Privacy Policy

1. What we collect

• Account holders (owners & staff): name, email address, business name, and the role/photo-emoji details shown on your tip page.
• Staff payout details: collected and held by Stripe, not by us. We store only your Stripe account ID and whether onboarding is complete.
• Tippers: the tip amount, who it went to, and an optional message you write. Your card details go directly to Stripe — we never see or store them. You don't need an account to tip.
• Location (Tipr app, while you're on shift): if you use the Tipr app and go on shift, the location of where you're working. See section 3 for exactly when and how.
• Notification token (Tipr app): if you allow notifications, a token that lets us send notifications to your phone, such as when you receive a tip.
• Technical basics: logs and cookies needed to keep you signed in and the service working. We don't run ad trackers.
• Checkout steps: on tip and pay pages we record which steps of checkout a visit reaches, such as choosing an amount, opening Apple Pay or finishing a payment, along with the amount, under a random code that lasts only that visit and is never linked to your name, card, device or IP address, so we can see where checkout goes wrong.

2. How we use it

To run the service: showing staff on the right tip page, routing tips to the right bank account, showing owners their reporting dashboard, letting customers near you know they can tip you while you're on shift, and sending service emails and notifications (like tip notifications and password resets). We don't sell personal data, and we don't use it for advertising.

3. Location data

The Tipr app collects location data to enable shifts, including moving shifts that use your location even when the app is closed or not in use. The Tipr website does not collect your location, and you never need to share it to receive tips through a tap card or tip page. The first release of the Tipr Staff app ships without shifts and does not request or collect location at all; this section applies from the release that adds them.

• When: only while you're on a shift that you started in the app. Nothing is collected while you're off shift.
• At a place (a booth, a chair, a desk): your precise location once, when the shift starts, or the location of a place you saved.
• On the move (a shuttle or a route): your precise location about once a minute, including while the app is closed or not in use, until the shift ends. This is the only feature that uses your location in the background. While it runs, Android shows a notification the whole time and iPhone shows the location indicator in the status bar.
• Why: so customers near you can be prompted to leave you a tip.
• What others see: customers are never shown your exact position. They can see your business's name — for individual accounts, the name on your tip page — and an approximate location rounded to about 25 metres. Your business owner cannot see your location.
• How long we keep it: we keep only your current position, replacing it each time it updates, and delete it when your shift ends or expires. A shift lasts at most 12 hours, and a moving shift stops within about 20 minutes if your phone stops reporting. We don't keep a history of where you've been.
• Saved places: places you save to start a shift quickly are kept until you remove them in the app or delete your account.
• Your control: you can end your shift at any time, use “At a place” without ever granting background location, or turn off location access for the Tipr app in your phone's settings.

Location data is never sold or used for advertising.

4. Who we share it with

• Stripe — payment processing, payouts, and identity verification.
• Supabase — our database and authentication provider.
• Vercel — our hosting provider.
• Expo — delivers Tipr app notifications, through Google's and Apple's push notification services.

Beyond these service providers, we only share data when the law requires it.

5. Retention and deletion

We keep account and tip records while your account is active, and transaction records as long as required for financial and tax purposes. Location data is kept only as described in section 3. Notification tokens are removed when they stop working, such as after you uninstall the app.

To delete your account, follow the steps on our account deletion page. To request a copy of your data, email hello@usetipr.com and we'll handle it promptly.

6. Children

Tipr accounts are for people 18 and over. We don't knowingly collect data from children.

7. Changes

If we change this policy in a meaningful way we'll post the new version here with an updated date.

8. Contact

Privacy questions: hello@usetipr.com.