Privacy Policy - TipFlick

Last Updated: February 2026

            GDPR and CCPA Compliant: This Privacy Policy complies with the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We are committed to protecting your data privacy and providing you with control over your personal information.
        

1. Introduction

TipFlick ("We", "Us", "Our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS tipping platform located at https://tipflick.app (the "Service").

Please read this Privacy Policy carefully. By accessing or using TipFlick, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this policy.

2. What Data We Collect

TipFlick collects the following types of personal information:

Data Type	How It's Collected	Purpose
Email Address	During account registration	Account management, notifications, support
Full Name	During account registration	Account identification, tipping page display
Business Information	Account profile setup	Public tipping page display
Customer Ratings	Customer submissions via QR code	Feedback aggregation, public display (with consent)
Customer Feedback	Customer submissions via QR code	Service quality assessment
Page View Analytics	Automatic tracking	Usage analytics, platform improvement
IP Address & Device Info	Automatic logging	Security, fraud prevention, analytics
Cookies & Identifiers	Automatic via browser	Session management, user preferences

3. What Data We Do NOT Collect

To be explicitly clear, TipFlick does NOT collect, access, or store:

Payment Card Data: Credit/debit card numbers, expiration dates, or CVC codes
Bank Account Details: Bank account numbers, routing numbers, or account holder information
Sensitive Payment Information: Stripe handles all payment data securely
Government IDs: Social Security numbers, passport details, or driver's license information (Stripe collects these for compliance)

Why? Stripe Connect securely manages all payment information. This separation ensures your financial data is protected by Stripe's advanced security infrastructure, not stored on our servers.

4. How We Use Your Data

We use the data we collect for the following purposes:

Service Delivery: To provide, maintain, and improve TipFlick
Account Management: To create and manage your account, process subscription payments, and send billing information
Customer Support: To respond to inquiries, troubleshoot issues, and provide technical support
Analytics: To understand how users interact with our platform and improve features
Security: To detect and prevent fraud, abuse, and unauthorized access
Legal Compliance: To comply with applicable laws, regulations, and legal processes
Marketing: To send promotional emails (only with your consent) and service announcements
Feedback Management: To aggregate and display customer reviews on your public tipping page

5. Third-Party Service Providers

TipFlick integrates with trusted third-party services. These providers may access certain data to perform functions on our behalf:

Stripe Connect

Data Accessed: Email, name, bank details, payment information, transaction history
Purpose: Payment processing, fund management, compliance
Privacy: Stripe has its own privacy policy and PCI compliance standards. You are subject to Stripe's Connected Account Agreement.
Link: https://stripe.com/privacy

Supabase (PostgreSQL)

Data Stored: Email, name, account data, ratings, feedback, analytics
Purpose: Backend database infrastructure
Privacy: Supabase follows EU Data Protection standards
Link: https://supabase.com/privacy

Google Places API

Data Accessed: Location queries, business information
Purpose: Location and business data services
Privacy: Google has its own privacy policy
Link: https://policies.google.com/privacy

We ensure that all third-party providers are contractually obligated to protect your data and use it only for the specified purposes.

6. Data Retention

We retain your personal data for as long as:

Your TipFlick account is active
Required by law (e.g., tax records for 7 years)
Necessary for legal, accounting, or legitimate business purposes

Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is legally required. Some data may be retained in backup systems for up to 90 days before permanent deletion.

How to Delete Your Account

You can delete your TipFlick account directly from the app by following these steps:

Open the TipFlick app and log in to your account
Navigate to Settings (tap the gear icon or go to your profile)
Scroll down to the "Danger Zone" section at the bottom
Tap "Delete Account"
Confirm the deletion in the first confirmation dialog
Confirm again in the final confirmation dialog by tapping "Delete Permanently"

What happens when you delete your account:

Your profile information (name, username, bio, avatar) is permanently removed
Your Stripe payment connection is disconnected
Your tip history and customer data are anonymized
Your authentication account is permanently deleted
This action is irreversible and cannot be undone

If you are unable to access the app, you may also request account deletion by emailing info@kairoxis.pl with the subject line "Account Deletion Request" and the email address associated with your account. We will process your request within 30 days.

7. Your Rights (GDPR & CCPA Compliance)

Depending on your jurisdiction, you may have the following rights:

GDPR Rights (EU Residents)

Right to Access: Request a copy of all personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal exceptions
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request your data in a portable, machine-readable format
Right to Object: Object to certain processing activities
Rights Related to Automated Decision-Making: Request manual review of automated decisions

CCPA Rights (California Residents)

Right to Know: Request what personal information we collect, use, and share
Right to Delete: Request deletion of personal information collected from you
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt-out of the "sale" or "sharing" of your personal information
Right to Limit Use and Disclosure: Limit use and disclosure of sensitive personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your rights

How to Exercise Your Rights

To exercise any of these rights, please submit a written request to:

Email: info@kairoxis.pl
Include: Your name, email address, and a detailed description of your request

We will respond to verified requests within 30 days (or as required by law). We may request proof of identity to protect your privacy.

8. Data Security

TipFlick implements industry-standard security measures to protect your data:

SSL/TLS encryption for data in transit
AES-256 encryption for sensitive data at rest
Regular security audits and penetration testing
Access controls and role-based permissions
Automatic backups and disaster recovery procedures
Compliance with PCI DSS (for payment-related data)

However, no security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security. You use TipFlick at your own risk.

9. Cookies & Tracking Technologies

TipFlick uses cookies and similar tracking technologies to enhance your experience:

Session Cookies: Required for login and account management
Preference Cookies: To remember your settings and preferences
Analytics Cookies: To track page views, usage patterns, and user behavior

Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, refusing cookies may limit your ability to use certain features of TipFlick.

10. Children's Privacy

TipFlick is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information and terminate the child's account.

Parents or guardians who believe their child has provided information to TipFlick should contact us immediately at info@kairoxis.pl.

11. International Data Transfers

TipFlick operates globally, and your data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country.

By using TipFlick, you consent to such transfers. Where required by law (e.g., GDPR), we implement appropriate safeguards such as Standard Contractual Clauses to protect your data.

12. Links to Third-Party Websites

TipFlick may contain links to third-party websites and services. This Privacy Policy applies only to TipFlick. We are not responsible for the privacy practices of external websites. Please review the privacy policies of any third-party services before providing your information.

13. California Shine the Light Law

Under California Civil Code Section 1798.83 (Shine the Light Law), California residents have the right to request information about the categories of personal information we share with third parties for their direct marketing purposes.

To make such a request, please contact us at info@kairoxis.pl with "Shine the Light Request" in the subject line.

14. Changes to This Privacy Policy

TipFlick may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or by posting a notice on our website.

Your continued use of TipFlick following the posting of revised terms means that you accept and agree to the changes. We encourage you to review this policy regularly to stay informed about how we protect your information.

15. Do Not Track (DNT)

Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for recognizing DNT signals. TipFlick does not respond to DNT browser signals, but you may opt-out of data collection through other methods described in this policy.

16. Your California Privacy Rights Summary

If you are a California resident, you have the following rights:

Access to personal information
Deletion of personal information
Correction of inaccurate information
Opt-out of the sale or sharing of personal information
Right to non-discrimination for exercising your rights

To exercise these rights or opt-out, please email info@kairoxis.pl.

Contact Us

If you have questions about this Privacy Policy, your personal data, or our privacy practices, please contact:

TipFlick Privacy Team
Email: info@kairoxis.pl
Website: https://tipflick.app

Data Protection Officer: Available upon request at info@kairoxis.pl