Privacy policy

Last updated: 30 October 2026

Tipple is run by Tipple Pte. Ltd. (UEN 202646063K), a company registered in Singapore ("Tipple", "we", "us"). This policy explains what personal data the Tipple app and tipple.sg collect, why, who sees it, how long we keep it, and what you can do about it. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

Questions, requests and complaints go to our Data Protection Officer at support@tipple.sg.

1. What we collect, and why

Your account.

  • Your email address and password, so you can sign in. Your password is stored by our sign-in provider in a form we cannot read.
  • Your display name, and a profile photo if you choose to add one. Only you can see your photo.
  • Your date of birth, to confirm you are 18 or over. Tipple is about bars and drinks, and we need to be able to show that we checked.
  • Your member number, membership status and the date you joined.
  • If you sign in with Google or Apple, your name and email address from them. Apple may give us a private relay address instead of your real one.

Your choices. A record that you agreed to our terms and this policy, and whether you agreed to hear about offers and venue launches by email. That second one is separate and optional.

What you do in the app.

  • The offers you claim: which venue, which offer, and when. We use this to give you the offer, to count your visits towards Tipple+ and badges, and to charge venues for the customers Tipple brings them.
  • Wrong venue codes you enter, and claims our checks mark for a closer look, to protect members and venues from misuse.
  • The venues and events you save, the venues you hide, your private notes on venues, your trivia answers and best streak (whether you were right, not what you chose), and any reports you send that a price or happy hour is wrong.
  • The venue types and areas you pick as your interests, if you pick any. We use them only to show matching venues and events first in the app. You can change or clear them in Profile, under Your interests.

How you use the app. When you are signed in, Tipple records how you use the app: which screens you open, whether you browse the list or the map, which filters and sorting you choose, and how often you search. We record that a search happened and how many results it found, never what you typed. We use this only to decide what to improve, fix or build next. It is linked to your account, but it is never sold, never shared with advertisers, never used to show you ads, and venues do not see it. It does not include your location, your email address, or anything you type.

When something goes wrong. If the app crashes, it sends a technical report: what failed, the screen, the app version and the type of phone, with an anonymous account number. We remove email addresses, phone numbers, locations and anything that looks like a password or code before it is sent.

Permissions on your phone. Tipple asks for each permission only when you use the feature that needs it. You can say no and still use the rest of the app, and you can change your answer at any time in your phone's settings.

  • Location. Used to sort venues by distance and centre the map. Your location stays on your phone: it is never sent to us, stored, or shared with venues. The map is drawn by Google Maps, which shows your position on your phone in the usual way.
  • Camera. Used only to scan the code at a bar when you claim an offer. Your phone reads the code from the camera view. Nothing is photographed, recorded, stored or sent to us apart from the code itself.
  • Photos. Used only if you choose a profile photo. Tipple sees just the one photo you pick, never the rest of your library. That photo is stored privately and only you can see it. Removing it, or deleting your account, deletes it.
  • Calendar. Used only when you tap Add to calendar on an event. Tipple adds that one event and cannot read anything already in your calendar. Nothing from your calendar is sent to us.
  • Notifications. See "Offer alerts" below.

The app never asks for access to your microphone or contacts.

Offer alerts. Offer alerts are off until you turn them on in Profile. If you turn them on and allow notifications, your phone gives us a push token: an address for sending notifications to that phone, which is not your phone number. We keep the token, whether the phone is an iPhone or Android, when it was last used, your alerts setting, and any saved venues you have muted. We use them only to send the alerts you chose. An offer alert is a marketing message, so turning alerts on also records your agreement to receive offers. Notifications are delivered through Apple (on iPhone) and Google (on Android). You can turn alerts off in Profile or in your phone's settings at any time, and deleting your account deletes your tokens.

On tipple.sg. If you join the waitlist we keep your email address, your confirmation that you are 18 or over, and any venue you nominate. If you register a venue's interest we keep the venue's name, your name and email, and anything optional you add (a phone number, the neighbourhood, a note). To stop one connection flooding these forms, we keep a scrambled copy of its IP address, not the address itself, for an hour. The website sets no cookies and runs no analytics or advertising trackers.

2. If you work at a partner venue

Owners and staff of partner venues sign in to the venue portal at tipple.sg/portal to manage their venue's listing. A venue sign-in is separate from a member account: it needs no date of birth and has no member profile.

  • What we keep. The email address we invited, the venue it belongs to, and when you accepted the venue rules. Our sign-in provider records when you sign in. Changes you make to the listing, hours, prices and offers are saved against the venue, and new or reworded offers are sent to Tipple for approval.
  • Keeping sign-in links safe. To check that a sign-in link is opened on the device that asked for it, we keep a scrambled copy of the email address and a random key for that browser for one day. A browser that has been confirmed is remembered for 60 days. Wrong venue codes entered in the portal are counted for an hour, to stop guessing.
  • In your browser. The portal keeps your sign-in, that random key and the tab you last opened in your browser's local storage. It sets no cookies and runs no trackers.
  • What venues see. The portal shows counts of offers claimed and members returning. It never shows who a member is.
  • How long we keep it. For as long as your venue is on Tipple. When a venue leaves, or when you ask, we remove its sign-ins.

A venue's name, address, opening hours, prices, offers and photos are business information, and members see them in the app.

3. What we do not do

  • We do not sell your personal data.
  • We do not use it for advertising, and we do not share it with advertisers.
  • We do not track you across other apps or websites.

4. Who can see it

  • Venues see numbers, never people. A venue can see how many offers were claimed there and when, and how many members came back. It cannot see who you are, what you saved, your notes, or anything else about you.
  • Other members see nothing about you.
  • Tipple staff look at an individual member's records only when there is a reason, such as a support request, and each look is recorded with that reason. You can see those records in your data download.
  • Companies that run parts of Tipple for us, under contracts that limit what they may do with your data:
    • Supabase, which hosts our database, sign-in and stored photos.
    • Resend, which sends our account emails.
    • Sentry, which receives crash reports.
    • Google, for maps, Google sign-in, notifications on Android, and the fonts on our website.
    • Apple, for Sign in with Apple and notifications on iPhone.
    • Expo, which passes offer alerts on to Apple and Google.
    • Cloudflare, which hosts tipple.sg.
  • Anyone the law requires us to share data with, such as a court or regulator.

If Tipple, or part of it, is ever sold or merged into another company, your data would move with it, and this policy would continue to apply to it.

5. Where your data is stored

  • Our database, sign-in and stored photos are held by Supabase on Amazon Web Services servers in Seoul, South Korea.
  • Account emails are sent through Resend's servers in Tokyo, Japan.
  • Crash reports are held by Sentry in the United States.
  • Offer alerts pass through Expo in the United States on their way to Apple or Google.
  • The website is served by Cloudflare from the data centre nearest to you.

When personal data leaves Singapore, we use providers bound by contract to protect it, and we make sure, as the PDPA requires, that it is protected to a standard comparable to Singapore's. If we move where your data is stored, we will update this page first.

6. Marketing

We only send you offers and news about venues if you said yes when you signed up. It is a separate choice from agreeing to our terms, and it is never ticked for you. You can change your mind at any time in Profile → Offers and news by email. Turning it off also turns off any offer alerts.

7. How long we keep it

  • Your account and everything in it, until you delete your account.
  • How you use the app: 13 months, then deleted automatically.
  • When you delete your account, your profile, photo, saved venues and events, hidden venues, notes, trivia answers and best streak, reports, alert settings, push tokens and app usage are deleted straight away. Records of the offers you claimed, the consents you gave and our access log are kept, because we need them for billing venues and as evidence, but your name, email and anything else that identifies you are removed from them first. Of your date of birth we keep only whether you were 18 or over.
  • If you start signing up with Google or Apple and do not finish, we delete what they gave us straight away if you leave from that screen, and otherwise within 7 days.
  • Waitlist and venue-interest details, until you ask us to delete them.
  • Venue portal sign-ins, as set out in section 2.

8. Your rights

  • See your data. Profile → Download my data gives you a file with everything we hold about you. You can do this once a day.
  • Correct it. You can change your name, photo and interests in the app. For anything else, email us.
  • Delete it. Profile → Delete account deletes your account straight away. If you signed up with Google or Apple, you confirm by signing in with them again instead of entering a password. No longer have the app? See tipple.sg/delete-account.
  • Withdraw your consent to marketing in Profile, or to anything else by emailing us. Withdrawing consent to the terms means closing your account.
  • Complain. Tell us first at support@tipple.sg. You can also contact Singapore's Personal Data Protection Commission.

We reply to requests within 30 days.

9. Keeping it safe

  • Data is encrypted as it travels between your phone, the website and our servers, and our database provider encrypts it where it is stored.
  • Our database only lets each member read their own records, and venues only ever receive counts.
  • Passwords are held by our sign-in provider in a form nobody can read, us included. Venue codes are kept in our database only in scrambled form.
  • Staff access is limited to the people who need it, and every look at a member's records is logged.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the Personal Data Protection Commission as the PDPA requires.

10. Age

Tipple is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you are under 18 you cannot create an account, and if we learn that someone under 18 has, we will delete their data.

11. Changes to this policy

If we change how we use your data, we will update this page and, if the change matters, tell you in the app or by email before it takes effect.

12. Contact

Tipple Pte. Ltd. (UEN 202646063K). Data Protection Officer: support@tipple.sg.