Privacy Policy

We collect what we need to give you a tip page and move money to your bank — and nothing we'd have to sell to stay in business. We don't sell your data. We never see or store card numbers. Payments and identity checks are handled by Stripe.

When you create a page to receive tips, we store:

• —Account details — your email address, display name, role, and venue.
• —An optional photo you upload for your page.
• —Push notification tokens, if you install our app and allow notifications, so we can tell you when a tip lands.
• —Tip transaction records — amounts, fees, timestamps, status, and any name or note the tipper chose to attach.

To pay you, Stripe separately collects identity and banking information (your legal name, date of birth, the last digits of a government ID, and your bank or debit-card details) as part of its required verification. That information is held by Stripe under its own privacy policy; we receive only your account status and payout summaries, not your full banking credentials.

If you leave a tip, you don't need an account. We store the tip amount, the time, and — only if you choose to add them — your first name and a short note. Your card details are entered directly into Stripe's payment sheet and never touch our servers.

To run your page, process tips, pay you, send the receipts and notifications you ask for, prevent fraud and abuse, and meet our legal and tax obligations. That's the whole list.

We use a small set of processors, each handling only what their job requires:

• —Stripe — payment processing, payouts, and identity verification (KYC).
• —Supabase — our database and file storage for account and tip records.
• —Vercel — application hosting and delivery.
• —Expo — delivery of push notifications to the mobile app.

We may also disclose information if the law requires it. We do not sell or rent your personal information to anyone, and we don't share it for cross-context behavioral advertising.

We keep account and transaction records for as long as your account is active and as long as tax and financial-record laws require afterward. You can ask us to delete your account and personal data at any time by emailing willsahatdjian@gmail.com. Some transaction records are retained where the law requires it, even after account deletion.

Connections are encrypted in transit. Card data is handled entirely by Stripe, a PCI-DSS Level 1 provider, and never reaches us. No system is perfectly secure, but we keep our footprint small on purpose.

Tipperis for adults. It is not directed to anyone under 18, and we don't knowingly collect information from minors.

If we change this policy, we'll update the date above. Questions about your data go to willsahatdjian@gmail.com. See also our Terms of Service.