What the app touches, and what it doesn't.

No account, no profile

The app has no sign-up, no login and no user profile. We do not ask for your name, email address, phone number or any other identifier, and we have no server that stores your calculations. Nothing you type into the app is associated with you as a person, because the app has no concept of who you are.

What stays on your iPhone

Your tip history (bill amounts, tax, tip percentages, party sizes, totals, dates, and any place name you type or accept) is stored in a database on your device. Your preferences (default tip, default split, currency, theme, haptics) are stored in the app’s own settings on your device.

We cannot read any of it. Deleting the app removes this data from your device, subject to any iCloud copy described below.

Receipt scanning is on-device

When you scan a receipt, the image is processed by Apple’s Vision text-recognition framework running locally on your iPhone. The photo is not uploaded to us or to anyone else, is not added to your photo library by the app, and is discarded once the total has been read. The camera is used only while the scanning screen is open, and only after you grant permission in iOS.

iCloud sync (Platinum, optional)

With Platinum enabled, your tip history mirrors to your own private iCloud database so it appears on your other devices signed in to the same Apple Account. That data is held in your iCloud account under Apple’s terms and privacy policy, not on our servers, and not accessible to us. Turning iCloud Drive off for the app stops the sync; deleting the app’s iCloud data is done through your iOS iCloud settings.

Place-name suggestions (optional)

If you allow location access, the app can suggest the name of the venue you’re at when a tip is saved, so you don’t have to type it. To do that it sends the one coordinate at that moment to Apple’s Maps service to look up nearby places. The coordinate is not linked to an identity, is not used for advertising or tracking, and is not stored or transmitted by us beyond that single lookup. The suggestion is only ever a prefill; you choose whether to accept it.

Location access is entirely optional. Deny or revoke it in iOS Settings and every other feature keeps working exactly as before.

Advertising in the free version

The free version displays a single banner advertisement supplied by Google AdMob. To serve it, the AdMob SDK receives standard device and ad-request information. This is the one place where data leaves the app for a third party’s own purposes, and it is governed by Google’s privacy policy.

The app does not track you. It never reads the advertising identifier (IDFA), never shows the App Tracking Transparency prompt, and requests non-personalised ads only. In the EEA, the UK and Switzerland you are shown a consent prompt covering advertising before any ad is requested, and your choice is honoured. You can revisit that choice at any time from the app’s Settings → Privacy · Ads & consent screen.

Buying Platinum removes advertising entirely, and with it the ad SDK’s data collection.

No analytics, no tracking of our own

The app embeds no analytics, attribution, crash-reporting or session-recording SDK. We do not build profiles, we do not sell or share personal information, and we do not track you across other apps or websites for our own purposes. Apple provides us with aggregate, anonymous App Store statistics (downloads, crash counts) that cannot identify individual users.

Purchases

Platinum is sold through Apple’s In-App Purchase system. Apple processes the payment and tells the app only whether an entitlement is active. We never see your payment card, billing address or Apple Account details. Restoring a purchase asks Apple to confirm the entitlement again; no personal data reaches us in the process.

Currency rates (Platinum, optional)

Live currency conversion fetches exchange rates from a third-party rates service. That request contains only currency codes, never your bill, tip, total or any identifier, and results are cached on your device so it runs rarely.

Children

The app is a general-purpose utility and is not directed at children under 13. We do not knowingly collect personal information from children. Because there are no accounts, we hold no data that could identify a child.

This website

tipcalc.appgineering.com is a static marketing page. It sets no cookies, shows no advertising, and uses no third-party tracking service. It embeds a QR-code image from a third-party image service and links out to the App Store; following those links means the destination’s own privacy policy applies.

For visitor statistics we run Umami on our own server at analytics.appgineering.com. It is cookie-free and records only aggregate page views with the referrer, the page URL, and coarse device, browser and country information. Your IP address and user agent are used solely to generate a daily-rotating hash that separates one visit from another; they are never stored, and the hash cannot be traced back to you or linked across days or across other sites. No data is shared with anyone, and none of it leaves our infrastructure. Because this creates no identifier that could single you out, it needs no consent under the GDPR/DSGVO, which is why you see no cookie banner. We also honour the browser Do Not Track signal: switch it on and nothing is recorded at all.

Questions, or a request about your data

Because there are no accounts, we hold no personal records to look up, correct or delete on your behalf. Deleting the app removes the app's data from your device. If you have a question about this policy, or a request under the GDPR, the CCPA or a similar law, write to support@appgineering.com and we'll respond within 30 days.