Privacy policy (draft)
This draft describes how the current TappyTippy system is designed to handle information. It must be completed and approved before launch.
What we collect
- Account: your email address and sign-in details (handled by Google Firebase Authentication).
- Business application: business name, type, contact details and address; owner name, title, contact details, home address and ownership share.
- Tax ID, date of birth and bank details: sent directly to our payment partner, Finix, to verify your business. TappyTippy does not store them; we keep only the last four digits of the tax ID and bank account.
- Agreement record: when you accept the merchant agreement we record the time, your IP address and your browser or app version, as our payment partner requires.
- Payments: amounts, tips and payment status. Card details are read by the iPhone and handled by our payment partner; TappyTippy never sees full card numbers.
How we use it
To verify and approve your business, provide the service, keep payment records, prevent fraud and duplicate accounts, and support you.
Deleting your account
You can delete your account on your account page or in the app. Applications that never reached our payment partner are removed. Payment records for businesses that were set up for payments are kept for the period the law requires, with your contact details removed. [Retention periods to be confirmed by counsel.]
Contact
privacy@tappytippy.com [to be set up before launch]