Security

Security is central to how TipPal is built. This page explains plainly how your payments are processed, how your balance is held, how we protect your information, and what role identity verification plays.

Stripe payment processing

TipPal does not move money by itself. Payments are processed by Stripe, Inc., a registered payment processor used by thousands of companies worldwide. TipPal operates as a Payment Facilitator: your charges are processed through Stripe under TipPal's processing credentials, not under an individual bank account of your own. This means your card data is handled by Stripe's audited, PCI-compliant infrastructure, not stored by TipPal directly.

For more detail, see Stripe's own security documentation and our Terms of Service.

Custody model: credit balance, not a bank deposit

The balance you see in the TipPal app is an accounting record of credit — a pending settlement in your favor — not a bank deposit, a securities account, or an insured financial product.

• Funds corresponding to your balance are processed and held through Stripe under TipPal's processing credentials until applicable verification requirements are completed.
• TipPal maintains sufficient operating reserves to support the availability of funds corresponding to authorized withdrawals.
• TipPal does not pay interest on balances held on the platform.
• Internal transfers between TipPal users are accounting adjustments, not new external financial transactions.

Encryption

TipPal uses industry-standard encryption to protect data in transit (between your device and our servers) and at rest. Authentication tokens, identityverification documents, and payment references are handled using Stripe's and our infrastructure providers' security controls. While no system is completely secure, we follow recognized technical and organizational measures to safeguard your information.

Identity verification (KYC) for withdrawals

Before you can withdraw (cash out) your balance to an external bank account or card, TipPal must complete identity verification (KYC). This is required by U.S. anti-money laundering laws, including the Bank Secrecy Act (31 U.S.C. § 5311 et seq.) and its implementing regulations (31 C.F.R. Chapter X).

TipPal may withhold, delay, suspend, or reject withdrawal requests while KYC is incomplete or during compliance reviews. KYC generally is not required for internal transfers between TipPal users unless one party withdraws to an external bank account or card.

For details on what data we collect for verification and how long it is retained, see our Privacy Policy.

Not a bank disclaimer

TipPal is not a bank. TipPal is not an independently authorized money transmitter and does not offer FDIC-insured deposit accounts. Funds held on the platform are not bank deposits and are not insured by the FDIC or any government agency. TipPal is a technology platform that facilitates payment processing between users through our payment processor, Stripe, Inc.

This structure means the protections that apply to bank accounts (such as FDIC deposit insurance) do not apply to the balance shown in your TipPal app. See our Terms of Service and Privacy Policy for the full legal description of the Service.

Reporting a security concern

If you believe you have found a security vulnerability or you suspect fraudulent activity on your account, contact us immediately at info@tippalcorp.com. For general support, email support@tippalcorp.com.