Privacy Policy

KindTip (kindtip.app) is a digital tipping platform operated by Festborne LLC, a limited liability company registered in Chicago, Illinois, United States ("KindTip," "we," "us," "our").

This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have regarding your data. It applies to all users of the KindTip website and mobile web application.

For questions, contact us at hello@kindtip.app.

We collect three categories of information:

We use the information we collect to:

• Create, authenticate, and manage your KindTip account.
• Generate and display your public tip page to potential tippers.
• Process tip payments and facilitate payouts through Stripe.
• Send email notifications when you receive a tip (via Resend).
• Send payment receipts to tippers who provide their email.
• Respond to your support requests and inquiries.
• Detect, prevent, and investigate fraud and abuse.
• Analyze usage patterns to improve the platform (using aggregated, non-identifiable data).
• Comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We do not use your data to show you ads.

The following profile information is visible to anyone who visits your KindTip tip page:

• Display name
• Biography / description
• Profession category
• Profile photo (if uploaded)
• Average star rating (if you have received rated tips)

Your email address, earnings, individual tip amounts, tipper names, and financial data are never displayed publicly. They are visible only to you in your dashboard.

We share personal information only in the following limited circumstances:

Service providers: We share necessary data with the following processors under contractual data processing agreements:

Legal requirements: We may disclose information if required by law, subpoena, court order, or other legal process, or to protect the rights, property, or safety of KindTip, our users, or the public.

Business transfers: If KindTip or Festborne LLC is acquired, merged, or undergoes a significant asset transfer, user data may be transferred as part of that transaction. We will notify you of any such change.

We retain your data for the following periods:

• Account information: retained for as long as your account is active, plus 90 days after closure to allow for dispute resolution.
• Tip and payment records: retained for a minimum of 7 years for financial compliance and tax purposes.
• Support communications: retained for 3 years.
• Server logs: retained for up to 90 days.

You may request deletion of your account and associated data at any time by contacting hello@kindtip.app. Note that some financial records may be retained as required by law even after account deletion.

We implement industry-standard technical and organizational security measures to protect your information, including:

• HTTPS/TLS encryption for all data transmitted between your device and our servers.
• Secure, multi-factor authentication managed by Clerk.
• Payment data handled exclusively by Stripe's PCI DSS Level 1 certified infrastructure.
• Database encryption at rest via Supabase on Amazon Web Services.
• Regular security reviews and access controls for our engineering team.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use KindTip at your own risk. If you believe your account has been compromised, contact us immediately at hello@kindtip.app.

Regardless of where you are located, you have the following rights with respect to your personal data:

• Access: request a copy of the personal information we hold about you.
• Correction: update or correct inaccurate information through your account settings or by contacting us.
• Deletion: request that we delete your personal information, subject to legal retention requirements.
• Portability: receive your data in a structured, machine-readable format.
• Opt-out of marketing: we do not send marketing emails, but you can opt out of all KindTip notifications in your account settings.

California residents (CCPA/CPRA): You have the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to correct inaccurate personal information, and the right to opt-out of the sale or sharing of personal information (we do not sell or share personal information for advertising). You also have the right to non-discrimination for exercising these rights.

EEA and UK residents (GDPR/UK GDPR): If you are in the European Economic Area or United Kingdom, you have additional rights including the right to object to processing based on legitimate interests, the right to restrict processing, and the right to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing your data is contractual necessity (to provide the KindTip service) and legitimate interests (fraud prevention and service improvement).

To exercise any of these rights, email us at hello@kindtip.app. We will respond within 30 days.

KindTip uses essential session cookies only. These cookies are strictly necessary for authentication, security, and keeping you signed in. We do not use:

• Advertising or tracking cookies.
• Third-party analytics services (e.g. Google Analytics).
• Social media tracking pixels.
• Fingerprinting or cross-site tracking technologies.

You can configure your browser to refuse cookies, but doing so will prevent you from signing in to your KindTip account. Tippers (who don't need an account) can use KindTip without any persistent cookies.

KindTip is not directed to individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from minors. If you believe a minor has created a KindTip account or provided us with personal information, please contact us immediately at hello@kindtip.app and we will promptly delete the information and close the account.

KindTip is operated from the United States. If you access the service from outside the US, your personal information will be transferred to and processed in the United States and other countries where our service providers operate (see Section 5). By using KindTip, you consent to such transfers.

We apply appropriate safeguards for international data transfers, including Standard Contractual Clauses where required by applicable law.

We may update this Privacy Policy periodically. We will notify you of material changes by email to your registered address and by posting a notice on KindTip at least 14 days before the changes take effect. The current version is always available at kindtip.app/privacy.

Your continued use of KindTip after the effective date constitutes acceptance of the updated policy.