Privacy policy

The short version

• Your tips are paid straight into your own bank account. TipBop never holds your money.
• TipBop stores only what it needs to run your account and pay you.
• The page a customer sees shows your first name, photo and job title. Nothing else about you, ever.
• There is no manager's dashboard, because there is nothing for a manager to see.
• Your tips are your income, and yours to declare. TipBop gives you a statement of everything you have received.

Who is responsible for your data

TipBop is operated by TIPBOP LTD, registered in Scotland, company number SC900411.

TIPBOP LTD is the data controller for everything described on this page. For any question, any request about your data, or a complaint, email hello@tipbop.com. A real person answers it, and it is the fastest route to anything on this page.

Stripe is a separate controller for the payment and identity data it holds in its own right as a regulated payment company. TipBop cannot delete that, and Stripe answers for it directly at stripe.com/privacy.

What TipBop stores about you

Enough to run your account and pay you, and no more:

• Your first name, photo and job title, so a customer can see who they are tipping.
• Your email, so you can sign in. It is never shown on your tip page.
• Your Stripe account details and onboarding state, and the time you were told that a disputed tip comes back out of your account.
• Your badge tokens, your notification choice, your suggested amounts, and your record of tips received.

What is never stored: there is no surname field, no phone number, no social handle, no bio and no website. A field that exists eventually gets shown, so these do not exist.

Why TipBop is allowed to hold this: to run your account and pay you (a contract with you), and to keep the financial records the law requires. There is no marketing, and nothing is sold or shared for advertising.

What is stored when a customer taps and pays

A customer is a stranger who tapped a badge. They make no account and agree to nothing. The only record TipBop keeps is that a payment happened:

• The tip amount, the fee, the total, and the Stripe payment identifiers.
• The card's country, brand and type, which are used to check the fee maths.
• An optional short message the customer can add after paying, if they choose.
• The time of the payment.

What is never stored about a customer: no name, no email, no phone, no address, no account. The card number is entered into Stripe's own form and never reaches TipBop. There is no tracking, no analytics and no advertising pixel on the tip page.

Cookies: the tip page sets no cookies of TipBop's own. Stripe sets its own cookies on the payment form to prevent fraud on a payment the customer started. TipBop's position is that these are strictly necessary for a payment the customer asked to make, so no consent banner stands between them and the money.

A customer who wants their message removed can email hello@tipbop.com and quote the payment reference from their card statement or Stripe receipt. It starts with pi_. TipBop holds nothing else that identifies them, so that reference is how the right record is found and the message cleared.

Network addresses

TipBop uses the network address of a device only to stop abuse of the tip and sign-in pages, and never stores or logs it in plain form. It is turned into a keyed code first. A backup or a log file holds nobody's address.

Deleting your account

Delete really deletes. In the app, go to Settings, then "Your account", then "Delete my account".

• Gone straight away: your first name, photo, job title, email and sign-in, every badge, your notifications, and every session on every device.
• What stays: your past tips, kept as payment records with your name removed. Real money moved through your own account, and the law requires records of payments to be kept. The Stripe account id stays on those records so a late dispute can be answered.

How long: these records are kept for seven years from the end of the tax year they fall in, then deleted.

Stripe: TipBop asks Stripe to close your payment account and tells you honestly whether it agreed. Even a successful deletion does not erase Stripe's own record. Stripe is a regulated payment company and keeps its record of payments and identity checks for as long as the law requires. To ask Stripe directly, use stripe.com/privacy.

Why TipBop is allowed to hold each thing

UK data protection law requires a reason for every use of your data, and it has to be one of a fixed list. These are TipBop's:

• Running your account and paying you is your contract with TipBop. Without your name, your email, your badge tokens and your Stripe account state there is no service to give you.
• Keeping records of payments and tax is a legal obligation. This is the one that outlives your account, and it is why deletion leaves the payment records described above.
• Stopping abuse of the tip and sign-in pages is a legitimate interest: keeping a payment page working for the person who is trying to use it, and keeping your account from being signed into by somebody else. This is the keyed code described under Network addresses, and it is the least that works.
• Sending you a notification when you are tipped is your consent. You turn it on, and turning it off in the app withdraws it. Nothing else you have agreed to depends on it.

None of these is advertising. There is no marketing list, and nothing is sold, shared or hired out to anybody for advertising or profiling.

Where your data goes

TipBop's own servers are in the UK. Stripe is a global payments company and may process payment and identity data outside the UK, including in the United States. Where it does, the transfer is covered by the safeguards UK data protection law requires for that country, which for Stripe means either a UK adequacy decision or standard contractual clauses with the UK Addendum. Stripe sets out which, per country, at stripe.com/privacy.

TipBop does not send your data anywhere else. There is no analytics provider, no advertising network and no data broker in this product.

Automated decisions

TipBop makes no automated decision that has a legal or similarly significant effect on you. Nothing here scores you, ranks you or decides anything about you on its own.

Stripe does run automated checks, and they can affect you: identity verification when you set up, and fraud checks that can decline a customer's payment. Those are Stripe's decisions, made under its own rules. If one goes against you, you can ask Stripe for a human to look at it, and TipBop will tell you what it has been told rather than leave you guessing.

Children

TipBop is not for children and does not knowingly collect anything about them. An account cannot be used until Stripe has verified who you are, and that check is not one a child can pass. If you believe a child's data has reached TipBop, email hello@tipbop.com and it will be deleted.

Your rights

Over the data TipBop holds about you, you have the right to:

• See it. Ask for a copy of what is held and what it is used for.
• Correct it. Anything wrong gets fixed.
• Have it deleted. The app does this itself under "Delete my account". The payment records the law requires are the one exception, and the section above says exactly what stays and for how long.
• Take it with you. Ask for the data you gave TipBop in a machine-readable file, or ask for it to be sent straight to another service.
• Object, or have it paused. Object to anything TipBop does on the legitimate-interest basis above, or ask for processing to be restricted while a dispute about accuracy is sorted out.
• Withdraw consent. Turn notifications off. It stops there and then, and does not undo anything that already happened.

Use these by emailing hello@tipbop.com. It costs nothing. TipBop replies without undue delay and within one month, and will say so if a request is genuinely complex enough to need longer, which the law allows up to a further two months.

How to complain

If you think TipBop has handled your data badly, you have a right to complain about it, and that right is separate from asking for something to be fixed.

Complain to TipBop: email hello@tipbop.com with "Complaint" in the subject. Say what happened and what you would like done. That is a complaint made electronically, and it is the only route needed; there is no form to find and no post to send.

What happens then: TipBop acknowledges your complaint within 30 days, takes the steps needed to look into it, and tells you the outcome. This is what the Data (Use and Access) Act 2025 requires, and it is stated here so you can hold TipBop to it.

Complain to the regulator: you can also complain to the Information Commissioner's Office at ico.org.uk, or by phone on 0303 123 1113. You are welcome to raise it with TipBop first and the ICO will normally ask whether you have, but you do not have to wait for TipBop to finish.

Changes

TipBop may update this policy. The date near the top shows when it last changed.