Last updated: 19 April 2026
See our Cookie preferences page to change your choices at any time.
TIPPIDY is a trading name of Selfound Ltd, a company registered in England and Wales (company number 16450921), with its registered office at Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.
Selfound Ltd is the data controller responsible for your personal data processed through the TIPPIDY platform ("Platform"). If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@tippidy.com.
| Category | Examples |
|---|---|
| Account information | Name, display name, email address, password (hashed), username |
| Profile information | Profile photo, venue name |
| Identity verification | Information provided during Stripe Connect onboarding (name, date of birth, address, government-issued ID) — processed by Stripe, not stored by us |
| Payment information | Bank account details for payouts — processed and stored by Stripe, not by us directly |
| Tip messages | Optional messages left by Tippers |
| Messages | Crew chat and direct-message content you send (text and timestamps) |
| Uploaded images | Profile photos and images shared in crew chat or direct messages |
| Category | Examples |
|---|---|
| Usage data | Pages visited, features used, tip page views |
| Device information | Browser type, operating system, screen resolution |
| Network data | IP address, approximate location (country/city level) |
| Transaction data | Tip amounts, timestamps, payment status, Stripe transaction references |
| Push notification subscription | If you opt in, we store the push endpoint URL and cryptographic keys your browser provides (per the W3C Web Push spec) |
If you sign in using Google, Facebook, or Apple, we receive your name, email address, and profile identifier from that provider. We do not receive your password from any third-party provider.
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Creating and managing your account | Contract performance |
| Processing tip payments and payouts | Contract performance |
| Displaying your public tip page | Contract performance |
| Sending transactional emails (welcome, payout notifications) | Contract performance |
| Preventing fraud and securing the Platform | Legitimate interest |
| Improving the Platform and analysing usage | Legitimate interest |
| Complying with legal and regulatory obligations (AML, tax reporting) | Legal obligation |
| Sending marketing communications | Consent (you can opt out at any time) |
We share your personal data with the following categories of third parties:
| Recipient | Purpose |
|---|---|
| Stripe (payment processor) | Processing tip payments, identity verification (KYC), and payouts to Workers. Stripe acts as an independent data controller for data it processes. See Stripe's Privacy Policy. |
| Cloud hosting providers | Hosting the Platform and storing data securely |
| Email service providers | Sending transactional and marketing emails |
| Umami (analytics) |
Self-hosted at stats.mavlin.com, EU region. Aggregated page-view statistics only. Never used for marketing or sold to third parties.
|
| Sentry (error monitoring) | US-based. Receives stack traces, request context and minimal user identifiers when errors occur. Transfers are covered by Standard Contractual Clauses (SCCs). |
| Slack Technologies (internal notifications) | US-based. Receives a small profile summary (user id, email, name, username, country, currency, auth method, timestamps) in a private team channel owned by Selfound Ltd for operational awareness. Transfers covered by SCCs. Never used for marketing. |
| Apple / Google Wallet | When you add a Tippidy pass to Apple Wallet or Google Wallet, your device registers directly with Apple or Google to receive pass updates. Device identifiers are stored by us only for pass delivery. |
| Law enforcement and regulators | Where required by law or to protect our legal rights |
We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.
Tippers do not need to create an account. We collect the minimum data necessary to process the payment: IP address (for fraud prevention and rate limiting) and any optional tip message. Payment card details are processed directly by Stripe and are never stored on our servers. Tipper identity is not shared with Workers — tips are anonymous unless the Tipper chooses to leave a message.
When you create a TIPPIDY account, your display name, venue name (if provided), and profile photo are shown on your public tip page. Your real name, email address, and financial details are never displayed publicly. You can control what is shown via your dashboard settings.
You can review and change your choices at any time on our Cookie preferences page.
| Category | Purpose | Consent required? |
|---|---|---|
| Essential | Session cookie, CSRF token, locale cookie, consent cookie, theme preference (localStorage) | No — strictly necessary |
| Analytics (Umami) | Aggregated page-view statistics on stats.mavlin.com |
Yes — opt-in via the consent banner |
We do not use advertising or cross-site tracking cookies.
If you opt in via your browser prompt, Tippidy may send push notifications for new tips, crew events, or messages. Push notifications are optional: you can revoke them at any time in your browser settings or from the dashboard.
| Data Type | Retention Period |
|---|---|
| Active account data | For as long as your account is active |
| Deleted account data | Personal data anonymised upon deletion; financial records retained for 7 years (legal requirement) |
| Transaction records (ledger) | 7 years from the date of transaction (legal/tax obligation) |
| Event logs | Up to 2 years, then anonymised or deleted |
| IP addresses | Up to 90 days (fraud prevention), then deleted |
| Messages (crew chat and DMs) | Retained while your account is active; anonymised on account deletion |
| Uploaded images | Deleted 30 days after account deletion |
Under the UK General Data Protection Regulation, you have the right to:
To exercise any of these rights, contact us at privacy@tippidy.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
Your data may be transferred to and processed in countries outside the UK, including the United States (where Stripe processes payments). Where we transfer data outside the UK, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the UK Government, or transfers to countries with an adequacy decision.
We implement appropriate technical and organisational measures to protect your data, including:
TIPPIDY is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.
For any privacy-related queries: