Privacy Policy

This policy explains what information TrackMyTips ("TrackMyTips", "we", "us") collects when you use the TrackMyTips app on iOS or Android and the website at trackmytips.app, how we use it, who processes it for us, and the choices you have. TrackMyTips is a personal record of your shifts, tips, and earnings. We do not show ads, we do not sell your information, and we do not use it to track you across other companies' apps or websites. TrackMyTips is operated by Aitor Recalde, an independent developer based in Georgia, United States. You can contact us at support@trackmytips.app.

Account. You can continue as a guest or sign in. • Guest: we create an anonymous account with a random account ID. No name or email address is needed. • Sign in with Apple (iOS) or Sign in with Google: we receive what your provider shares, such as your name and email address. Apple may give us a private relay email address. Your email address is kept by our sign-in service and is not copied into your app records. Profile. • Display name: taken from your sign-in provider, or a generated name such as "TipTracker1234". You can change it. • Profile photo (optional): a photo you choose or take. It is resized and kept in private storage, and the app shows it only to you while you are signed in. When you replace or remove it, the previous photo is deleted. • Photos added with app versions before 3.1.3 were stored with a link that let anyone who had the link view the photo. We are disabling those links. Work records. These are the core of the app and are stored in your account, so they sync across your devices: • Shifts: dates, clock-in and clock-out times, duration, role (including custom role names you create), workplace, and the hourly wage saved on the shift. • Tips: each amount, its time, whether it was cash, card, or split (optional), and any note you add. • Tip-outs, scheduled and repeating shifts (with any notes), workplaces and pay settings, earnings goals, pay schedule, and app preferences. Notes, workplace names, goal titles, and custom role names are free text. Please avoid entering sensitive information in them. Support. If you send feedback or reply to a support message, we store your messages and subject together with your display name, account ID, whether you use a guest account, app version, device model, and operating system version. When you send a message, our team receives an alert through Pushover, a notification service. The alert contains the subject, the start of the message, your display name, the label "Anonymous" if you use a guest account, your platform and device model, and the app version. Website forms. If you request account deletion on our website, we store the email address, account details, platform, and notes you enter. We keep these requests as a record of how we handled them, and they are not removed when the account is deleted. If you answer our optional website survey, we store your ratings and comments without linking them to an app account. To prevent abuse, both forms keep a one-way hash of part of your IP address, not the address itself.

Account activity. We record when your account was created, when you last signed in or used the app, and the app version and platform you use. We use this to run the service, to help with support, and to find inactive accounts. When you agree to our Terms of Service, we record which version you agreed to, which Privacy Policy version you acknowledged, and when. Analytics. We use Google Analytics for Firebase to understand which features are used. • Analytics is on by default. You can turn it off, or back on, at any time with Share usage analytics in Settings → Privacy. Turning it off stops collection right away and resets the analytics identifier on your device. Your choice applies to the device where you make it. • It records events such as opening a screen, clocking in or out, adding a tip, or running AI insights, plus general settings such as your sign-in type and app language. • Events are tied to a random app-installation identifier. Google estimates an approximate location, such as your city or region, from your IP address. • Analytics does not receive your tip amounts, earnings, wages, hours, roles, notes, or other text you type, and current app versions do not send your account ID to Analytics. • App versions before 3.1.3 had no setting to turn analytics off, sent your account ID with analytics events, and also sent broad ranges (for example, a tip between $5 and $10 or a shift between 4 and 6 hours) and counts of shifts. Older Android versions also allowed Google Analytics to read the device advertising ID. • We do not use analytics for advertising, and ad personalization is turned off. Crash reports. We use Firebase Crashlytics to find and fix crashes. A report includes technical details about the problem, your device model and operating system version, the screens you used just before it, and your account ID, so we can help if you contact us. Crash reports stay on, because they are how we find and fix faults, and they do not include your tip amounts or notes. Notifications. If you allow notifications, Firebase Cloud Messaging gives your device a token so we can send reminders and replies to your support messages. Clock-out reminders are scheduled on your device. Device identifiers. Firebase uses an app-installation identifier and a messaging token to provide its services. The iOS app does not access the advertising identifier (IDFA), and current Android versions do not collect the advertising ID.

AI insights run only when you tap Analyze with AI. The app sends a summary of the period you chose to our server, which forwards it to OpenAI to write the analysis. • For a single period, each shift's date, start and end times, shift type (morning, afternoon, evening, or late night), role (including custom role names), duration, hourly wage, total tips, tip-out, net tips, wages, and total earnings. App versions before 3.1.3 also send the number of tips in each shift. • For All Time, totals and breakdowns by month, weekday, and role. • Tip notes, individual tip amounts, your name, email address, and account ID are not sent to OpenAI. • OpenAI does not use this data to train its models. Our requests ask OpenAI not to store them, though OpenAI may keep request logs for up to 30 days to detect abuse, or longer if the law requires it. • The analysis is saved in your account so you can view it later.

Income History creates a PDF summary on your device. It is not uploaded to us, and you decide where to share or save it. For a full copy of your account data, contact support.

• To provide the app: store and sync your records, calculate earnings, show reports, send the notifications you choose, and run the AI insights you request. • To manage your account, including sign-in, deletion, and removing inactive accounts. • To answer support requests and, occasionally, ask for voluntary feedback by email or in-app message. • To understand feature use and fix crashes. • To protect the service. For example, Firebase App Check confirms that requests come from our genuine app. We do not sell your personal information, and we do not share it for cross-context behavioral advertising (ads targeted using your activity on other companies' apps or websites). We do not use it for advertising. TrackMyTips does not track you across other companies' apps or websites, and we do not let advertising companies do so through our app or website. For this reason, our app and website do not change how they work in response to "Do Not Track" browser signals.

These providers process information on our behalf, under their own terms: • Google (Firebase and Google Cloud): sign-in, database, file storage, server functions, analytics, crash reporting, notifications, and app integrity checks. • Apple and Google: Sign in with Apple and Sign in with Google. • OpenAI: writing the AI insights you request. • Pushover: delivering support-message alerts to our team. We and these providers store and process your information in the United States. Your account records are kept there, in Google Cloud data centers.

Data is encrypted in transit, and Google encrypts stored data. Database and storage rules limit access to your own records and photos. No system is perfectly secure.

While your account is active, we keep your records so the app works. Deleting your account. Signed-in users can go to Settings → Delete Account. Guests delete their account by logging out. If you cannot open the app, use trackmytips.app/delete-account. Deletion permanently removes from our live systems: • your sign-in account; • your profile, shifts, tips, goals, schedules, workplaces, saved AI analyses, and the record of your Terms agreement; • your profile photos; and • your support conversations. Backups. For disaster recovery, our database keeps a version history for 7 days, daily backups for 7 days, and weekly backups for 12 weeks. Deleted data can remain in these protected copies until they expire, up to about 12 weeks. We use them only to recover from failures and do not restore deleted accounts from them. Google, our provider, may take up to 180 days to remove deleted data from its own internal backups. Analytics and crash data are kept by Google: analytics events for up to 14 months and crash reports for 90 days. Google may keep aggregated reports that do not identify you for longer. Our server logs, which can include your account ID, are kept by Google Cloud for a limited period set in our logging settings. Account deletion does not automatically remove any of these. Inactive accounts. We may permanently delete accounts that have been inactive for one year or longer, after a notice in the app. Using the app resets this period. Other providers. OpenAI may keep AI requests for up to 30 days to detect abuse, or longer if the law requires it. Pushover deletes support alerts from its servers once they are delivered, or after 21 days if delivery cannot be confirmed. Alerts already delivered to our team's devices, and website deletion requests, are kept separately and are not removed when you delete your account.

• View, edit, or delete your records in the app at any time. • Delete your account in the app or with the website form. • Use the app as a guest without giving a name or email address. • Turn notifications off in the app or in your device settings. • Turn usage analytics on or off in Settings → Privacy. • Ask support for a copy of your data.

If you are in the United Kingdom or the European Economic Area, the following also applies. Legal bases. • Your account, work records and syncing, the AI insights you request, and support: needed to provide the app you asked for. • Security, crash reports, notices before we delete an inactive account, and the record of your Terms agreement: our legitimate interests in keeping the app safe and working, warning you before deletion, and showing what was agreed. • Usage analytics: our legitimate interest in understanding how the app is used so we can improve it. You can turn it off at any time in Settings → Privacy. Your rights. You can ask to access, correct, or delete your information, to restrict how we use it, or to receive a copy in a portable format. You can also object to uses based on our legitimate interests; for usage analytics, you can simply turn it off. You can do much of this yourself in the app. For anything else, contact support@trackmytips.app or Support in the app. We may ask you to confirm that the account is yours. We reply within one month, or tell you within that month if we need up to two more. International transfers. Sharing your information with our providers in the United States is an international transfer. Google LLC is certified under the EU-U.S. Data Privacy Framework and its UK Extension, and Google's data processing terms include Standard Contractual Clauses. OpenAI's data processing terms provide for Standard Contractual Clauses for transfers from the UK and the EEA. Pushover processes support alerts in the United States under its own terms. Contact us for more information about these safeguards. Complaints. You can complain to us at support@trackmytips.app. You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in Spain, the Agencia Española de Protección de Datos (aepd.es); or the authority where you live.

TrackMyTips is not intended for children under 13, or under the minimum age where they live if it is higher (for example, 14 in Spain). We do not knowingly collect their information, and if we learn that we have, we will delete it. If you believe a child is using the app, contact support@trackmytips.app.

Our website uses Google Analytics for Firebase to record page views and clicks on store buttons. • A page view records the page path (without the query string), the page title, and a broad source: search, direct, or other. • A store click records the page, the broad source, where the button was, and which store it opens. • Analytics uses a cookie and an anonymous identifier, and receives standard browser and device information such as language and screen size. • Analytics stays off and sets no cookie unless you choose Accept. If you choose Reject, or make no choice, it stays off. You can change your choice at any time with Cookie settings in the website footer. Your choice is saved in your browser. • We do not send names, email addresses, account IDs, shift details, or tip amounts from the website.

We will update this policy when our practices change and revise the "Last updated" date. For significant changes, we will also tell you in the app. If a change needs your consent, we will ask for it first.

Questions or requests: support@trackmytips.app, or Support in the app.