What we collect
Nothing. TipTotal has no user accounts, no sign-in, no server-side storage, no analytics SDKs, no advertising SDKs, and no trackers. The developer does not receive, see, transmit, sell, or share any of your data. The app's App Privacy label is "Data Not Collected," and its code contains no networking to any developer-operated service.
Where your data lives
- On your device. Everything you enter — shifts, tips, jobs, occupation, tax profile — is stored in a local database inside the app's private container on your iPhone.
- In your own iCloud (optional). If iCloud Drive is available, the app writes backup snapshots to your iCloud Drive, in a folder you can see in the Files app. Those backups belong to your Apple Account, are governed by Apple's iCloud terms, and are never accessible to the developer. If iCloud is unavailable, backups stay on-device.
- In files you export. CSV exports, PDF records, and backup files are created on your device and go only where you send them.
Data retention and deletion
You control retention entirely. Delete any shift or job in the app (deleting a job deletes its shifts). The app keeps at most 10 rolling backup snapshots, which you can delete in the Files app (iCloud Drive > TipTotal) or by deleting the app. Deleting the app removes the on-device database; iCloud backup files can be removed from the Files app. There is nothing to delete on our side, because nothing exists on our side.
What the app accesses, and why
- Notifications (optional): local, on-device reminders for the monthly employer tip report. Nothing is sent to a server; declining changes nothing else.
- Face ID (optional): if you enable the app lock, authentication happens entirely through Apple's LocalAuthentication system. TipTotal never sees biometric data.
- iCloud Drive (optional): for your own backups, as described above.
The app requests no access to contacts, location, camera, microphone, photos, or health data.
Purchases
The optional Tax Pack is a one-time purchase processed entirely by Apple through the App Store. The developer receives Apple's standard aggregated sales reports, which contain no personal information. TipTotal never sees your payment details.
Sensitive information — a deliberate design choice
TipTotal never asks for, stores, or transmits your name, address, or Social Security number. Where a tax record format calls for them (like the daily tip record or an employer statement), the app prints blank lines for you to complete by hand.
This website
tiptotal.app is a static site with no cookies, no analytics, and no tracking. Our hosting provider (Cloudflare Pages) may process standard server logs (such as IP addresses) to serve the site and protect it from abuse, per their privacy policy. We do not receive or use that data.
Children
TipTotal is a work and tax tool intended for adults and is not directed at children under 13. Since no data is collected from anyone, no data is collected from children.
Changes
If this policy changes, the new version will be posted here with a new effective date. Since the app collects nothing, changes would most likely narrate new optional on-device features.
Contact
Questions about privacy: support@tiptotal.app.