Privacy Policy

1. Controller and Roles

Tippale.com, Inh. Michael Lev-Ari, Auf dem Neuen Feld 8, 63303 Dreieich, Deutschland, Germany ("we") operates the Tippale platform.

Tippale is used by businesses to manage their teams. This creates two roles: for the account and website data of business owners, managers and visitors we are the controller. For employee data entered or generated within a business (schedules, time records, payroll, tips, documents) the respective business is the controller and we act as processor on its behalf under a Data Processing Agreement. Employees should also contact their employer regarding their rights.

2. Data We Process

3. Purposes and Legal Bases

• Providing the platform and executing the contract (Art. 6 (1) b GDPR)
• Payroll, tax and social-security processing on behalf of the business (Art. 6 (1) b, c and Art. 88 GDPR, § 26 BDSG)
• Billing via Base44 Payments and statutory bookkeeping (Art. 6 (1) b, c GDPR)
• Security, fraud prevention, access logging and abuse prevention (Art. 6 (1) f GDPR)
• Notifications and push messages about shifts, requests and messages (Art. 6 (1) b, f GDPR); push can be switched off in the device settings at any time
• Product analytics and improvement (Art. 6 (1) f GDPR)
• Partner/referral program: storing a referral code from the link you signed up with (Art. 6 (1) f GDPR)
• Marketing e-mails only with consent (Art. 6 (1) a GDPR), revocable at any time

3a. Required Information and Automated Decisions

Account and business details marked as required are necessary to create and perform the contract; without them the Service cannot be provided. Tippale does not make decisions based solely on automated processing that produce legal or similarly significant effects. AI outputs are suggestions reviewed by a person. Where Tippale acts as processor, the business determines the legal bases, including any basis under Art. 9 GDPR for health data, and provides employees with the information required by Art. 13 and 14 GDPR.

4. AI Features

Certain features use large language models: schedule generation, business insights, the employee assistant, extraction of invoice and POS-report data, and address geocoding. For this purpose the relevant data (e.g. shift constraints, sales figures, document contents, questions asked) is transmitted to AI model providers via our hosting platform. Provider processing and permitted data use are governed by the applicable data-processing agreements and provider settings. AI results may be displayed or prepared automatically. Users must review them before relying on them for employment, financial or other consequential decisions.

5. Recipients and Sub-processors

We only pass on data where necessary to provide the Service:

• Base44 (hosting, database, authentication, file storage, e-mail dispatch and AI integrations)
• AI model providers engaged through Base44 (e.g. OpenAI, Google, Anthropic) for the features described in section 4
• Base44 Payments - subscription payments and invoices
• POS, Wix and delivery platform providers - only when the business connects them; data flows in both directions according to the configured integration
• Apple Push Notification service and Google Firebase Cloud Messaging - delivery of push notifications to mobile devices
• Your tax adviser or accountant - when the business shares report links or exports
• Authorities - where legally required

We do not sell personal data.

6. Third-country Transfers

Some providers process data outside the EEA (in particular in the USA). Transfers are based on the EU-U.S. Data Privacy Framework, adequacy decisions or the EU Standard Contractual Clauses with supplementary measures.

7. Retention

• Account and contract records are retained while necessary for the Service, legal obligations or establishing, exercising or defending legal claims. Acceptance records document the accepted version, language, account, scope and time.
• Business data is returned or deleted on documented instructions under the DPA. Employer retention duties do not automatically authorise Tippale to retain every employee record after termination.
• German tax records have different retention periods: generally 10 years for books and annual accounts, 8 years for accounting vouchers and 6 years for other relevant records under § 147 AO / § 257 HGB; extensions and special rules may apply. Payroll, health and working-time records must be assessed separately.
• Technical logs are retained only as needed for security and fault investigation, subject to legal requirements. Backup copies follow the applicable provider deletion cycle. Account closure, subscription cancellation and deletion of business data are separate actions; contact us for a deletion or return request.

8. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection, as well as to withdraw consent at any time. If your employer is the controller (see section 1), please address requests to your employer; we will support them. You can also contact us directly at privacy@tippale.com.

You have the right to lodge a complaint with a data-protection supervisory authority, e.g. the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

9. Cookies and Local Storage

The app uses browser storage for sign-in, language and display preferences, selected business, offline context and push settings. Referral attribution has a separate purpose and is not automatically classified as technically necessary. Access to or storage on a device must be assessed separately under § 25 TDDDG; optional tracking requires consent unless a legal exception applies. This policy does not itself grant consent.

10. Security

• We use authentication, business- and role-based access controls, protected transmission and server-side checks for protected operations. Access for authorised administration and support must be limited to the relevant purpose.
• Private document storage and expiring links are used for protected document flows. Files exported, downloaded or shared by the business remain subject to its own access and recipient controls.
• Technical and organisational safeguards are assessed under Art. 32 GDPR. Information on provider storage, encryption, backup and recovery controls must be read with the applicable provider documentation; no particular certification or recovery time is promised here.

11. Minors

Tippale is aimed at businesses and their staff. Employee data, including data of apprentices or other minors, requires an appropriate employment-related legal basis. The age rule in Art. 8 GDPR concerns consent-based information-society services offered directly to children; it is not a blanket consent requirement for all employee processing.

12. Changes

We update this policy when features or legal requirements change. The current version is always available in the app; material changes are announced by e-mail or in the app.

13. Contact