Privacy Policy

Who we are

TipLedger is published by K.J.A & Z.J.O LLC, 1704 John F. Kennedy Blvd, Jersey City, NJ 07305, United States. Questions about this policy can be sent to support@tipledgerapp.com.

What we collect

Account holders (managers and owners): name, email address, restaurant name and location, and authentication credentials. If you subscribe, our payment processor collects your billing details.

Operational data: shift dates, sales totals, tip totals, roles, hours and the resulting tip distributions you enter or import.

Employees: a display name (or name code) and a hashed 4-digit PIN. We do not require or collect employee email addresses, phone numbers, home addresses, Social Security Numbers, or bank account information.

What we never collect

Social Security Numbers, tax identification numbers, bank accounts, routing numbers, and full payment card numbers are never stored by TipLedger. Card data is handled entirely by Stripe, our PCI-compliant payment processor.

How we use data

We use your data to calculate and display tip distributions, generate reports and exports, authenticate users, maintain an audit trail, provide support, process subscription payments, and keep the service secure and reliable. We do not sell your data and we do not share it with advertisers.

Analytics

We record anonymous page views and application errors so we can fix problems and understand which parts of the product are used. This data is not sold, is not used for advertising, and is not linked to individual employees.

Service providers

We rely on a small number of processors to run the service: Supabase (database, authentication and file storage), Stripe (payments), and Resend (transactional email such as invitations and password resets). Each processes data only on our instructions.

Security

Data is encrypted in transit and at rest. Every record is scoped to your organization by database-level row security, so one restaurant cannot read another's data. Employee PINs are stored only as salted hashes and cannot be recovered — a manager can reset a PIN but never view it.

Retention and deletion

We keep your data for as long as your account is active. You can delete employees, shifts and other records at any time from inside the app. On written request to support we will delete your organization and all associated data, other than records we must retain for tax or legal purposes.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact support@tipledgerapp.com and we will respond within 30 days.

Children

TipLedger is a business tool and is not directed to children under 13. Where a restaurant employs minors, only a display name and PIN are held for them, consistent with the rest of the staff.

Changes

We will update this page when our practices change and revise the date above. Material changes will also be announced inside the app.