Tillside

Privacy Policy

Deutsch

Last updated 5 October 2026

Who we are

Tillside is made by Forge 9 Labs Ltd, a company registered in England and Wales (company number 17317315, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). This policy covers the Tillside app and tillside.co. It distinguishes your private shift records from usage information processed by our analytics and hosting providers.

What the Tillside app stores, and where

• Your shifts and jobs — the hours, wages, tips, tip-outs, sales, sections and notes you enter — are stored on your device, in Tillside’s own storage.
• iCloud. If iCloud is enabled on your device, that same information is mirrored to your personal iCloud account’s private database so records that have finished syncing can return on another device using the same Apple Account. Keep a separate CSV export for an independent copy. It is stored under your Apple Account, not ours. We have no access to it and no ability to read, copy, export or delete it.
• App settings — whether you have finished the introduction, whether you dismissed the Pro offer, and whether a subscription is currently active — are stored on your device.

These are the private record and app-preference stores. The analytics library also keeps local usage statistics, including session start times and durations, the first session date, session counts and days used, as well as locally cached usage signals awaiting transmission. Those statistics and signals are separate from your private shift records.

Limits on data use in the app

• No accounts, no sign-in, no email address collected. There is nothing to log into.
• No crash reporting, attribution or advertising software, and no third-party code other than the TelemetryDeck analytics library described below.
• No tracking across other companies’ apps or websites, no advertising identifier, and no advertising profiles. We do not sell your data. We cannot access or share your private shift records.
• No servers operated by us. Tillside makes no network connections other than to Apple’s own services described below and to TelemetryDeck.

Website visits and downloads

This website is hosted by Netlify. We use Netlify Web Analytics to understand page views, referring sites and visitor counts from hosting request logs. Netlify uses IP addresses to distinguish visitors within a day; these counts are not a count of identified people. This analytics service does not add browser tracking cookies or an analytics script. See how Netlify Web Analytics works and Netlify’s privacy statement.

The website earnings calculator runs in your browser. Its form does not send your amounts to us or save them. App Store links carry a shared website campaign label so Apple can report aggregate website-attributed downloads when its reporting threshold is met. The label is the same for visitors and contains no calculator inputs or personal identifier. Apple handles your visit to the App Store under its own privacy policy.

Anonymous usage analytics in the app

Tillside uses TelemetryDeck, a privacy-focused analytics service based in Germany, to understand how the app is used: which screens are opened, whether the first shift gets logged, which upgrade prompt led to a purchase. This is what tells us which parts of the app to improve.

• What is sent by the app: the name of an action (for example “paywall shown”) and a handful of one-word attributes: whether Pro is active, whether a subscription is in trial, paid, lapsed or never started, the country of your App Store account, whether the introduction was skipped, whether a saved shift was your first, which prompt opened the paywall, which plan was chosen and whether the purchase succeeded, whether an introductory or win-back offer applied, whether a restore succeeded, whether the shift reminder was switched on or off and from where, and where an export was started. Each is a single word.
• What the library adds to every signal: the app version and build, the device model, system version, orientation and processor type, your language, region and time zone, screen size, accessibility settings (Reduce Motion, Bold Text, Invert Colors, Darker System Colors, Reduce Transparency, Differentiate Without Color and preferred content size), whether the phone is in light or dark mode, calendar fields (the hour, weekday, day of month, day of year, week, month and quarter, and whether it is a weekend), session and retention counts (first session date, number of sessions, days used, session lengths), and whether the build is a debug, TestFlight or simulator build. TelemetryDeck’s own list is in its documentation.
• What is never sent: anything you entered — no money figure, no shift, its time or its date, no job name, no note — and not your name, your email, your Apple ID, or your advertising identifier. The attributes the app itself adds are held to single words by a test in the app’s code: a value with a digit or a space in it cannot be sent.
• Identity: the library uses the identifier Apple provides to apps from the same developer on your device (the “vendor identifier”), hashed before it leaves the phone. It is not linked to you or your Apple ID, cannot be joined to what you enter, and is not used for tracking across other companies’ apps or websites. It is not reset by Delete all data; deleting every Forge 9 Labs app from the device resets it.
• Your choice: Turning off “Share anonymous usage data” in Settings prevents new usage signals, including the library’s own session signals. Previously recorded usage signals may still be sent, including signals cached before you switched it off and reloaded when the app restarts. The setting is kept even if you use Delete all data.

Subscriptions

Tillside Pro is sold through Apple. Purchases, renewals, refunds and cancellations are handled entirely by Apple, and we never see your payment details. Apple tells the app only whether a subscription is currently active; it does not pass us your name, email address or card information. Apple’s handling of that transaction is governed by Apple’s privacy policy.

Exporting your data

Settings → Export produces a CSV file of your complete history, on your device. You choose where it goes using the standard iOS share sheet. It does not pass through us, and export is free and always available — including for information older than the free tier displays.

Deleting your data

Settings → Delete all data removes your shifts and jobs from your device. The app also attempts to remove them from your iCloud account. If iCloud cannot be reached, cloud records may remain and return after reinstalling. Local deletions may be transmitted to iCloud by later synchronization while the app remains installed. The usage-analytics setting and the library’s identifier, local usage statistics and locally cached usage signals are separate and are not cleared by that action. Deleting your shifts and jobs cannot be undone.

Deleting the app on its own removes what is on the device but leaves your iCloud records in place. Previously synchronized data may return after reinstalling. To remove all your shifts and jobs, first use Delete all data. Keep the app installed, reconnect to iCloud and allow time for synchronization before deleting the app. The app does not show a separate confirmation that deletion from iCloud has completed.

Children

Tillside is not directed at children. We do not receive users’ private shift records, including those entered by children.

Your rights

Under UK GDPR you have rights to access, correct, erase and port your personal data. Your private shift records are in your own hands: export or delete them at any time within the app. Because we have no access to those records, we cannot retrieve or delete them on your behalf.

If you have questions about information processed through our analytics or hosting providers, or believe we hold information about you, contact us and we will answer. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If Tillside ever changes what it stores, this page will be updated before that change ships, and the date at the top will change with it. Material changes will also be noted in the App Store release notes.

Contact

privacy@tillside.co