Privacy Policy

The data controller for personal data processed through Tiply is Tiply (the operator of tiplyofficial.app). You can reach our privacy team at privacy@tiplyofficial.app. Registered company details are provided on request to counterparties who require them for contracting purposes.

This policy applies to the Tiply website, tipping pages, the professional and business dashboards, and related email communications.

Tiply processes the following categories of personal data:

• Account data for professionals and business owners: email address, authentication identifiers, display name, profile photo (optional), profession, country.
• Business data: business name, locations, employees added by the business owner.
• Payout data: information required to onboard a Stripe Connect account (identity verification data is collected directly by Stripe and is not stored by Tiply).
• Tip data: amount, currency, timestamp, optional message, and the recipient professional.
• Technical data: minimal request logs, IP address (for rate limiting and abuse prevention), and browser characteristics.

• Performance of a contract (Art. 6(1)(b) GDPR) — operating your Tiply account, processing tips and payouts.
• Legal obligation (Art. 6(1)(c) GDPR) — record-keeping for tax, accounting and anti-fraud purposes.
• Legitimate interests (Art. 6(1)(f) GDPR) — securing the platform, preventing abuse and improving the product. We balance these interests against your rights and do not use them for profiling.
• Consent (Art. 6(1)(a) GDPR) — for optional marketing communications, where applicable.

Tiply relies on the following categories of service providers:

• Stripe Payments Europe, Ltd. — payment processing, payouts and Connect onboarding.
• Lovable Cloud (Supabase infrastructure, EU region) — application hosting, authentication and database.
• Transactional email provider — for account emails such as invitations and password resets.

All processors are bound by data processing agreements consistent with Art. 28 GDPR. A current sub-processor list is available on request at privacy@tiplyofficial.app.

• Account data: for the life of the account, plus 12 months after closure.
• Tip and payout records: 10 years, to meet accounting and tax obligations.
• Request and security logs: up to 90 days.
• Marketing preferences: until withdrawn.

Tiply stores application data in the European Union. Where a processor (such as Stripe) transfers data outside the EEA, the transfer is governed by the European Commission's Standard Contractual Clauses and supplementary measures required by the Schrems II ruling.

Where the GDPR or an equivalent law applies, you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may also lodge a complaint with your national supervisory authority.

Requests can be sent to privacy@tiplyofficial.app. We reply within one month.

Tiply enforces row-level authorization on all user data, encrypts traffic in transit (TLS 1.2+), and stores payout onboarding data exclusively with Stripe. Access to production systems is limited to authorized personnel and logged.

Tiply is not directed to children under 16 and does not knowingly collect their personal data.

Material changes will be reflected by updating the "Last updated" date at the top of this page and, where appropriate, by notifying account holders by email.

Privacy questions and data subject requests: privacy@tiplyofficial.app.