Privacy Policy

Tipple ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect and process the following categories of personal data:

Account information

• Your name and email address, provided at registration.
• Your hashed password (we never store your password in plain text).
• Account creation date and last login timestamp.

Service data

• Keyword alerts you configure.
• Wishlist entries, which store a snapshot of the product at the time you save it (name, image URL, retailer link, price, retailer name).
• Feedback, bug reports, and stockist requests you submit.
• Timestamps for when items are created or modified.

Device data (mobile app)

• Firebase Cloud Messaging (FCM) device tokens registered by the Tipple mobile app. These are used solely to deliver push notifications when a restock matches one of your keywords.
• You can revoke push access at any time via your device's notification settings or by signing out of the app.

Technical data

• Session authentication tokens stored in secure, httpOnly cookies.
• Basic server logs including IP addresses and request timestamps.

• To create and maintain your account and authenticate your identity.
• To provide, operate, and improve the Tipple service.
• To filter your feed by your keywords and deliver push notifications when a restock matches.
• To store and display your wishlist.
• To process subscription payments via Stripe.
• To send service-related communications.
• To diagnose technical issues and maintain security.

We do not use your data for advertising and do not sell it to third parties.

• Contract performance: processing necessary to provide the service.
• Legitimate interests: security monitoring, fraud prevention, and service improvement.
• Legal obligation: where required by law.

Your data is stored securely on infrastructure we control. Passwords are encrypted before storage. We take reasonable technical and organisational measures to protect your data. Data is stored within the United Kingdom or European Economic Area.

Stripe

We use Stripe to process subscription payments. Your payment information is handled directly by Stripe. We do not store your card details.

Firebase Cloud Messaging (Google)

We use Firebase Cloud Messaging, operated by Google, to deliver push notifications to the Tipple mobile app. FCM receives the device token and notification payload (typically the product name, price, retailer, and a link). FCM does not receive your email address, wishlist, or keyword list.

Restock data providers

Restock information is aggregated from publicly available external sources. We do not share your personal data with these sources.

We retain your data for as long as your account is active. Upon account deletion, data is permanently removed within 30 days, except where required by law. Server logs are retained for a maximum of 90 days.

Under UK GDPR you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data.
• Portability: export your keyword and wishlist data.
• Restrict processing: limit how we process your data.
• Object: object to processing based on legitimate interests.

Contact us at privacy@mytipple.co.uk. You may also lodge a complaint with the ICO at ico.org.uk.

We use essential cookies only. See our Cookie Policy.

Tipple is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy from time to time. We will revise the "Last updated" date and notify you of material changes.

Contact us at privacy@mytipple.co.uk.