Privacy Policy

Who we are

TipsCoach is a tool for tipped workers to log shifts and understand their own earnings. The app is operated by Xstream Networks, LLC.

Questions or requests: privacy@xstreamnetworks.com.

What stays on your phone

Shifts, tips, hours, sales, service charges, workplaces, roles, tip-out rules, goals, tags, moods, notes and profile settings are stored locally on your device. Core logging, saved history and edits work offline with no account required. Account management, subscription checks and sending feedback use online services.

Accounts and cloud backup

Optional cloud backup requires email sign-in and an active Pro subscription. You can restore an existing backup without an active subscription. Signing in or purchasing Pro alone does not upload your shift records.

Uploads require a signed-in account and server-verified Pro subscription; the courtesy preview does not authorize uploads. Choose Set up backup in Settings and confirm to turn on backup for this phone. After a successful first backup, local changes can sync while the app is open and backup access remains available.

• We store your email address so we can send you a sign-in code. There is no password.
• The courtesy preview's start time is stored on your device. If you sign in, we also associate its start time with your account in our database.
• When an authorized backup runs, your shifts and profile settings are copied to our database, hosted on Supabase in the United States. This can include names you entered, workplaces, roles, financial records, moods and free-text notes. We also keep backup versions and technical identifiers used to manage the active backup phone and recovery. You can restore previously saved cloud records without uploading local changes.
• Database access rules scope backed-up records to your account. They are not public records.
• You can sign out at any time; your data stays on your phone. Signing out does not delete an existing cloud backup.

Subscriptions and RevenueCat

Apple processes subscription payments. We use RevenueCat to check purchase history and subscription status, restore purchase access and provide subscription reporting. This includes product and transaction information and whether Pro access is active. TipsCoach does not receive your payment card number.

RevenueCat uses a generated app user identifier when you are not signed in. If you sign in, we supply your TipsCoach account identifier, which can link subscription information to that account. Subscription services can initialize and check status even if you have not purchased anything.

We do not send your shift records, profile name or email address to RevenueCat through our subscription integration. Account identifiers and purchase information are separate from your local earnings records. Online providers also process connection information and may retain operational request or error logs needed to run their services.

When you send feedback

Sending a bug report or feature suggestion is optional and does not require an account. Your message, any steps you provide, and an optional reply email go to our support inbox. You can choose whether to include the app version, operating system and device model shown on the form. We do not attach your earnings records.

Supabase processes the request and Resend delivers the email. We do not store feedback messages or reply addresses in the app database. We keep shared sending counters and temporary retry receipts to limit abuse and prevent duplicate submissions. These receipts contain random request IDs and keyed fingerprints, not your message or reply address. An unsent draft is kept in memory while the app is running, not saved permanently.

Advertising and app analytics

This release does not enable app-usage analytics. RevenueCat's subscription reporting is separate from tracking how you use shift logging or other app screens.

• There are no ads or ad networks, and our app does not request advertising identifiers.
• We do not access your device's location, contacts, photos, microphone or camera.
• We do not use your data for cross-app advertising tracking.

Who we share it with

We do not sell your data, rent it, or share it for advertising. Supabase provides our database, authentication and server functions. Apple processes subscription payments, and RevenueCat handles subscription identity, purchase status and reporting. Resend delivers sign-in and support emails on our behalf. Feedback also reaches our support email provider and inbox.

Your rights

You can manage your records inside the app or contact us about a privacy request:

• CSV export (Pro): Settings, Export all shifts, creates a readable copy of your saved shifts. All records on your phone remain readable and editable on Free.
• Erase local records: Settings, Erase data on this phone, removes this phone's shifts and profile. It does not delete your cloud account or copies you saved or shared elsewhere.
• Delete your account: sign in from Settings, then choose Delete account in the account section. Successful deletion removes your sign-in account and its associated rows from our active database, including any backed-up shifts and profile settings. You choose separately whether the shifts on your phone are erased too.
• Account deletion does not require Pro, exporting your records or canceling a subscription first. Deleting the app or your TipsCoach account does not cancel Apple billing. Manage or cancel a subscription in your Apple subscription settings.
• You can also email privacy@xstreamnetworks.com to request a copy or deletion of the data we hold for you. These privacy requests do not require Pro.
• Earnings records: export your self-reported earnings for review with your accountant or employer. These are not official tax forms.

Retention

Local shift records stay on your phone until you erase them or remove the app. A courtesy-preview marker is stored separately in device secure storage; erasing local records does not reset the preview.

Cloud backups include recoverable earlier versions of your shifts and profile. Editing or deleting a shift on your phone does not immediately remove it from an earlier backup version. Earlier versions are removed as the backup history is pruned, or when the associated account is deleted. Local recovery copies may also remain on the phone after a restore.

Older sync records can include an empty deletion marker after a deletion syncs. We do not promise a scheduled purge of those markers. A deletion marker does not by itself erase earlier versioned backups.

Deleting your account removes its associated rows from the active database, but does not establish immediate removal from provider backups or service logs. Providers can retain operational records of requests and errors. Retention depends on the provider and record type; we do not promise a single deletion period for these copies.

The in-app account-deletion flow does not delete RevenueCat customer records or Apple transaction records. Subscription and transaction information may remain with those providers. Copies you exported, saved or shared outside TipsCoach are also separate from account deletion.

Support correspondence can remain in our support inbox and email providers' systems. Deleting your app account does not automatically delete those emails. Contact privacy@xstreamnetworks.com for a request concerning your support correspondence.

Children

TipsCoach is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has provided information, contact us and we will remove it.

California residents

We do not sell personal information and do not share it for cross-context behavioral advertising. You have the right to know, delete, correct, and opt out, exercisable through the in-app tools above or by contacting us.

Changes

If we change how data is handled, we will update this policy and the date at the top. Material changes will be surfaced in the app.