Tipstuff and Privacy
updated on 02/08/2024
Introduction
As a family, as parents, and as internet users, we have two beliefs we hold dear:
- Protecting privacy on the Internet is essential, and it is even more true when it comes to family privacy;
- No data about our families - especially our children - should be visible, disclosed, or used by a third party without prior clear and explicit authorization from us.
TipStuff has always been designed with respect for these two beliefs, even before the advent of the European Data Protection Regulation, which nevertheless has the merit of generalizing these best practices.
The European Data Protection Regulation came into force on May 25, 2018. This new legislation has three objectives:
- to standardize legislation within the European Union,
- to hold companies accountable for their management of personal data,
- and to strengthen the protection offered to individuals concerning their data.
As a result, we have updated our privacy policy.
1. Nature of the Personal Data Collected
According to the CNIL, « Personal data is any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more elements specific to them. »
If information or a combination of information can lead to identifying an individual, alone or through cross-referencing, it is considered personal data.
For example, a name, first name, address, phone number, but also an IP address, a photo are considered personal data, as they all allow you to be identified, either directly or indirectly.
The Data You Provide Directly
By its very nature, the TipStuff application collects personal data that is mostly provided directly by you.
About Your Family
- Name,
- Postal address,
It should be noted that none of this information is mandatory. Even regarding the family name, there is no requirement to provide the real family name.
Likewise, shopping lists, calendar events, tasks, etc., do not constitute private data as they do not allow you to be identified directly or indirectly.
About Each Family Member
- First name
- Email address
- Date of birth
- Phone number
Apart from the email address, which is necessary for processing, none of this information is mandatory.
Exchanges with Technical Support
- Name and first name
- Email address
- Email exchanges
Data Collected Automatically
As you browse our website and/or mobile applications, we collect data to track and improve your experience and the security of our service.
Thus, we store in data log files and in a data warehouse, information such as a unique identifier via cookies, the date of connection, the connection IP address, the source platform (e.g., website, mobile site, or applications), the country of connection, the type of device, or when a mobile application crashes on a smartphone.
Personal Data Collected Using Cookies
Only the tipstuff.com website uses cookies, web beacons, unique identifiers, and other similar methods to collect information about:
- the different pages viewed;
- links clicked;
- other actions taken during the use of our site through the content of our advertising or emails.
Personal Data Collected Through Social Networks
With your authorization, some social networks can give us access to certain personal data they have stored. This data can notably be collected during your quick registration/login on our site via Facebook Connect.
2. Collection and Processing of Personal Data
According to the CNIL, it is « Any operation, or set of operations, involving such data, whatever the process used (collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination, or any other form of provision, reconciliation, interconnection, locking, erasure, or destruction, ...) »
The collection, transfer, or storage of your personal data are processing operations under the GDPR.
According to the CNIL, « The controller of a processing operation involving personal data is, unless expressly designated by the legislative or regulatory provisions relating to this processing, the person, public authority, service, or body that determines its purposes and means. In practice and generally, it is the legal entity represented by its legal representative. »
By logging in and entering your data on the TipStuff application, the data controller is therefore:
arNuméral
2 avenue galilée
86360 Chasseneuil du Poitou
support@tipstuff.com
We also work with subcontractors for certain operations (subscription payments), and as such, they must have access to certain information, but only those we transfer to them.
Your data is used for different purposes. You will find the detailed list below:
Use of Our Services
TipStuff is an information-sharing service with the rest of your family. The primary purpose of collecting personal data is the direct consequence of implementing the service offered by the TipStuff application.
The choice of people with whom you share this information is entirely up to you through the members you add to your TipStuff family.
Advertising
In the free version of TipStuff, we may use your information for advertising purposes, notably to display advertisements on our site when you browse the Web or on the application itself. We may use this data to send you information related to our business activity, such as promotional offers or targeted newsletters. Your information may also be used to evaluate our advertising performance.
In the Premium version of TipStuff, we no longer use your data for advertising purposes, and you can disable all email communications on your family profile.
Payment
Your payment information is not stored by TipStuff and is directly transmitted to the payment service provider you have chosen (Stripe, ApplePay). This information is necessary for processing your order or refunds. We remind you that by using one of our payment service providers, their data protection provisions apply.
Surveys
The information you provide us during surveys we conduct allows us, with your consent, to conduct studies to improve our services and offers.
Technical Management
The information you provide allows us to ensure the proper technical management of our site and mobile applications, notably through internal technical operations, bug resolutions, data analysis, tests, etc. We also use it for the development of our services, continuous improvement, and optimization of our site and mobile applications.
We also inform you that we share your anonymized personal data with third parties, notably for marketing purposes.
When you log in to our website, we automatically have access to certain information, such as your connection IP address, the number of times you have visited our website, the number of times you have logged into the application or website.
This data is collected in accordance with the law and not for statistical or commercial purposes.
Cookies
The term "cookies" refers to all trackers placed and/or read on the terminal of a user who connects to the internet. This can be any type of terminal (smartphone, computer, laptop, tablet). Some trackers allow the analysis of users' browsing. Cookies collected on the tipstuff.com website are solely for the purpose of enabling or facilitating the site's operation. In no case are they used for commercial purposes.
3. Retention Period of Personal Data
Data Necessary for the TipStuff Service
We will retain your data related to your TipStuff House as long as it is not deleted.
A TipStuff House is automatically deleted when it has not been used for more than 6 months.
The owner of the TipStuff House can delete all personal data (under the GDPR) of the family at any time using the "Delete" function on the Family profile or by requesting it at support@tipstuff.com. All members will be immediately disconnected. Deletion will be effective after a 2 business day period. After this period, deletion will be final and cannot be reversed.
Each member of a TipStuff family can delete personal data (under the GDPR) belonging to them on their member profile by clicking on the "Delete" button on the said profile. The member will be immediately disconnected on all devices where they were logged in. Deletion will be effective after a 2 business day period. After this period, deletion will be final and cannot be reversed.
Data Not Accessible to the Application
All data that is not accessible within the TipStuff application is never retained beyond the time strictly necessary for your use of the TipStuff service and for managing our relationship with you. This includes notably exchanges with the TipStuff support service.
Social Network Data
When deleting a TipStuff account, the associated data on social networks such as Facebook, Twitter, Instagram, Messenger, Google Play, AppleStore, etc., is not deleted. It is up to the user to refer to each company's deletion procedures to find out how to proceed.
Banking and Financial Data
We draw your attention to the fact that some of your information, such as payment-related information, cannot be deleted, notably for accounting reasons.
Legal Data
Some data will be retained as part of our legal and regulatory obligations.
4. Transfer of Personal Data
The new regulation also gives you the right, upon request, to have your personal data transferred to a third-party organization.
You can make the request by email or mail to our customer service, always providing proof of your identity to support@tipstuff.com and/or Société TipStuff, 104 avenue de la Résistance, 93100 Montreuil. Due to their nature, transfer via paper is not feasible. The data will be made available to you via a link allowing you to download your data.
5. Confidentiality of Personal Data
We are committed to keeping your data under the strictest security conditions and not to disclose it to anyone without your express consent.
However, we are obliged to transmit some of your data to subcontractors for certain operations, notably the management of your payments (bank and accountant).
When you subscribe, it is a purchase, and we must necessarily use a banking institution to validate the payment transaction. Our bank is Crédit Coopératif and our payment system is Stripe or ApplePay. Therefore, it holds all the data necessary for your identification and the validation of your payment. TipStuff holds no banking information about you.
We also transmit data concerning the subscription amounts and the payment method to our accountant.
8. Security of Your Personal Data
Your household's activity on TipStuff concerns only its members and is confidential: no indexing by a search engine. In short, no one knows that you - and especially your children - are there. There is no public profile concept on TipStuff.
The data you enter in TipStuff and that circulates on the Internet is also encrypted: this means that apart from you and those you have authorized, no one can read the messages or see the photos of your children.
The data, as well as the application and the site, are hosted by Online.net, a subsidiary of the Iliad group on servers located in France, and no information about you is transferred outside the EU.
Regularly, your data is backed up from your mobile device (smartphone or tablet) to our servers. Similarly, when you log out, we save all your data on the servers and erase it from your mobile device to give it back to you the next time you log in.
This means that if you lose your smartphone, your data will be safe, and we will restore it on the device you use the next time you log in.
On our servers, we take all necessary precautions to ensure the security of your data and, in particular, to prevent it from being altered, damaged, or accessed by unauthorized third parties.
10. Consent
Before collecting your data, we ensure full acceptance of the following elements:
- Our General Terms of Use (CGU),
- Our General Subscription Terms (CGA) in case of a subscription,
- This Privacy Policy.
Acceptance of the CGU and this Privacy Charter is a prerequisite for creating any account on the TipStuff application.
If you no longer agree with these elements, you can delete your account at any time on your Family profile.
11. Transparency of Our Mechanisms
We are committed to handling your data with the utmost transparency. When we implement new mechanisms or when we need to transfer your data to a third party, we commit to informing you as soon as possible.
12. Use of AI Models
TipStuff uses AI models provided by third parties to improve the functionality of the Service. The personal data collected may be processed by these AI models in compliance with the security and confidentiality measures required by the AI Act.
AI model providers must comply with security and data protection standards consistent with the AI Act. TipStuff ensures that these providers conduct risk assessments and implement quality management systems.