Privacy

This notice covers the tillspark.com website and the Tillspark app for shoppers. If you run a shop on Tillspark Business, or work at one, read the privacy notice for businesses.

Who we are

Earvin Ryan Esajas runs Tillspark from the Netherlands and decides how the personal data in this notice is used.

For anything about your data, write to privacy@tillspark.com.

On this website

When you fill in a form. The early-access and contact forms ask for your name, email address and business name, plus an optional message. The notify list asks for your name and email address. With the form we store the page you sent it from and your browser’s name and version. We use this to reply to you and, for the notify list, to tell you once when the app is released.

To stop abuse. Our server uses your IP address to limit how many messages one connection can send in a few minutes.

When you browse. The site sets no analytics or advertising cookies, and loads no third-party trackers or fonts. It stores one item in your browser’s local storage, tillspark-theme, which remembers whether you chose the light or dark appearance. It never leaves your device. Our hosting provider keeps standard request logs, which include IP addresses, to run and protect the site.

In the Tillspark app

• Receipts you scan, the labels and notes you add to them, and your loyalty points and rewards. Notes and labels stay on your device unless you print or share a receipt.
• Your account, if you create one: your email address and, for orders and bookings, your name, phone number and any delivery address you save.
• Your device’s push token, so we can send you order, booking and receipt notifications.
• How often you use the app. To understand and improve Tillspark, we record on which days you open the app, save a receipt or view a business’s page, and how many times. We don’t record the time of day, where you are, or what you do on a page.
• Reviews you post on a business’s page, shown there with your display name.
• Crash and error reports, so we can fix bugs.
• Your location is used on your device to show shops near you. It is not sent to us.

You can scan and keep receipts without an account. Ordering, booking, gift cards and backing up your receipts need one.

What a shop sees. A shop sees what you bought from it. When you order or book with a shop, it also sees the name, phone number and email address you gave for that order, so it can fulfil it. Marketing from a shop reaches you only if you have agreed to it. If an order is not collected, or is placed fraudulently, the shop can receive the facts of that order, including when and from which network it was placed, to recover its costs where the law allows.

Payments. Card payments in the app are handled by our payment provider, Stripe. We do not receive or store your card number.

Why we use it, and on what basis

• To provide the service you asked for (contract): storing and showing your receipts, syncing them across your devices, orders, bookings and loyalty.
• To keep the service safe (legitimate interests): preventing fraud and abuse, and measuring how the app is used, as described above.
• With your consent: marketing messages from us or from a shop.

How long we keep it

• Receipts and your account: until you delete them or close your account. Deleting your account also deletes your usage record and your device’s push tokens.
• Website messages: while we are in contact with you and for a reasonable period afterwards. Notify list entries are deleted once the release message has been sent, unless you asked to hear more from us.

Who else processes it

We do not sell personal data, and we do not share it for anyone else’s marketing. These companies process data on our behalf:

• Vercel: hosts this website.
• Supabase: database, sign-in and server functions for the website forms and the app.
• Expo and Google Firebase: app updates and push notifications.
• Stripe: card payments.

Some of these providers may process data outside the European Economic Area. Where they do, they use safeguards such as the European Commission’s Standard Contractual Clauses.

Your rights

You can ask for a copy of your data, and ask us to correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to processing based on legitimate interests, and withdraw consent at any time. In the app, Account lets you export your data and delete your account yourself. For anything else, write to privacy@tillspark.com.

If you are unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the country where you live.

Changes

When this notice changes, we update the date at the top of this page.