TipLedgerPrivacy Policy
Effective October 25, 2026
TipLedger ("the app") is published by the TipLedger developer ("we"). The short version: we do not collect any data. Your shifts and tips stay on your iPhone, in your own private iCloud, and in backup files you control. We run no server that receives your data, we show no ads, and we use no analytics or tracking.
App Privacy label summary
Data Not Collected. The developer does not collect any data from this app.
| Question | Answer |
|---|---|
| Data used to track you | None |
| Data linked to you | None |
| Data not linked to you | None |
| Advertising, analytics or tracking SDKs | None |
| Account or sign-in | None |
Data stored only on your device or in your own iCloud account is not "collected" under Apple's definition, because we never receive it.
Information the app stores for you
- Jobs you add: workplace name, hourly wage, how you are paid (W-2, 1099 or cash), pay period, default tip-outs, whether tips are pooled, role and occupation code.
- Shifts you log: date and times, breaks, sales, cash and card tips, service charges, tip-outs, section, shift type, notes, whether cash tips were reported to your employer, and the edit history of each shift.
- Shift templates you save, and your weekly goal.
- Paystubs and W-2s you enter (TipLedger Pro): pay period, tips, wages and hours from a paystub, the tip boxes and occupation codes from a W-2, and any notes you add. They are compared with your shifts on your iPhone.
- Photos: only a checkout-slip photo you choose to attach to a shift, or a paystub photo you attach to a paystub. You pick it with the iOS photo picker, so the app never gets access to the rest of your photo library. Photos are stored like the rest of your data: on your iPhone and in your private iCloud.
- Tax settings you enter: filing status and expected yearly income, used only for the on-device No Tax on Tips estimate.
Where it is stored
- On your iPhone, in the app's private storage.
- In your private iCloud, if iCloud is on for your Apple Account: the app syncs through Apple's CloudKit private database, which only you can access. We cannot read it.
- Backup files you control: "Back up now" and the optional weekly automatic backup save JSON files to iCloud Drive › TipLedger (or on your iPhone when iCloud Drive is off). Photos are included only if you turn that on. Files you export or share go only where you send them.
- Widgets and Apple Watch: a small summary (this week's totals, your job names) is shared with the app's own widgets on your iPhone and with the TipLedger app on your paired Apple Watch, directly between your devices.
Notifications
Cash tip reporting reminders are optional and off until you turn them on. They are local notifications scheduled on your iPhone by the app itself; no push server is involved and nothing about your tips is sent anywhere.
Face ID
The optional lock uses Apple's Face ID, Touch ID or passcode through iOS. The app only receives a yes or no from iOS; it never sees or stores your face data or fingerprints.
What we do not do
- No account, no sign-up. We do not collect your name, email or phone number.
- No advertising and no advertising SDKs.
- No analytics, crash-reporting or tracking SDKs.
- We do not sell, rent or share your data with anyone.
- We do not use your location, camera, contacts or health data.
- We do not connect to your employer, bank or point-of-sale system.
Purchases
TipLedger Pro is bought through Apple's App Store. Apple processes the payment; we never see your payment details or Apple Account information. The app checks your Pro status with StoreKit on your device.
Apple
App Store purchases, iCloud sync and backups are handled by Apple under Apple's privacy policy. If you chose to share analytics with app developers in iOS Settings, Apple may give us aggregated crash and usage reports that do not identify you.
Your choices
- Delete a shift: it moves to Recently deleted for 30 days, then is removed for good.
- Export your data any time from Settings › Backup & import.
- Delete everything: delete the app, then remove its iCloud data in iOS Settings › [your name] › iCloud › Manage Account Storage (or Manage Storage) › TipLedger, and delete the TipLedger folder in the Files app › iCloud Drive if you kept backups.
Children
TipLedger is not directed to children under 13 and does not knowingly collect information from anyone.
Changes
We will post changes on this page with a new effective date.
Contact
Questions: vincent.vibecoding@gmail.com or the Support page.