Privacy Policy

• Your name and email when you sign up.
• Content you create in the app (clients, jobs, invoices).
• Billing details, processed by Polar. We never see your card.
• Basic technical data in our server logs, like your browser and the pages you request. We never store your IP address, though we use it to generate a daily code that lets us count visitors.

We use only strictly necessary cookies: a session cookie to keep you signed in, and preference cookies for your theme and timezone. We don't use tracking or advertising cookies.

To run the service, keep your account secure, take payments, fix bugs, and contact you about your account. We don't sell your data. We don't use it for advertising.

We use a small number of providers to run Tideplan:

• Firebase (Google): sign-in, authentication, and transactional emails (verification, password reset).
• Polar: subscription billing.
• Hetzner: hosting and database, in Germany.
• Cloudflare: DNS, caching, and protection against attacks. All traffic to the site passes through it, so it sees your IP address.

These providers process data on our behalf and can't use it for their own purposes. Some process data outside the EU under Standard Contractual Clauses.

As long as your account is active. If you delete your account, your data is removed within 30 days, except where we're legally required to keep it.

Under GDPR you can ask us to access, correct, export, or delete your data, or object to how we use it. Email hello@tideplan.io and we'll respond within 30 days.

We use HTTPS, encrypted storage, secure session cookies, and strict access controls. No system is completely secure, but we'll tell you promptly if a breach affects your data.

If we make material changes to this policy, we'll let you know by email or in the app.

Questions? Email hello@tideplan.io.