Your information should work for you.

Information we collect

• Account information, including your email address and authentication identifiers.
• Public profile details you choose to provide, such as display name, handle, role, city, biography, and profile image.
• Band and usage information, including band codes, pairing status, tap timestamps, a hashed IP address, and browser or device information used for security and fraud prevention.
• Tip records, including amount, currency, status, optional guest name or note, and payment transaction identifiers. Tipora does not store full payment card numbers.
• Payout and membership status from Stripe, Apple, Google Play, and RevenueCat.
• Device platform and Expo push token when you allow notifications.
• Waitlist email addresses and support communications you send us.

How we use information

We use information to create and secure accounts, publish tip profiles, pair and operate bands, process tips and payouts, manage memberships, send requested notifications, provide support, prevent abuse, comply with legal obligations, and improve service reliability.

When information is shared

We share information only as needed to operate Tipora with service providers such as Supabase for authentication and data storage, Stripe for payments and payouts, Apple and Google for app distribution and purchases, RevenueCat for membership status, Expo for push delivery, Resend for email, and Vercel for hosting. We may also disclose information when legally required or to protect users and the service.

We do not sell personal information or use it for cross-app advertising tracking.

Public information

Your active Tipora profile and tip page may show the profile details you provide. Do not add information you do not want visitors to see.

Retention and deletion

We retain information while your account is active and as needed to provide the service. You can initiate account deletion in the Tipora app or through our account deletion page. We aim to complete verified requests within 30 days. Payment, fraud-prevention, security, tax, and transaction records may be retained when required by law or legitimate business obligations.

Security and choices

We use access controls, encrypted network connections, and provider security controls intended to protect information. No system can guarantee absolute security. You can edit your profile, disable notifications in device settings, restore purchases through the app, and request account deletion.

Children

Tipora is not directed to children under 13. Payout features may have additional age and identity requirements imposed by Stripe or applicable law.

Contact

Questions or privacy requests can be sent to hello@tipora.com.