Privacy Policy
Effective July 2026 · For privacy questions about Tipper, contact [email protected].
The short version
Tipper is built so that we never see your delivery data. Everything the app records — addresses, tips, offers, locations, wait times — is stored in a local database on your phone and is never transmitted to us or anyone else. We receive only: payment information (handled by our payment processor), emails you send us, and routine technical data when the app checks our site for updates.
What the app records, and where it stays
When you enable Tipper's accessibility service, the app reads information displayed on your screen in the DoorDash Dasher app — store names, customer drop-off addresses and first names, tip and pay amounts, offer details, and DoorDash's wait estimates. With your separate permission, it also records your device's location while you dash, and a diagnostic log of Dasher screen layouts used to keep capture working (viewable and erasable in Settings).
All of it is stored only on your device, in the app's private storage, along with the app's automatic local backups. It is not uploaded, synced, or shared by the app. Uninstalling the app deletes its data (export first if you want to keep it). Because the data never reaches us, we cannot access, recover, sell, or disclose it.
What we actually receive
- Purchases. Subscriptions are processed by Lemon Squeezy, which collects your name, email, and payment details under its own privacy policy; we see your name, email, and subscription status — never your full card number.
- Update checks. The app periodically fetches a small version file from our website. Like any web request, this exposes your IP address and app version to our host. No delivery data is included — ever.
- Website visits & email. Standard web-server logs, cookieless visit analytics on this website (described below), and any correspondence you send to support.
We do not run ads, embed third-party trackers in the app, or sell any data.
Website analytics
This website — not the app — uses Cloudflare Web Analytics to count page views and see which sites link to us, so we can tell whether anyone is actually finding Tipper. It is cookieless: it sets no cookies, stores nothing on your device, does not fingerprint you, does not track you across other websites, and does not build a profile of you. We see totals — pages viewed, referring site, country, device type — never individuals. Because no cookies or personal data are involved, there's no consent banner to click.
The app itself contains no analytics of any kind. Nothing about your deliveries, tips, locations, or earnings is ever measured or transmitted — that all stays on your phone, as described above.
Third parties
Our host and analytics provider (Cloudflare) and our payment processor (Lemon Squeezy) handle data as described in their own policies. The app shows map tiles from OpenStreetMap; loading tiles exposes your IP and the map area requested to the tile server, like any map app.
Your choices
Capture, location, and the diagnostic screen log are all controlled in the app's Settings — including a one-tap "Clear captured data." Cancel your subscription anytime; your on-device data is unaffected. To delete what we hold about you (name, email, subscription record, correspondence), email [email protected]. Payment records are retained as required for tax and accounting.
Children
Tipper is for working delivery drivers and is not directed at children under 18.
Changes
If this policy changes materially, we'll post the new version here and note it in the app's release notes.