Privacy policy

The short version

• Your tips are paid straight into your own bank account. TipBop never holds your money.
• TipBop stores only what it needs to run your account and pay you.
• The page a customer sees shows the first name Stripe checked when it verified you, and your photo. Nothing else about you, ever.
• There is no manager’s dashboard, because there is nothing for a manager to see.
• Your tips are your income, and yours to declare. TipBop gives you a statement of everything you have received.

Who is responsible for your data

TipBop is operated by TIPBOP LTD, registered in Scotland, company number SC900411, registered office Auchingarrich Farm, Comrie, Crieff, Scotland, PH6 2JE.

TIPBOP LTD is the data controller for everything described on this page. For any question, any request about your data, or a complaint, email hello@tipbop.com. A real person answers it, and it is the fastest route to anything on this page.

Stripe is a separate controller for the payment and identity data it holds in its own right as a regulated payment company. TipBop cannot delete that, and Stripe answers for it directly at stripe.com/privacy.

What TipBop stores about you

Enough to run your account and pay you, and no more:

• Your first name and photo, so a customer can see who they are tipping. The name on your tip page is the one Stripe checked when it verified you, not one you typed.
• The job title you set before tip pages stopped showing one. It is kept and no longer used anywhere.
• Your email, so you can sign in. It is never shown on your tip page.
• Your Stripe account details and onboarding state. On an account opened before 25 August 2026, also the time you were told that a disputed tip comes back out of your own account. On a newer one there is nothing to store, because TipBop covers it.
• Your tag tokens, your notification choice, your suggested amounts, and your record of tips received.
• The last four digits of the account your money goes to, so the app can show you where it is going. Your sort code and account number go to Stripe and are not kept here.
• Your answer to the employment question, and when you gave it.
• If you order a tag, the delivery address you typed for that order. It is held on the order rather than on you, because it is a fact about a parcel we posted and very often not where you live. Nothing reads an address back out to fill in a form.

What is never stored: there is no surname field, no phone number, no social handle, no bio and no website. A field that exists eventually gets shown, so these do not exist.

Why TipBop is allowed to hold this: to run your account and pay you (a contract with you), and to keep the financial records the law requires. There is no marketing, and nothing is sold or shared for advertising.

What is stored when a customer taps and pays

A customer is a stranger who tapped a tag. They make no account and agree to nothing. The only record TipBop keeps is that a payment happened:

• The tip amount, the fee, the total, and the Stripe payment identifiers.
• The card’s country, brand and type, which are used to check the fee maths.
• The time of the payment.

What is never stored about a customer: no name, no email, no phone, no address, no account. The card number is entered into Stripe’s own form and never reaches TipBop. There is no tracking, no analytics and no advertising pixel on the tip page.

Cookies: the tip page sets no cookies of TipBop’s own. Stripe sets its own cookies on the payment form to prevent fraud on a payment the customer started. TipBop’s position is that these are strictly necessary for a payment the customer asked to make, so no consent banner stands between them and the money.

Taking a card on your phone

If you use Tap to Pay, your phone becomes the card reader. Stripe’s own software on your phone reads the customer’s card, so the card number goes to Stripe and never reaches TipBop.

Stripe will not take a card on a phone unless it knows roughly where the phone is, which it uses to stop fraud. So the app asks you for approximate location, only when you open Tap to Pay and never before. That location goes to Stripe. TipBop never sees it and never stores it. Stripe also checks that your phone is safe to take cards on, for example that its system has not been modified and has had a recent security update, and sends what it needs for that check to Stripe.

You do not have to use Tap to Pay. Say no to location and everything else in the app works exactly as before.

Network addresses

TipBop uses the network address of a device only to stop abuse of the tip and sign-in pages, and never stores or logs it in plain form. It is turned into a keyed code first. A backup or a log file holds nobody’s address.

Deleting your account

Delete really deletes. In the app, go to Settings, then "Your account", then "Delete my account".

• Gone straight away: your first name, photo, job title, email and sign-in, every tag, your notifications, and every session on every device.
• What stays: your past tips, kept as payment records with your name removed. Real money moved through your own account, and the law requires records of payments to be kept. The Stripe account id stays on those records so a late dispute can be answered.

How long: these records are kept for seven years from the end of the tax year they fall in, then deleted.

Stripe: TipBop asks Stripe to close your payment account and tells you honestly whether it agreed. Even a successful deletion does not erase Stripe’s own record. Stripe is a regulated payment company and keeps its record of payments and identity checks for as long as the law requires. To ask Stripe directly, use stripe.com/privacy.

Why TipBop is allowed to hold each thing

UK data protection law requires a reason for every use of your data, and it has to be one of a fixed list. These are TipBop’s:

• Running your account and paying you is your contract with TipBop. Without your name, your email, your tag tokens and your Stripe account state there is no service to give you.
• Keeping records of payments and tax is a legal obligation. This is the one that outlives your account, and it is why deletion leaves the payment records described above.
• Stopping abuse of the tip and sign-in pages is a legitimate interest: keeping a payment page working for the person who is trying to use it, and keeping your account from being signed into by somebody else. This is the keyed code described under Network addresses, and it is the least that works.
• Sending you a notification when you are tipped is your consent. You turn it on, and turning it off in the app withdraws it. Nothing else you have agreed to depends on it.

None of these is advertising. There is no marketing list, and nothing is sold, shared or hired out to anybody for advertising or profiling.

Where your data goes

TipBop’s own servers are in the UK. Stripe is a global payments company and may process payment and identity data outside the UK, including in the United States. Where it does, the transfer is covered by the safeguards UK data protection law requires for that country, which for Stripe means either a UK adequacy decision or standard contractual clauses with the UK Addendum. Stripe sets out which, per country, at stripe.com/privacy.

TipBop does not send your data anywhere else. There is no analytics provider, no advertising network and no data broker in this product.

Automated decisions

TipBop makes no automated decision that has a legal or similarly significant effect on you. Nothing here scores you, ranks you or decides anything about you on its own.

Stripe does run automated checks, and they can affect you: identity verification when you set up, and fraud checks that can decline a customer’s payment. Those are Stripe’s decisions, made under its own rules. If one goes against you, you can ask Stripe for a human to look at it, and TipBop will tell you what it has been told rather than leave you guessing.

Children

TipBop is not for children and does not knowingly collect anything about them. An account cannot be used until Stripe has verified who you are, and that check is not one a child can pass. If you believe a child’s data has reached TipBop, email hello@tipbop.com and it will be deleted.

Your rights

Over the data TipBop holds about you, you have the right to:

• See it. Ask for a copy of what is held and what it is used for.
• Correct it. Anything wrong gets fixed.
• Have it deleted. The app does this itself under "Delete my account". The payment records the law requires are the one exception, and the section above says exactly what stays and for how long.
• Take it with you. Ask for the data you gave TipBop in a machine-readable file, or ask for it to be sent straight to another service.
• Object, or have it paused. Object to anything TipBop does on the legitimate-interest basis above, or ask for processing to be restricted while a dispute about accuracy is sorted out.
• Withdraw consent. Turn notifications off. It stops there and then, and does not undo anything that already happened.

Use these by emailing hello@tipbop.com. It costs nothing. TipBop replies without undue delay and within one month, and will say so if a request is genuinely complex enough to need longer, which the law allows up to a further two months.

How to complain

If you think TipBop has handled your data badly, you have a right to complain about it, and that right is separate from asking for something to be fixed.

Complain to TipBop: use the complaints form. It takes a couple of minutes, it needs no account, and it works for anyone: someone who receives tips, someone who tipped, or someone who has never used TipBop. You get a reference straight away.

If you would rather write, email hello@tipbop.com with "Complaint" in the subject. The form is the better route because it gives you a reference and puts your complaint on a tracked queue rather than in an inbox.

What happens then: TipBop acknowledges your complaint within 30 days, takes the steps needed to look into it, and tells you the outcome. This is what the Data (Use and Access) Act 2025 requires, and it is stated here so you can hold TipBop to it.

Complain to the regulator: you can also complain to the Information Commissioner’s Office at ico.org.uk, or by phone on 0303 123 1113. You are welcome to raise it with TipBop first and the ICO will normally ask whether you have, but you do not have to wait for TipBop to finish.

Changes

TipBop may update this policy. The date near the top shows when it last changed.