Privacy policy

01Information We Collect

The information we collect depends on which app you use and how you use it. In general, we may collect:

Account information — When you create an account, we collect your email address and, optionally, your name. Some apps allow guest or anonymous use without an account.

App content you create — This is the data you actively enter into our apps, such as recipes in Kin, delivery stops in Dropstr, pet records in Pet Services, workout logs, or financial entries. This data is yours. We store it so it's available across your devices and preserved safely.

Device and technical information — To provide and improve our apps, we may collect basic technical data including:

• Device type, operating system, and app version
• Crash reports and error logs (used only to fix bugs)
• Anonymised usage patterns (e.g. which features are used most often)

Dropstr is the exception: it does not collect crash reports or usage analytics. For security it keeps the type of device you signed in from, and the IP address of sign-in attempts and of changes made in a workspace.

Location data (Dropstr only) — While a driver has a run open, Dropstr uses the phone's location, including while the phone is locked or another app is in front, to record where each delivery was made and to total the miles driven on that run. If the workspace's plan includes live view, the driver's most recent position is also sent to the office about once a minute; only the latest position is kept (it replaces the previous one, never a trail), and it is cleared when the run ends. The location of each delivery and the mileage total are kept with the run's history. Location is not used when no run is open. We do not use location for advertising, and we do not share it with anyone outside the workspace and the service providers that run Dropstr.

Customer information (Dropstr only) — The names, addresses, phone numbers, emails and notes that a business enters about its own customers belong to that business. They are kept until the business deletes its workspace. Customers can be archived to hide them; archiving does not erase them. Address text (without names) is sent to our geocoding provider to place it on the map.

02How We Use Your Information

We use the information we collect for the following purposes only:

• To provide and maintain the core features of our apps
• To sync your data across devices when you are signed in
• To send you important account notices (e.g. password resets, policy updates)
• To diagnose and fix technical problems using crash reports
• To understand which features are working well and which need improvement
• To respond to your support requests or enquiries

03Data Storage & Security

Your data is stored securely using industry-standard cloud infrastructure. Data is encrypted both in transit (using TLS) and at rest. We use reputable third-party services (see Section 4) that comply with international data protection standards.

Some app data may also be stored locally on your device for offline access. This local data is subject to your device's own security settings (e.g. screen lock, encryption).

While we take security seriously and apply best practices, no system is completely impenetrable. If we ever become aware of a breach affecting your data, we will notify you promptly via the email address associated with your account.

04Third-Party Services

To operate our apps, we use a small number of trusted third-party services. These services may process some of your data as part of providing their service to us:

• Google Firebase — Used for secure data storage, user authentication, and crash reporting. Governed by Google's Privacy Policy.
• Apple App Store / Google Play — Handles app distribution and, where applicable, in-app purchases. Subject to Apple's and Google's respective privacy policies.
• Firebase Crashlytics — Collects anonymised crash reports to help us fix bugs. No personally identifiable information is included in crash reports.

The two Firebase services above are used by some of our other apps. Dropstr does not use them. Dropstr uses these service providers instead, each only to run the service:

• Cloudflare — Hosts Dropstr and stores its data.
• Stripe — Processes subscription payments. Stripe collects card details on its own pages; we keep only Stripe's customer and subscription IDs. Stripe keeps its own payment records as the law requires.
• Resend — Sends Dropstr's emails (welcome and account notices, and invoices a business sends to its customers).
• Geocodio — Turns delivery address text into map positions.
• Apple Maps (MapKit) — Draws the maps in Dropstr.

We do not share your personal data with any other third parties, advertisers, or data brokers.

05Sensitive Data

Some of our apps handle data that is inherently more sensitive in nature. We treat this data with extra care:

Health and fitness data — Our Fitness app may store workout, activity, or health-related information you enter. This data is stored privately and associated only with your account. We do not share health data with third parties. If the app integrates with Apple HealthKit or Google Health Connect, that integration is governed by your device's permissions and Apple's/Google's own health data policies.

Financial data — Our Finance app stores account balances and transaction information that you enter manually. We do not connect to your bank accounts, do not store banking credentials, and do not share your financial data with any third party.

Client and pet records — Our Pet Services app stores information about your business clients and their pets. This data is accessible only to you through your account. We treat client records as private business data and do not share or process it beyond what is needed to operate the app.

Location data — Dropstr uses location only while a run is open, as described in Section 1: the position of each delivery and the miles driven are kept with the run, and the driver's latest position (Dispatch plans) is kept only until the run ends. It is not shared outside the workspace. You can revoke location permissions at any time through your device settings.

06Your Rights & Choices

You are in control of your data. Depending on your location, you may have various rights under applicable law (including GDPR and CCPA). Regardless of where you are, we honour the following:

• Access — You can view all data stored in your account directly within the app.
• Correction — You can edit or update your information at any time within the app.
• Deletion — You can delete your account and all associated data from within the app settings, or by emailing us at hello@tiggr.app. We will process deletion requests within 30 days.
  Dropstr: in the app go to Settings, then Account (or see dropstr.app/delete-account). A driver or office user is removed immediately. When an owner deletes their account, the workspace is locked and billing stops renewing straight away, and everything in it is erased 14 days later unless the owner signs in and restores it. Payment records held by Stripe are kept as the law requires. Our database backups can keep deleted data for up to 30 more days before they expire.
• Opt out of analytics — You can opt out of anonymised usage analytics through the app's settings where available.
• Location permissions — You can revoke location access at any time through your device's system settings.

To exercise any of these rights, contact us at hello@tiggr.app.

07Children's Privacy

Our apps are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@tiggr.app and we will promptly delete that information.

For users between 13 and 18 years of age, we encourage parental guidance when using our apps.

08Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page and, where the changes are significant, notify you via email or an in-app notice.

We encourage you to review this page occasionally to stay informed. Continued use of our apps after a policy update constitutes your acceptance of the revised policy.

09Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out. We're a small team and we read every message.