Privacy Policy

1. Who we are

Tipfolio is an iPhone application published by Lacewing Technologies LLC, a Wyoming limited liability company ("we", "us"). This policy explains how the Tipfolio app and the website at gettipfolio.app handle information. It applies to Tipfolio version 1.0 and later.

We have written this policy to describe what the software actually does. Every claim below is a property of how the app is built, not a promise about how we choose to behave.

2. What Tipfolio stores, and where

Everything you enter into Tipfolio is stored locally on your iPhone, in the app's own private storage, using Apple's on-device database (SwiftData). That includes:

• Your shifts — business date, hours, cash and card tips, tip-outs, total sales, notes.
• Your jobs — name, employer, hourly wage, occupation, tip-out rule.
• The timestamp recording when each entry was created, and an audit trail of any later edits.
• Your preferences — display name, occupation, goal, notification toggles.

None of this is transmitted to us. There is no Tipfolio account system and no Tipfolio server that holds your earnings. The application contains no networking code for your financial data at all: it makes no web requests carrying your shifts, tips, wages or tax totals, to us or to anyone else.

Because the data lives only on your device, it is protected by your iPhone's own passcode and hardware encryption. If you delete the app without exporting or backing up first, that data is gone — we hold no copy that could be restored.

3. What we do not collect

Tipfolio contains, by design and verifiable in the shipped binary:

Category	In Tipfolio
Analytics or usage tracking	None
Crash or performance reporting	None
Advertising, ad identifiers (IDFA), ad networks	None
Third-party SDKs of any kind	None
Cross-app or cross-site tracking	None
Location, contacts, photo library, microphone access	Never requested
Sale or sharing of personal information	Never — no data to sell

Tipfolio does not present an App Tracking Transparency prompt because it does not track you. Our App Store privacy label is Data Not Collected.

4. Sign in with Apple (optional)

Tipfolio offers Sign in with Apple. It is entirely optional — every feature of the app works signed out, and signing out never touches your logged data. Sign-in exists for one purpose only: to key the optional encrypted backup described below.

If you choose to sign in, Apple provides an anonymous user identifier and, if you allow it, an email address (which may be Apple's private relay address). Both are stored on your device only and are never transmitted to us. We operate no account database.

You can revoke Tipfolio's access at any time in iOS Settings → your Apple Account → Sign in with Apple. Tipfolio detects this and returns to the signed-out state. Your logged shifts are untouched.

5. Encrypted iCloud backup (optional)

Tipfolio can write an encrypted archive of your log to your own iCloud Drive. This is off by default and only happens if you turn it on.

• The archive is encrypted on your device with AES-GCM before it is written.
• The encryption key is generated on your device and stored in your iCloud Keychain. We never receive it, and neither does anyone else.
• The file is stored in your personal iCloud account, under your Apple ID — not in any storage belonging to us.
• Consequently we cannot read the archive, and could not produce its contents if compelled to. What is in iCloud is ciphertext we hold no key for.

Turning the backup off deletes the archive from iCloud. Deleting all data in the app also destroys the key, after which no copy of the archive can ever be opened again.

Your use of iCloud is governed by Apple's privacy policy.

6. Camera and receipt scanning

Tipfolio Pro can read your register closeout slip to fill in a shift. Camera access is requested only the first time you tap scan, after a screen explaining why — never on launch. Denying it leaves the app fully usable.

Text recognition runs entirely on your iPhone using Apple's on-device Vision framework. The photo is never uploaded, to us or to any service, and no image or parsed value is transmitted anywhere. By default the image is discarded once it has been parsed; keeping one is an explicit choice you make.

Tipfolio never requests access to your photo library.

7. Notifications

Tipfolio's reminders — the nightly log nudge, the weekly summary, the best-night suggestion, and the trial-ending alert — are local notifications scheduled by the app on your device. There is no push server and no device token. Their content is generated on your iPhone from your own shifts.

Permission is requested only after you ask for reminders, never on launch, and every reminder can be switched off individually in the app.

8. Subscriptions and payments

Tipfolio Pro is sold as an auto-renewing subscription through Apple's In-App Purchase system (StoreKit). We never see or handle your payment details. Your name, card, billing address and Apple Account are handled entirely by Apple; we receive none of them.

The app asks Apple's on-device StoreKit service whether a valid subscription exists. That check happens between your device and Apple. We run no receipt-validation server and hold no purchase records tied to you. Apple provides us only aggregate, non-identifying sales reporting.

Purchases are governed by Apple's Media Services Terms and Apple's privacy policy.

9. Your controls and your rights

Because your data never leaves your device, you exercise your rights directly in the app rather than by asking us:

• Access and portability — Settings → Data & privacy → Export all data produces a complete CSV or PDF of every shift. Export is always free, including on the free tier.
• Correction — any shift can be edited. Edits append to an audit trail rather than overwriting the original entry timestamp, which is what keeps the record credible for tax purposes.
• Erasure — Settings → Data & privacy → Delete all data, reachable in three taps. It offers you a free export first, then erases the local store, any scan images, scheduled notifications, the backup archive, the encryption key and all preferences.
• Account deletion — there is no server-side account to delete, because none is ever created. Signing out of Sign in with Apple removes the identifier from your device.

We do not need to respond to data subject access, deletion or "do not sell" requests under the GDPR, UK GDPR, CCPA/CPRA or similar laws for your Tipfolio data, because we are not in possession of it. If you believe we hold information about you, write to us at the address below and we will tell you honestly what we have.

10. Children

Tipfolio is a record-keeping tool for working adults and is not directed at children. We do not knowingly collect information from anyone — including children — as the app transmits no personal information to us at all.

11. This website

gettipfolio.app is a static website. It sets no cookies, runs no analytics, embeds no trackers, and loads no fonts, scripts or assets from any third party — every file it serves comes from this domain.

The site is hosted on GitHub Pages. As with any web host, GitHub's servers process standard request data (such as your IP address and browser user-agent) in order to deliver the page and to protect the service. We do not receive, store or analyse those logs. See GitHub's privacy statement.

If you email us, we hold your message and address for as long as needed to answer you.

12. Changes to this policy

If this policy changes we will update the date at the top of this page and, where the change is significant, note it in the app's release notes. The architectural commitments in section 2 — no server for your earnings, no analytics, no third-party SDKs — are the foundation of the product. If they ever changed, we would say so plainly and prominently rather than quietly amending this page.

13. Contact

Questions about this policy, or about privacy in Tipfolio:
support@gettipfolio.app

Lacewing Technologies LLC
30 N Gould St, Ste N, Sheridan, WY 82801, United States