Privacy statement
Last updated: July 2026
TillMint is a point-of-sale app for market stalls, food trucks and pop-ups, operated from Aotearoa New Zealand. We handle personal information in line with the New Zealand Privacy Act 2020. This page explains, in plain language, what we collect, why, and the choices you have. If anything here is unclear, email hello@tillmint.nz.
Who we are
“TillMint”, “we” and “us” refer to the operator of TillMint. We are the agency responsible for the personal information described here. Our contact point for any privacy question or request is hello@tillmint.nz.
What we collect
- When you register interest: your name, email, the kind of business you run, and optionally your region.
- When you use the app with an account: your email address (we sign you in with a one-time code — we never ask for or store a password), and the business data you create — your stall details, products, prices, stock levels, sales records, and (if you use them) loyalty customers and “bags it” reservations.
- Feedback you send us from inside the app, so we can improve TillMint during early access.
- Payment information is handled by our payment provider, not by us. If you subscribe, Stripe processes your card; we receive only your subscription status and the last-known billing period — never your full card number.
- A little technical data needed to run the service securely. Our web server keeps standard access logs — the page requested, the time, the referring page, your browser and operating system, and the IP address our server sees — used for rate-limiting, abuse prevention, and counting visitors so we know whether anyone is finding us. Those logs are kept for 90 days and then deleted. We read them only as anonymised totals: the last part of every IP address is removed before it reaches our visitor statistics.
- A once-a-day count from the app. To know how many people actually use TillMint, the app tells our server, at most once per day, three things: a random device identifier (made up on your device and connected to nothing else), the date, and whether the device has signed in. That is the entire message — never your sales, your products, your name, or your location. It cannot slow the till, and if you are offline it simply doesn’t happen.
- No tracking scripts. We do not use analytics tags, advertising pixels, or tracking cookies, and nothing on our site loads code from a third party to watch you. Our visitor counts come from the server’s own logs, described above — which is why this site has no cookie banner to click.
Most of your business data lives first on your own device and works offline. When you sign in, it is backed up to our cloud database so you can restore it or sell from more than one device.
Your customers’ information
TillMint records sales as line items (what sold, for how much) — not your customers’ card or identity details. If a customer uses your public stall page to “bags” an item, they give a name and phone number so you can hold it for them; that sits with your stall’s data and is used only for that purpose. If you add a loyalty customer, the name and optional phone number you enter are stored with your stall. You are responsible for handling your customers’ information lawfully; we act as your processor for it.
How we use it
- To provide the app: storing and syncing your catalogue, sales and settings.
- To contact you about early access and, from time to time, ask for feedback.
- To provide AI product suggestions when you tap the ✨ button (see below).
- To process your subscription, if you have one.
- To keep the service secure and prevent abuse.
We do not sell your information, and we do not share it for anyone else’s marketing.
Who processes it for us
We use a small number of trusted providers to run TillMint. They process data on our instructions only:
- Supabase — our database, authentication and file storage (hosted in Sydney, Australia).
- DigitalOcean — hosting for our website and the registration form (Sydney region).
- Stripe — subscription billing and card processing, if you subscribe.
- Resend — sending your sign-in code and other transactional emails.
- Anthropic — the AI that suggests a product’s name, category and emoji from a photo or hint. Only the photo/text you submit for that product is sent; never your prices, sales, or customer details. It is used to answer your request and not to train models.
Some of these providers are outside New Zealand. Where information is processed overseas, we rely on providers that offer comparable privacy safeguards.
How long we keep it
We keep your account and business data for as long as your account is active. Registration details are kept while we run the early-access programme. You can ask us to delete your data at any time (see below); some records may be retained where we’re legally required to.
Your rights
Under the Privacy Act 2020 you can ask to see the personal information we hold about you and ask us to correct it. You can also ask us to delete your account and data, and you can export your own sales and product data from within the app at any time. To make a request, email hello@tillmint.nz and we’ll respond promptly.
Security
Connections are encrypted with HTTPS. Your data is protected by database access rules so each account can reach only its own information, and our servers are hardened and kept patched. No system is perfectly secure, but we take reasonable steps to protect your information and we’ll tell you if something goes wrong that affects you.
TillMint stores your business data on your device first so the till works offline, which means the device holds a copy that only you control — clearing your browser’s site data or losing the device takes it with them. Export your data regularly; you can do it from inside the app at any time. Our terms of service set out who is responsible for what, including backups and the limits on our liability.
Children
TillMint is a tool for businesses and isn’t directed at children.
Changes
If we change this statement we’ll update the date above and, for material changes, let registered vendors know by email.
Complaints
If you’re not satisfied with how we’ve handled your information, contact us first at hello@tillmint.nz. You also have the right to complain to the Office of the New Zealand Privacy Commissioner (privacy.org.nz).