Privacy Policy

Effective July 18, 2026

Tiplo ("the app") is made by Aura Crafts LLC ("we", "us"). Tiplo is built local-first and account-free on purpose: your tip records are yours, they live on your device, and we collect as little as possible. This policy explains exactly what leaves your phone and why.

What stays on your phone

Your shift ledger (venues, dates, hours, tip amounts, sales, notes, voice transcripts, and checkout-slip photos) is stored locally on your device. We do not maintain user accounts, and we do not store your ledger on our servers. Deleting the app deletes this data.

What leaves your phone, and why

• Voice transcripts and slip photos (AI parsing). When you use voice logging or slip scanning, the transcript or photo is sent over an encrypted connection to our backend (Google Firebase / Cloud Functions) and processed by Anthropic's Claude API to extract the shift details. The result is returned to your device; the transcript and photo are stored with your shift on your device, not on our servers. We do not use your content to train AI models, and our AI provider does not train on API data by default.
• Anonymous identifier and usage counters. The app signs in anonymously (Firebase Authentication) so our servers can rate-limit AI requests and enforce free-tier limits. We store a random anonymous ID and usage counts against it. This ID is not linked to your name, email, or ledger. We may also use Apple's DeviceCheck service for fraud prevention (it stores no personal data).
• App analytics and crash reports. We use Firebase Analytics and Crashlytics to understand which features get used (for example, "a shift was logged by voice") and to fix crashes. This data is tied to a random app instance ID, never to your identity or your ledger amounts, and we do not track you across other apps or websites.
• Purchase information. Subscriptions are processed by Apple. Our subscription infrastructure provider, RevenueCat, receives pseudonymous purchase receipts to validate your subscription status. We never see your payment details.
• Speech recognition. Voice transcription happens on your device using Apple's speech recognition where supported; Apple's processing is governed by Apple's privacy policy.

What we don't do

• No advertising, and no ad networks in the app.
• No selling or renting your data, ever.
• No tracking you across other apps or websites.
• No account creation, email collection, or marketing lists in the current version of the app.

Documents you export

Earnings statements, tax records, and CSV files are generated on your device from your own records. Where you send them (a landlord, a lender, your tax professional) is your choice, and their handling of those documents is outside our control.

Data retention and deletion

Your ledger: on your device, retained until you delete entries or the app. Server-side anonymous usage counters: retained for rate-limiting and abuse prevention. To request deletion of the counters associated with your anonymous ID, contact us at the address below.

Children

Tiplo is not directed at children under 13, and we do not knowingly collect personal information from them.

Your rights

Depending on where you live (for example, California or the EU/EEA), you may have rights to access, correct, or delete personal information. Because Tiplo keeps your data on your device, most of these are in your hands already; for anything server-side, contact us and we'll help.

Changes

If we change this policy, we'll update the date above and, for material changes, note it in the app's release notes.

Contact

Aura Crafts LLC · [email protected]