YOUR INFORMATION

Privacy, explained.

Updated October 22, 2026 · Applies to the current TipNotch testing build. Operated by Leah Wolfe under the Tip Notch brand. Account deletion must be enabled and tested before distribution.

What you provide

TipNotch stores your account email, job names and wages, shift dates and hours, cash and card tips, payments received, tip-outs, notes, earnings goals, and recently deleted entries. Please avoid adding sensitive information about other people to notes.

Why we use it

We use this information to sign you in, calculate your totals, show your calendar, and synchronize your records with your account so you can access cloud-saved data on another device.

Where information goes

Supabase provides authentication and the cloud database. Resend delivers sign-in emails and processes the recipient address and email contents. These services may also process technical information such as IP addresses, request times, delivery status and authentication events to operate and protect the service. Cloudflare manages the app’s domain. Public website hosting is being finalized separately.

Storage and security

Native phone records are encrypted locally, with the encryption key held in phone secure storage. Connections to the cloud use HTTPS, and database access rules restrict records to their account owner. Cloud records are not end-to-end encrypted: authorized service operation can access them. PIN and Face ID use phone security features; TipNotch does not receive your face or fingerprint data. A four-digit PIN is stored in phone secure storage.

Phone permissions

Optional notifications remind you to log a shift. Face ID or phone security is optional. Reminder settings and app-lock settings stay on the device rather than syncing to your account.

Your choices and retention

You can edit records, export a backup, and delete shifts or jobs. Recently deleted entries are recoverable in the app for up to 30 days. Expired entries are filtered when records are loaded or saved; a cloud copy may remain until the next sync. Signing out leaves an encrypted account copy on the phone for offline use after signing back in.

Permanent account deletion is being prepared for the beta and must be enabled and tested before distribution. It is designed to remove the authentication account and its active cloud record, including recently deleted entries, and clear this account’s saved copy on the requesting phone. Previously exported files, legacy guest records, and copies on other devices are separate. Infrastructure logs and provider backups, where present, follow the providers’ retention practices; deletion does not promise immediate erasure from every backup.

Advertising and tracking

The current testing build has no advertising SDK, third-party behavioral analytics integration, or subscription payments. We do not sell your earnings records or share them for targeted advertising. Any future advertising or payment features will require updated disclosures before launch.

Questions and requests

For support or privacy requests, email tipnotchhelp@gmail.com. Tip Notch is operated by Leah Wolfe, an individual.