Privacy Policy

Introduction

Tipling ("the App") is a tip and income tracker where a penguin waiter keeps a tip jar and a small café that grows as you log your shifts. This Privacy Policy explains what data the App handles, how it is used, who it is shared with, and the rights you have.

The App is operated by Unattached Limited ("we," "us," or "our"). By using Tipling, you agree to the practices described here.

1. Information We Collect

1.1 On-Device Data (we do not receive this)

Everything you enter in Tipling is stored locally on your device: your logs (shifts, paychecks, and days off, with tips, hours, wages, tip-out, sales, covers, mileage, deliveries, and notes), your jobs, positions, shifts and sections, your schedule, your goals and settings, the optional name you add to reports, and your in-app progress (coins, stamps, sealed jars, and café decorations). This data stays on your device and is removed when you delete the App or erase it in Settings. We do not upload or receive it.

1.2 No Account Required

Tipling does not require sign-up or login. We do not collect your name, email address, phone number, employer, or any social-account identity unless you choose to contact us directly.

1.3 Files You Export or Share

When you save or share a spreadsheet (CSV) or PDF report, Tipling creates the file on your device and hands it to the destination you pick — for example the Files app, Mail, AirDrop, or a cloud drive. We do not receive a copy. From that point the file is handled by the app or service you chose, under its own privacy policy. Reports may contain your earnings, workplace names, and the name you entered, so share them with care.

1.4 iCloud Sync, Backup Files, and Device Backups

If iCloud is turned on for Tipling on your device, the App keeps a copy of your data in your own iCloud account, using the Apple Account already signed in on your device, so that it is still there after you reinstall the App or move to a new iPhone. This copy is stored by Apple under your account and Apple's privacy policy. It does not pass through our servers and we cannot access it. You can turn it off at any time in iOS Settings under iCloud.

You can also save a backup file from Settings. Like any exported file, it is created on your device and goes only where you choose to put it; it contains all of your Tipling data, so keep it somewhere private. Separately, if you use iCloud Backup or back up your device to a computer, Apple may include Tipling's on-device data in that backup. We have no access to any of these copies.

1.5 Calendar Sync (optional)

If you turn on calendar sync, Tipling asks for access to the calendars on your device and writes your scheduled shifts and days off into the calendar you choose, with the job, position, shift, section, and times you set. iOS only offers this as full calendar access, but Tipling only creates, updates, and removes events it created itself; it does not read, copy, or send us your other events. Events are written on your device. If the calendar you pick belongs to an account that syncs — such as iCloud or a Google account added to your device — that provider will receive those events under its own privacy policy. Turning sync off removes the events Tipling created.

1.6 Purchase Data

Tipling offers an optional "Tipling Pro" upgrade. Purchases are processed by Apple and managed through RevenueCat. When the App starts, it contacts RevenueCat to check whether Pro is active; this uses a random, app-generated identifier that is not linked to your name or email. We and RevenueCat receive a pseudonymous purchase/transaction record and your Pro entitlement status so the App can unlock Pro features and restore purchases, along with basic technical information sent with any network request (such as app version, operating-system version, device model, country of your App Store account, and IP address). None of your logs, tips, wages, or schedule are sent. We never receive your full payment-card details.

1.7 Feedback and Messages You Choose to Send

If you rate the App inside Tipling and send feedback, or use "Message us," we receive your star rating (for feedback), the text you type, the email address you enter, the app version, your operating-system version, device type, language/region setting, and a timestamp. This is sent only when you tap send, is stored in our database, and is forwarded to our team's Slack workspace so we can read and answer it. It never includes your logs, tips, wages, or schedule unless you write them in your message. The App remembers the email address you entered on your device so you do not have to retype it.

1.8 Technical Data

• If you have chosen to share analytics with app developers in your device settings, Apple may provide us with aggregated, de-identified crash and usage diagnostics. These do not include your records;
• If you email us, we receive your email address and whatever you choose to include in your message.

In the iPhone version we do not use third-party advertising trackers. The Android version uses Google AdMob to show ads; see Section 11. We ourselves do not build advertising profiles about you.

2. How We Use Your Information

Your records are used on your device to show your calendar, statistics, forecasts, schedule, and reports. The limited information that can reach us (Sections 1.6–1.8) is used solely to:

• Respond to your questions and support requests;
• Maintain, secure, debug, and improve the App.

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information.

3.2 Service Providers

We rely on a small number of vendors strictly to operate the App:

• Apple — app distribution, optional de-identified diagnostics, and payment processing for Tipling Pro;
• RevenueCat — purchase and subscription-entitlement management;
• Supabase — database that stores the feedback and messages you choose to send us;
• Slack — notifies our team of that feedback and those messages.

These providers act as our processors, may use the data only to perform these services for us, and are also governed by their own terms and privacy policies. Neither we nor they receive your Tipling records, which stay on your device.

3.3 Legal Requirements

We may disclose information we hold if required by law or to protect the rights, safety, and security of users, the public, or us. Because your records are stored only on your device, we have no copy of them to disclose.

3.4 Business Transfer

Any information we hold may be transferred as part of a merger, acquisition, or sale of assets, subject to this Policy.

4. Data Storage, Security, and Retention

4.1 Storage and Security

Your records are stored in the App's private storage on your device and are protected by your device's own security, such as your passcode and iOS data protection. Anyone who can unlock your device can open the App and see your records. We apply reasonable safeguards to the little information we hold (such as support emails) but cannot guarantee absolute security.

4.2 Retention

On-device data is kept until you delete the App or erase it in the App. Exported files are kept wherever you saved or sent them until you delete them there. Purchase records are retained by Apple and RevenueCat according to their policies and as needed for accounting and support. Feedback and messages are retained while they remain useful for supporting you and improving the App. Support emails are retained for as long as needed to help you and to keep a record of the request.

4.3 Deleting Your Data

To delete everything, use Settings → Erase everything in the App, or delete the App. This removes all on-device data (logs, schedule, settings, and café progress) and cannot be undone. Files you have already exported are not affected; delete them where you saved them. Calendar events Tipling created are removed when you turn calendar sync off or erase your data in the App; if you delete the App without doing so, remove them in your calendar app. To request deletion of feedback, a message, or an email you sent us, contact us (Section 11); we process verified requests within the time required by applicable law.

5. Permissions

• Notifications (optional): if you turn on the daily reminder, the App schedules a notification on your device at the time you choose. Reminders are created and delivered locally; nothing is sent to us;
• Files (when you export): the App writes a file only to the location you select in the system save or share sheet;
• Calendars (optional): requested only if you turn on calendar sync, and used only as described in Section 1.5;
• Tipling does not request access to your location, contacts, photos, camera, or microphone;
• You may change or revoke any permission at any time in your device settings.

6. Your Rights and Choices

• Keep your records entirely on-device (the default);
• Export your records at any time as a CSV spreadsheet or PDF report;
• Erase all data in the App at any time;
• Turn reminders and calendar sync on or off;
• Choose whether and when to send feedback or a message;
• Manage or cancel your subscription in your App Store account settings;
• Contact us with any privacy question or complaint.

7. Rights for Users in Specific Regions

7.1 European Economic Area / UK (GDPR)

You have the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. Because your records are stored only on your device, you can exercise most of these directly in the App (view, edit, export, and erase). For the limited data we hold, our legal bases are performance of our service (purchases) and our legitimate interests / your consent (feedback and messages). You may lodge a complaint with your local supervisory authority.

7.2 Japan (APPI)

We handle personal data in accordance with the Act on the Protection of Personal Information, and you may request disclosure, correction, or deletion of your retained personal data.

7.3 Republic of Korea (PIPA)

Where PIPA applies, we obtain consent where required, limit use to stated purposes, and honor rights to access, correct, and delete.

7.4 California (CCPA / CPRA)

• Right to know what personal information we collect and how it is used;
• Right to delete personal information;
• Right to correct inaccurate personal information;
• Right to opt out of "sale" or "sharing" (we do not sell your data; in the Android version, Google AdMob may use your device's advertising ID for personalized ads, which some laws treat as "sharing" — Section 11 explains how to opt out);
• Right to non-discrimination for exercising your rights.

8. International Data Transfers

Your Tipling records are not transferred to us. Purchase and entitlement data handled by Apple and RevenueCat, feedback and messages handled by Supabase and Slack, support emails, and any diagnostics Apple provides may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Children's Privacy

Tipling is intended for people who work and earn tips and is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal data from children. If you believe a child has provided us personal data (for example, by email), contact us and we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Policy from time to time, including if we add cloud backup or sync, or other features that change how data is handled. Material changes will be reflected by a revised Effective Date and, where appropriate, notice within the App. Continued use after an update means you accept the revised Policy.

11. Android Version

This section applies only to Tipling for Android, distributed on Google Play. Where it differs from the rest of this policy, this section is what applies to the Android app. Everything about your records staying on your device is the same.

11.1 Advertising (Google AdMob)

The Android app shows banner ads, and optional rewarded video ads that you choose to watch, to people who do not have Tipling Pro. Tipling Pro removes all ads. Ads are provided by Google AdMob. To deliver and measure ads and prevent fraud, Google collects from your device: the advertising ID, IP address (which indicates approximate location), device model, operating-system and app version, language, and information about the ads you see and tap. Google may use this to show personalized ads, subject to your choices below, under Google's policy on how it uses data from apps that use its services.

Your logs, tips, wages, jobs, schedule, and reports are never shared with Google or any advertiser.

Your choices: where the law requires it (for example in the EEA, the UK, and Switzerland), the app asks for your consent before showing ads, and you can decline personalized ads. On any Android device you can reset or delete your advertising ID, or turn off ad personalization, in the device's Settings under Google > Ads (or Privacy > Ads). Buying Tipling Pro removes ads entirely.

11.2 Analytics (Google Analytics for Firebase)

The Android app uses Google Analytics for Firebase to count installs, first opens, and Tipling Pro purchases, and to measure how our own Google Ads campaigns perform. It collects an app-instance identifier, the advertising ID (where you allow it), device model, operating-system and app version, language, country, and general usage events such as opening the app. It does not receive your logs, tips, wages, jobs, schedule, or reports. The consent choice described in 11.1 also applies to analytics, and resetting or deleting your advertising ID in the device's Settings limits how this data can be linked to you.

11.3 Purchases

On Android, Tipling Pro is purchased through Google Play and managed through RevenueCat, in the same way and with the same limited data as described in Section 1.6, with Google in place of Apple. We never receive your full payment-card details.

11.4 Calendar Sync and Backups

The Android app has no iCloud sync. If you turn on calendar sync, Tipling asks for permission to read and write the calendars on your device and writes your scheduled shifts and days off into the calendar you choose — normally your Google Calendar, whose account then receives those events under Google's privacy policy. Tipling only creates, updates, and removes events it created itself; it does not read, copy, or send us your other events. Backup files you save go only where you choose to put them. If Android's device backup is turned on, Google may include Tipling's on-device data in your own device backup; we have no access to it.

11.5 Permissions on Android

• Calendar — only if you turn on calendar sync;
• Notifications — only if you turn on the daily reminder or shift alerts;
• Advertising ID and internet access — used by Google AdMob to show ads, and by the app to check Tipling Pro and send feedback you choose to send.

11.6 Service Providers on Android

In addition to RevenueCat, Supabase, and Slack (Section 3.2), the Android app relies on Google for app distribution, payment processing, optional de-identified diagnostics, advertising (AdMob), and analytics (Firebase).

12. Contact Us