Privacy Policy

The short version

TipScan exists to keep your tip records safe — not to monetize your data. We collect only what the app needs to work, we show no ads, we never sell or share your data for advertising, and you can export or permanently delete everything at any time.

What we collect

Checkout-slip scanning has been retired. TipScan no longer accepts photos for AI processing. Previously saved shift records remain available.

• Shift records you enter — dates, times, tip amounts, tip-outs, notes, and job labels.
• Account identifiers — an anonymous device identifier is created automatically so your records are backed up before you ever sign up. If you add an email or sign in with Google or Apple, we store your email address and the sign-in provider's user ID.
• Basic diagnostics — our web server keeps standard access logs (IP address, timestamp, requested URL) for security and reliability. The website uses Google Analytics for aggregate traffic measurement; the mobile app does not include advertising or analytics SDKs.

We do not collect contacts, precise location, advertising identifiers, or anything from your device beyond what is listed above.

How your data is processed and stored

• Records are stored on secured servers hosted on Amazon Web Services, encrypted in transit (TLS).
• Sign-in emails are delivered via Resend. Google and Apple sign-in are verified with the respective provider.

What we never do

• No selling or renting your personal data. Ever.
• No advertising, and no sharing data with ad networks or data brokers.
• No reporting to the IRS, your employer, or anyone else — your records are yours.

Your rights and controls

• Export — download all of your records as a standard CSV at any time, free (Reports → Export CSV).
• Delete — permanently delete your account and all associated data in the app (Reports → Account → Delete account) or at tipscan.app/account/delete. Cloud data is removed immediately; server backups age out within 30 days.
• Access & correction — everything we store about you is visible and editable inside the app.

California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA, and we honor deletion and access requests as described above.

Data retention

We keep your records for as long as you keep your account, because the product's core promise is that your history never disappears. Delete your account and it's gone, as described above. Anonymous device accounts with no activity for 24 months may be purged.

Children

TipScan is intended for working adults and is not directed at children under 13.

Changes and contact

If this policy changes materially, we'll note it here with a new effective date. Questions or requests: support@tipscan.app.