invitations.
- Password — stored only as a secure hash by Supabase Auth. It is never stored in the app's own tables and we never see it.
- Display name, language, and your accessibility preferences.
- A marketing-consent field exists in the database and is currently unused; nothing is sent to it and no marketing email is sent by Sipru today.
Your workspace and team
- Business name, country, currency, time zone and the kinds of work you do.
- Who belongs to the workspace and whether they are an owner or a member.
- Invitations: the invited email address, the role, when it expires and whether it was used. The invite link itself is never stored — only a one-way hash of it, so a leaked database cannot be used to accept an invitation.
What a professional records about other people
Clients and additional contacts (name, email, phone, type, tags), private notes, leads with their stage, budget, event date and next action, quotes, contracts, invoices, and projects with their dates, venue, tasks, questionnaires and answers, delivery links and messages. These are free-text fields and may contain whatever is put in them, so treat them the way you would treat a notebook about your customers.
Sipru does not read your device's address book, and there is no import from it.
What people do through the links a professional sends
- A link to a quote, contract, invoice, project, questionnaire or delivery is a long random value. We store only a one-way hash of it, with who it was made for, what it points to, when it expires (30 days) and whether it was used.
- When a client accepts a quote, we record the time, the IP address and the browser details. When a client signs a contract by typing their name, we record the typed name, the time, the IP address, the browser details, the consent text they were shown and a fingerprint (a hash) of the document version. Viewing a contract, and the one-time-code steps when they are on, are recorded the same way.
- When a delivery link is opened, we record when, whether through an account or a link, and the IP address and browser details.
- Messages, questionnaire answers and the people's typed names are stored in the professional's workspace.
- A one-time code (a six-digit code e-mailed to the client, valid for ten minutes) is a step that is switched off until e-mail delivery is. When a code is issued it is stored hashed on the link, and, while e-mail delivery is not configured, an encrypted copy of it also waits in the outbox of messages to be sent, until the workspace is erased.
- To slow down abuse, requests to the client pages are counted by IP address in short-lived counters that are cleared within two days.
Documents and PDFs
Quotes, contracts and invoices can be drawn as PDF files. They are kept in private storage and handed out only through links that work for one hour. A signed contract's PDF carries a page with the signature record.
Client accounts
A person can use Sipru as a client: they have an account, a client profile, and links to the professionals they work with. A link is made only after Sipru has checked that the person controls the e-mail address the professional holds for them, or when they redeem a link sent to them. Opening a forwarded link while signed in never links accounts. A client can unlink a professional at any time.
A client can also ask for a specialist, giving a region, a service, a date and a way to reach them. Sipru does not match them with anyone or pass the request on; it is kept by us and listed to the client in the app.
Messages
Messages between a professional and a client about a project are stored in the professional's workspace. The workspace's members can read them, and so can the client they are with.
E-mail notifications waiting to be sent
When something happens in a workspace (a quote is sent, accepted, declined or expires, a contract is sent or signed, a questionnaire is sent or answered, a delivery link is published, a message is posted, a member is invited), Sipru writes an e-mail notification into a queue: the recipient's e-mail address, which event it is about (with the identifiers of the quote, contract or project concerned) and when it is due. No sign-in token or one-time code is copied into it. Sipru does not send these e-mails today, because e-mail delivery is not configured, so they wait in the queue. The workspace's owners can read the list in the app, with each address partly hidden. The queue is kept until the workspace is erased or deleted with the account that owns it.
On your device
- Your sign-in session — in the device keychain on iOS and Android, in browser storage on the web.
- A copy of your accessibility settings and your last selected workspace.
- An invitation link you opened before signing in, held until it is used or fails.
On this website
sipru.co.uk sets no cookies and runs no analytics. Its pages, including the pages a client opens from a link, load their typefaces from Google Fonts, so Google receives the visitor's IP address and browser details. Cloudflare, which serves the pages, sees each request, including the link in the address.
4. What we do not collect
The app contains no analytics, advertising, attribution, crash-reporting or tracking software — no Firebase Analytics, Sentry, Segment, Mixpanel, Amplitude, AppsFlyer or ad network — and no advertising identifier is read.
There is no access to contacts, calendar, precise location, camera, microphone recording, health data or your photo library. Release builds for Android explicitly block storage and microphone permissions.
We do not sell personal data, and we do not share it for advertising.
5. Where it is stored, and who else touches it
Sipru runs on Supabase — authentication, database, file storage and server functions — on Amazon Web Services in its London region (eu-west-2). The full list, with what each one receives, is Annex 1 of the data processing agreement:
- Supabase — database, sign-in, storage and server functions.
- Cloudflare — hosts this website and the client pages, and runs the DNS.
- Expo (EAS) — delivers updates to the app.
- Google Fonts — the typefaces on the website.
- Resend — will send e-mail once e-mail delivery is configured. It is not in use today.
- Apple and Google — app store accounts and, where it is switched on, sign-in. Sign in with Apple and Google sign-in are off in the beta.
Supabase Inc. is incorporated in the United States, and some of the others run infrastructure outside the United Kingdom, so some operational metadata, such as IP addresses and logs, may be handled outside the United Kingdom under their own terms. Workspace data stays in the London region.
Sipru does not send e-mail about quotes, contracts or messages today. Confirmation and password-reset email is sent through Supabase's built-in provider, which in the beta only delivers to addresses on the project's own team.
6. Why we are allowed to hold it
| Data | Lawful basis (UK GDPR) |
|---|---|
| Account, profile and client account | Performance of a contract — you asked us to run the app for you |
| A request for a specialist | Your request — you ask us to record it and show it to you |
| Workspace, CRM and document content | The professional's lawful basis; we act on their instructions as processor |
| Security and audit records | Legitimate interests — keeping accounts safe and changes accountable |
| Invoices, signed contracts and their records kept after deletion | Legal obligation and legitimate interests — records a business must keep |
| Marketing, if it is ever introduced | Consent, which you would give and could withdraw |
7. How long it is kept
| What | How long |
|---|---|
| Account and workspace data (clients, leads, quotes, projects, messages) | Until you delete it or delete your account |
| Issued invoices and signed contracts, with their signature records and PDF copies | Six years |
| Audit records of significant actions | Six years |
| Client page links | Work for 30 days |
| Workspace invitations | Work for seven days |
| Data export download links | Work for one hour; the file is removed when you delete your account |
| One-time codes | Valid for ten minutes. While e-mail delivery is not configured, an encrypted copy stays in the outbox until the workspace is erased |
| E-mail notifications waiting to be sent (recipient address and event details) | Until the workspace is erased or deleted with the account |
| Abuse-limiting counters | Cleared within two days |
The scheduled job that erases the six-year records once the six years are over is not built yet. Until it is, they are not removed automatically.
When you delete your account, your login, profile and accessibility preferences are removed, your client account and its links, its requests for a specialist and the messages it wrote are removed, any export file we made for you is deleted, and so is every workspace you own, even if other people are members of it. Sipru has no way to hand a workspace to someone else yet: its creator is its only owner. The exceptions are the invoices and signed contracts above, which stay with the projects and client names they belong to, together with their PDF copies for the retention period; and the audit record. Every other PDF file drawn from the workspaces you owned (quotes, drafts, contracts that were never signed) is removed when the account is deleted. The step-by-step list is on the delete account page. Workspaces that someone else created and invited you into continue to exist; only your membership of them is removed.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018 you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form.
Two of those are buttons rather than requests: More → Account → Export my data gives you a JSON file of everything your account can reach, through a private link that expires after one hour; More → Account → Delete account does what section 7 describes.
If a professional holds data about you in their Sipru workspace, ask them first: they decide what happens to it, and we will help them. For anything else, write to [email protected]. If you are not satisfied with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.
9. How it is protected
Every workspace is separated in the database itself, by row-level security rather than by application code alone, so one workspace cannot read another's records even if the app is wrong. A person who opens a link can reach only what that link points to. The app ships only a public key; the key that can bypass those rules never leaves the server. Passwords are hashed by Supabase Auth and are not visible to us.
No system is perfect, and Sipru is a beta. If you find something that looks wrong, please tell us at [email protected].
10. Children
Sipru is a tool for running a business and is not intended for anyone under 16.
11. Changes
If this notice changes in a way that matters, the date at the top changes with it and significant changes will be told to you in the app.