Privacy statement
Last updated: October 2026
TillMint is a point-of-sale app for market stalls, food trucks and pop-ups, operated from Aotearoa New Zealand. We handle personal information in line with the New Zealand Privacy Act 2020. This page explains, in plain language, what we collect, why, and the choices you have. If anything here is unclear, email hello@tillmint.nz.
Who we are
“TillMint”, “we” and “us” refer to the operator of TillMint. We are the agency responsible for the personal information described here. Our contact point for any privacy question or request is hello@tillmint.nz.
What we collect
- When you register interest: your name, email, the kind of business you run, and optionally your region.
- When you use the app with an account: your email address (we sign you in with a one-time code — we never ask for or store a password), and the business data you create — your stall details, products, prices, stock levels, sales records, and (if you use them) loyalty customers and “bags it” reservations.
- Feedback you send us from inside the app, so we can improve TillMint during early access.
- Payment information is handled by our payment provider, not by us. If you subscribe, Stripe processes your card; we receive only your subscription status and the last-known billing period — never your full card number.
- A little technical data needed to run the service securely. Our web server keeps standard access logs — the page requested, the time, the referring page, your browser and operating system, and the IP address our server sees — used for rate-limiting, abuse prevention, and counting visitors so we know whether anyone is finding us. Those logs are kept for 90 days and then deleted. We read them only as anonymised totals: the last part of every IP address is removed before it reaches our visitor statistics.
- A once-a-day count from the app. To know how many people actually use TillMint, the app tells our server, at most once per day, three things: a random device identifier (made up on your device and connected to nothing else), the date, and whether the device has signed in. That is the entire message — never your sales, your products, your name, or your location. It cannot slow the till, and if you are offline it simply doesn’t happen.
- Questions you send us. If you use the website’s chat assistant or the Get in touch form, what you wrote is sent to us (the opening chat question as a notification, the form details to our database) so a human can follow up. Chat questions are answered by an AI model and are not linked to your name unless you include it.
- No tracking scripts. We do not use analytics tags, advertising pixels, or tracking cookies, and nothing on our site loads code from a third party to watch you. Our visitor counts come from the server’s own logs, described above — which is why this site has no cookie banner to click.
- A daily count of tills. Once a day, each till sends us a random device number, the date, and whether someone is signed in on it. Nothing else: no name, no location, no sales. It is how we know how many tills are in use.
Most of your business data lives first on your own device and works offline. On the free plan it stays there: if you sign in, only your stall’s name and product list (including prices and stock) are sent to our cloud database, so your public stall page can show them. Your sales, customers and staff are not sent. On a paid plan, everything is backed up to our cloud database so you can restore it or sell from more than one device, including what you recorded before you upgraded.
Your customers’ information
TillMint records sales as line items (what sold, for how much) — not your customers’ card or identity details. If a customer uses your public stall page to “bags” an item, they give a name and phone number so you can hold it for them; that sits with your stall’s data and is used only for that purpose. If you add a loyalty customer, the name and optional phone number you enter are stored with your stall. You are responsible for handling your customers’ information lawfully; we act as your processor for it.
How we use it
- To provide the app: storing your stall page’s catalogue and, on a paid plan, backing up and syncing your sales and settings.
- To contact you about early access and, from time to time, ask for feedback.
- To provide AI product suggestions when you tap the ✨ button (see below).
- To process your subscription, if you have one.
- To keep the service secure and prevent abuse.
We do not sell your information, and we do not share it for anyone else’s marketing.
Who processes it for us
We use a small number of trusted providers to run TillMint. They process data on our instructions only:
- Supabase — our database, authentication and file storage (hosted in Sydney, Australia).
- DigitalOcean — hosting for our website and the registration form (Sydney region).
- Stripe — subscription billing and card processing, if you subscribe.
- Resend — sending your sign-in code and other transactional emails.
- ntfy.sh — delivers a notification to our phone when someone sends an enquiry or asks the chat assistant a question, containing what they wrote (and, for an enquiry, their name and email).
- Anthropic — the AI that suggests a product’s name, category and emoji from a photo or hint. Only the photo/text you submit for that product is sent; never your prices, sales, or customer details. It is used to answer your request and not to train models.
Some of these providers are outside New Zealand. Where information is processed overseas, we rely on providers that offer comparable privacy safeguards.
How long we keep it
We keep your account and business data for as long as your account is active. Registration details are kept while we run the early-access programme. You can delete your account and everything of yours in our cloud at any time, from inside the app (see below); some records may be retained where we’re legally required to.
We take an encrypted backup of our database every night and keep each one for 30 days, so that a fault at our provider can’t lose your data. When you delete your account, its copies in those backups are gone within 30 days, as the older backups expire.
Your rights
Under the Privacy Act 2020 you can ask to see the personal information we hold about you and ask us to correct it. You can export your own sales and product data from within the app at any time, and delete your account and all its cloud data yourself, under Settings → Account & sync → Delete account. For anything else, email hello@tillmint.nz: we respond within 20 working days, as the Act requires, and usually much sooner.
Our privacy officer is TillMint’s founder, who handles every privacy request and complaint personally at hello@tillmint.nz.
Security
Connections are encrypted with HTTPS. Your data is protected by database access rules so each account can reach only its own information, and our servers are hardened and kept patched. No system is perfectly secure, but we take reasonable steps to protect your information.
If something goes wrong. If we learn of a privacy breach, we contain it first, then work out whose information was involved and how. If it has caused, or is likely to cause, serious harm, we notify the Privacy Commissioner and tell the people affected as soon as we practicably can, as the Privacy Act requires, including what happened, what we have done, and what they can do. Where a breach involves your customers’ details (such as loyalty phone numbers), we tell you, so you can tell them.
TillMint stores your business data on your device first so the till works offline, which means the device holds a copy that only you control — clearing your browser’s site data or losing the device takes it with them. Export your data regularly; you can do it from inside the app at any time. Our terms of service set out who is responsible for what, including backups and the limits on our liability.
Children
TillMint is a tool for businesses and isn’t directed at children.
Changes
If we change this statement we’ll update the date above and, for material changes, let registered vendors know by email.
Complaints
If you’re not satisfied with how we’ve handled your information, contact us first at hello@tillmint.nz. You also have the right to complain to the Office of the New Zealand Privacy Commissioner (privacy.org.nz).