TipMefy privacy policy

Last updated: 3 September 2026 · revised the same day, when billing landed

The short version

TipMefy works entirely on your phone. Nothing about your money is uploaded, unless you choose to create an account — and you never have to.

There are no ads, no analytics and no trackers. Nothing about your money ever reaches a third party. The one third party TipMefy uses at all is the service that handles subscriptions, and it hears from your phone only if you open the Pro screen — see If you look at Pro.

What TipMefy stores on your phone

Everything you enter: the tips you log, the hours you work, your workplaces and their wages, your shift types and tip-out rules, your goal, your settings, and your name if you set one.

This lives in the app's own storage on your device. It is not encrypted by TipMefy beyond the protection your phone already applies to app data, and it is included in your device backups if you have those switched on — which is your backup, held by Apple or Google under their terms, not by us.

If you never make an account

Nothing leaves your phone. TipMefy makes no network requests at all in normal use. It works identically in airplane mode. There is no server holding your tips, and nothing for anybody — including us — to look at, hand over or lose.

This stays true whether or not you ever tap anything about Pro, with the single exception on the next heading, which is a screen you have to go and open.

If you do make an account

An account is optional and free. Its only purpose is to keep a copy of your ledger, so that losing or replacing your phone does not lose your history.

When you create one, we hold:

Your email address, which is what the account is.
A copy of your ledger: the same tips, hours, workplaces, shift types, tip-out rules and settings that are on your phone.

That copy is stored in the United States. Only you can read it. Access is enforced at the database level — every row is tied to your account and the rules that grant access name only its owner. We do not read your entries, and there is no internal tool that browses them.

Your phone remains the original. The account holds a copy.

If you look at Pro

Subscriptions are handled for us by RevenueCat, a service that sits between the app and Apple's store. Being specific about what it is told, because "we use a payments provider" is not an answer:

When you open the Pro screen, the app asks RevenueCat what Pro costs where you are — because Apple charges a different amount in each country, and we would rather show you the real one than a converted guess. That request tells it that a TipMefy install is asking about prices. It carries no account, no email and nothing at all about your work.
If you subscribe, it is told your TipMefy account id, so that the subscription belongs to your account rather than to one phone. That is what lets Pro follow you to a new phone.
It is never told anything about your money. Not a tip, not a shift, not a total, not a workplace. There is nothing to tell it: the app's records never leave your device except into your own account backup.

Until you open that screen, RevenueCat has never heard of your phone. This is deliberate and it is enforced in the code, not by intention: the app does not start the subscription service at launch.

Payment is handled entirely by Apple. We never see your card, your billing address, or your Apple ID. Apple tells our server — through RevenueCat — that a subscription started, renewed or ended, and we store only what is needed to know whether Pro is active: the plan, when the paid period ends, and the store's own identifier for your subscription.

You cancel a subscription the way you cancel any other on your phone, in your Apple ID settings. Cancelling takes nothing away from your records.

What we never do

No advertising, and no advertising identifiers.
No analytics. We do not measure what you tap, how often you open the app, or which features you use.
No trackers. Nothing follows you between apps or websites, and there is no advertising identifier anywhere in TipMefy.
Nothing about your work shared with anybody. The subscription service above is the only third party the app talks to, and what it is told is listed in full under If you look at Pro.
No selling of data. There is no arrangement under which this could happen.
No comparison of your earnings with other people's. Everything TipMefy tells you about your work is derived from your own history.

The comparison TipMefy makes against published wage figures for your area uses statistics released by the U.S. Bureau of Labor Statistics. Those figures are public and are shipped inside the app; your data is not sent anywhere to produce them.

Deleting things

Two different actions, and it matters which you want:

Delete everything — Settings → Data & privacy. Removes the ledger from this phone. If you have an account, that copy is not affected.

Delete my account — Settings → Data & privacy → Account. Removes your account and the copy we hold, permanently. Everything on your phone stays exactly where it is, and the app carries on working as it did before you signed up.

You can also sign out at any time, which removes the account from that phone and deletes nothing.

Taking your data with you

You do not need us to get your data out, and you never did:

CSV export, for a spreadsheet or a tax preparer.
A full backup file, which restores into the app.
A year-in-review PDF.

All three are produced on your phone and go only where you send them.

Children

TipMefy is not directed at children and we do not knowingly collect anything from anyone under 13.

Changes

If this policy changes in a way that affects what is collected, the app will say so rather than relying on you noticing a new date at the top of a web page.

Contact

Questions about this policy or your data: support@tipmefy.com