TipDeck — Privacy Policy

Last updated: 29 July 2026

TipDeck is an offline shift & tip ledger. This policy explains, in plain language, exactly what the app does and does not do with your information. The short version: TipDeck collects nothing about you, and it makes no network connections at all.

What the app stores

Everything you enter — your shifts, your jobs, your hours, your cash and card tips, your tip-outs, your notes, and your settings — is saved locally on your device only. It is not transmitted to us or to any third party. If you delete the app, that data is removed with it.

What we collect

Nothing. Specifically, TipDeck does not:

• require or offer any account, email, or sign-in;
• contain any analytics, advertising, attribution or tracking SDKs;
• ask for permission to track you across apps or websites (no App Tracking Transparency prompt, because there is nothing to track);
• access your location, contacts, camera, microphone, photos, or health data;
• connect to any bank, point-of-sale, payroll or tax-filing service;
• send your shift data, or any personal data, to any server or third-party service — including any third-party AI service.

Your name, address and employer details

TipDeck has an optional Your details form in Settings — your name, your address, your employer, and the establishment you work at. Every line is optional and the app never requires, prompts for, or nags about them. They exist for one purpose: they print at the top of the PDF record, so that a document you hand to a tax preparer says who it belongs to.

Your address is the one sensitive field the app stores, and it is handled accordingly:

• It is stored on your device only, like everything else.
• It is never included in the CSV export — not as a column, not as a header line, not as a comment.
• It leaves your device only inside a PDF that you choose to share, to wherever you choose to send it.
• It is typed by you as plain text. TipDeck does not read your Contacts, does not use location services or maps, does not geocode anything, and does not use system autofill to prefill it.

Exporting your record

You can export your own entries as a CSV spreadsheet at any time, free, with or without the unlock. The unlock additionally produces a dated PDF copy of your yearly record.

Both files are written to a private temporary folder on your device and handed straight to the iOS share sheet. The file and its folder are deleted as soon as the share sheet closes — whether you completed the share or cancelled it. The export is never uploaded, filed, reported or transmitted by the app, and we are not involved in and cannot see where you send it.

Purchases

TipDeck offers a single one-time in-app purchase (US$14.99) to unlock the full app. There is no subscription. Payments are handled entirely by Apple through the App Store. We never see or store your payment details. Apple's handling of that transaction is governed by Apple's Privacy Policy.

Diagnostic counters

Settings → Troubleshooting shows a few simple counters (for example, whether the unlock screen has been shown). These are stored on your device only, so that you can quote a real number if you report a bug. They are not analytics: nothing reads them but you, and nothing sends them anywhere.

Encryption

TipDeck contains no proprietary or non-standard encryption, and it exchanges no data over a network — there is no traffic to encrypt.

Children

TipDeck is a work-record tool intended for adults tracking their own earnings, and is not directed at children.

Changes to this policy

If this policy ever changes, the updated version will be posted on this page with a new "Last updated" date.

Contact

Questions about privacy? Email tipdeck@quantum-solutions.hr.

Support & help →