Privacy Policy
Privacy Policy
Draft, last updated November 3, 2026. This policy will be reviewed before Tipstead launches publicly.
Tipstead is operated by MaLuHo ("we", "us"), based in British Columbia, Canada. This policy explains what personal information Tipstead collects, why, and the choices you have. We follow British Columbia's Personal Information Protection Act (PIPA) and, where it applies, Canada's PIPEDA.
What we collect
- Account information: your name, email address, language and the passkeys you register. We never receive your fingerprint, face data or device PIN; passkeys stay on your device.
- Restaurant records you enter: employee display names, roles, shift dates, hours, tip amounts, cash kept, adjustments and payment records (amount, date, method and an optional cheque or reference number).
- Usage and security records: a change history of who edited what and when, and technical information such as IP address used to prevent abuse.
We do not ask for social insurance numbers, bank account numbers or home addresses. Please don't enter them in free-text fields.
Why we use it
To provide the service: calculate and show tip shares, let invited staff see their own information, send account emails (sign-in links, email confirmation, invites and settlement notices), keep the service secure, and meet legal obligations. We don't sell personal information and don't use it for advertising.
Who can see it
Within a restaurant, owners and managers can see that restaurant's records. Employees can see only their own shifts, tips, adjustments and payments. We use service providers to run Tipstead, mainly Cloudflare (hosting, database and email delivery) and, once paid plans are available, a payment processor. These providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law.
How long we keep it
Restaurant records are kept while the restaurant's account is active. Records older than six years, and records of employees who left more than six years ago, are deleted automatically. If an owner deletes the account, the restaurant's records are deleted right away. Backups may retain deleted data for up to 30 days.
Your choices
- Access and export: download your data from Settings at any time.
- Correction: ask your restaurant's owner or manager to correct records about you, or contact us.
- Deletion: delete your account from Settings. An employee's shift history may be kept by the restaurant as part of its payroll records.
Security
Passwordless sign-in with passkeys, encrypted connections (HTTPS), data encrypted at rest by our hosting provider, and a change history for every edit. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected people as the law requires.
Contact
Questions or requests: support@tipstead.com. If you're not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia.