Privacy Policy

The short version

TipScan exists to keep your tip records safe — not to monetize your data. We collect only what the app needs to work, we show no ads, we never sell or share your data for advertising, and you can export or permanently delete everything at any time.

What we collect

• Shift records you enter — dates, times, tip amounts, tip-outs, notes, and job labels.
• Slip photos you choose to scan — processed to extract the printed amounts. Photos are transmitted securely for processing; extracted numbers are stored with your record.
• Account identifiers — an anonymous device identifier is created automatically so your records are backed up before you ever sign up. If you add an email or sign in with Google or Apple, we store your email address and the sign-in provider's user ID.
• Basic diagnostics — our web server keeps standard access logs (IP address, timestamp, requested URL) for security and reliability. The website uses Google Analytics for aggregate traffic measurement; the mobile app does not include advertising or analytics SDKs.

We do not collect contacts, precise location, advertising identifiers, or anything from your device beyond what is listed above.

How your data is processed and stored

• Records are stored on secured servers hosted on Amazon Web Services, encrypted in transit (TLS).
• Slip images are processed by Google Cloud's Gemini API solely to extract the printed amounts. Images are not used to train models under the paid API terms we use.
• Sign-in emails are delivered via Resend. Google and Apple sign-in are verified with the respective provider.

What we never do

• No selling or renting your personal data. Ever.
• No advertising, and no sharing data with ad networks or data brokers.
• No reporting to the IRS, your employer, or anyone else — your records are yours.

Your rights and controls

• Export — download all of your records as a standard CSV at any time, free (Reports → Export CSV).
• Delete — permanently delete your account and all associated data in the app (Reports → Account → Delete account) or at tipscan.app/account/delete. Cloud data is removed immediately; server backups age out within 30 days.
• Access & correction — everything we store about you is visible and editable inside the app.

California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA, and we honor deletion and access requests as described above.

Data retention

We keep your records for as long as you keep your account, because the product's core promise is that your history never disappears. Delete your account and it's gone, as described above. Anonymous device accounts with no activity for 24 months may be purged.

Children

TipScan is intended for working adults and is not directed at children under 13.

Changes and contact

If this policy changes materially, we'll note it here with a new effective date. Questions or requests: support@tipscan.app.