PaidFairPrivacy Policy
The short version: PaidFair stores your shop's records in your own secure cloud account so they sync across your devices and the web console. Your data is isolated to your shop, encrypted in transit, and never sold, shared, or used for advertising. The iPhone app also keeps a local copy so it works offline.
Information you provide
To create an account you provide an email address and a password (passwords are stored only as a secure hash — never in plain text). To run your shop, you enter business records: your name and your team members' names, their roles and wage rates, shifts and hours, tip counts and splits, cash-outs, schedules, time-off, the messages and announcements your team sends in the app, and notes, tasks, guides, supplies, and cash-register entries. This is your data; we process it only to provide the service to you.
If you're a team member rather than the account holder: the business you work for is the controller of your information in PaidFair, and PaidFair processes it on that business's behalf. The account holder is responsible for having the right to add your information and for handling requests about it. To see, correct, or delete your data, contact your employer (the account holder); you can also reach us at the address below and we'll route your request appropriately.
Where your data lives
Your data is stored in our cloud infrastructure and tied to your account so it syncs across the web console and your devices. It is isolated per shop and enforced at the database level, so no other customer can read it. The iPhone app also caches your shop locally so it keeps working offline; when you sign in, it syncs with the cloud.
Service providers (sub-processors)
We use a small number of trusted providers to run the service, each acting on our behalf:
- Supabase — cloud database, authentication, and hosting of your shop data.
- Stripe — subscription billing. Stripe handles your card details directly; we never see or store full card numbers.
- Cloudflare — hosting and delivery of the web app and website.
- Resend — sending transactional email (sign-in codes, teammate invites, and account notices). Recipient email addresses and names are shared to deliver these messages.
- Anthropic — powers the optional in-app "Ask PaidFair" help assistant and the "describe your shop" setup helper. Only the text you type into those helpers plus non-identifying context (which screen, which features are on) is sent; we never send tip amounts, wages, or your team's names. If the assistant is unavailable, the app falls back to a built-in FAQ.
We also collect basic first-party product analytics (for example, that a step of setup was completed or a screen was opened) to understand how PaidFair is used and improve it. This telemetry does not include tip amounts, wages, or your team's names, and it is never used for advertising or shared with advertisers.
We do not use advertising or third-party tracking SDKs, and we don't sell your data or share it for advertising.
Subscriptions and payments
Paid plans are billed through Apple on iPhone (via the App Store) and through Stripe on the web console. Apple and Stripe process your payment details directly under their own privacy terms; we never see or store full card numbers, and we receive only the entitlement needed to unlock features and the subscription status for your shop. The free cash register requires no subscription.
Contacts and photos (iPhone app)
The iPhone app can import a teammate from your contacts and let you add a profile photo using Apple's standard system pickers, which run outside the app — so it only receives the specific contact or photo you choose.
Data retention, export, and deletion
You control your data. You can export your records at any time. You can permanently delete your account yourself — in the iPhone app under Cloud sync, or in the web console under Settings. Deleting your account removes it and every shop you own from our systems, including your team, shifts, tip counts, register history, and messages, and it cancels your subscription billing. This can't be undone. Residual copies in our encrypted backups are purged on the ordinary backup-retention cycle. Frozen payroll records may be retained where needed for legitimate business and legal purposes.
Paid subscriptions purchased through the Apple App Store are managed by Apple; deleting your account here cannot stop Apple billing, so cancel an App Store subscription in your Apple ID settings as well. Cancelling a subscription on its own (without deleting your account) stops future renewals and keeps your data; you keep access through the end of the period you've paid for.
Security
Your data is encrypted in transit (HTTPS/TLS) and at rest on our servers, isolated to your shop by database-level access rules, and protected by your account credentials. It runs on SOC 2-compliant cloud infrastructure and is backed up continuously with point-in-time recovery. Card details are handled by Apple and Stripe and never reach us. The iPhone app additionally uses your device's security for its offline copy, plus optional in-app passcodes for the manager and employee views.
Children's privacy
PaidFair is a business tool intended for people 13 and older and is not directed to children. We do not knowingly collect information from children.
Changes to this policy
If we change this policy, we'll post the updated version at this URL and revise the effective date above. Material changes will be reflected in a later app update.
Contact
Questions about privacy? Email support@strivenindustries.com.