Privacy policy

Last updated: 7/10/2026

1. Controller

Tidex / Hjalmar Karlsen

Contact: contact@tidex.no

2. Data we collect

We collect the following personal data when you use the service:

  • Account information: Full name, display name, email address or phone number, optional profile photo, and hashed password data if you use password login.
  • Shift data: Working hours, breaks, salary settings and related information you register.
  • Friends messaging data: Messages, reply references, image attachments, abuse reports, block actions, thread metadata, and read/mute state when you use Friends messaging.
  • Authentication data: Session tokens and authentication state needed to keep you signed in, including login provider information when you use Sign in with Apple or Google Sign-In.
  • Payment data: Handled by Apple for iOS in-app purchases. We do not store card information.
  • AI assistant data: When you use the Wagey AI assistant, the messages you send (including text and images), your display name, and shift data retrieved during the conversation are processed by a third-party AI service (see section 5).
  • Notification metadata: If you enable push notifications, notification payloads may include sender identity, limited message preview text, screenshot alerts, and thread identifiers so the app can show and open the correct conversation.

3. How we use the data

Your data is used to:

Important: All salary calculations happen on the server or your device. We only store raw shift data — no final salary results are saved.

  • Provide shift tracking and salary calculations.
  • Provide Friends messaging, image attachments, screenshot alerts, abuse reports, safety tooling, and user blocking.
  • Authenticate and manage your account.
  • Support optional sign-in with Apple and Google.
  • Process subscription payments via Apple (iOS app).
  • Deliver push notifications and related in-app alerts if you enable them.
  • Communicate with you about the service.
  • Provide AI-powered assistance through the Wagey feature, including answering questions about your shifts, helping manage shifts, and calculating wages. This requires sending relevant data to a third-party AI service (see section 5).
  • Review abuse reports, enforce our rules, and protect users and the service from abuse.

4. Storage and processing

  • Storage: Core account, app, and file data is stored with Supabase (PostgreSQL and Storage).
  • On-device storage: The iOS app stores session tokens in the iOS Keychain and may cache app data locally on your device to support sign-in and app performance.
  • Retention: Data is kept for as long as you maintain an active account. We do not guarantee long-term archival.
  • Deletion: If you delete your account, we delete your account data from our active systems as part of the deletion process.
  • Safety review: If content is reported or linked to abusive behaviour, authorised reviewers may inspect relevant messages, attachments, account metadata, and report records to investigate and enforce our rules.

5. Third-party services

We rely on the following third parties that process personal data:

  • Supabase: Database, authentication, realtime features, and file storage. Read their privacy policy.
  • Apple: In-App Purchase and payment processing for iOS purchases, Sign in with Apple, and Apple Push Notification service for push delivery. Read their privacy policy.
  • Google: Optional Google Sign-In. Read their privacy policy.
  • OpenAI: The Wagey AI assistant is powered by GPT-5.6 Luna from OpenAI. When you use Wagey, the messages you type, any images you attach, your display name, and shift data retrieved during the conversation (such as working hours, breaks, and wage settings) may be sent to OpenAI for processing. In this context, Tidex is the controller of that personal data and OpenAI acts as a processor on Tidex's behalf. When needed, Wagey may also use OpenAI's web search tools to retrieve relevant public web information. This data is sent only when you actively use the Wagey feature and have given your explicit consent. OpenAI's current commercial documentation says API inputs and outputs are not used to train OpenAI models unless the customer opts in to model improvement. OpenAI's privacy policy can provide additional information about OpenAI's own processing and products, but Tidex's privacy policy governs how Tidex handles your personal data in Wagey.

Data is only shared with Google if you choose Google Sign-In, with Apple when you use Apple sign-in, purchases, or push notifications, and with OpenAI when you actively use the Wagey AI assistant and have given your explicit consent. No data is shared with third parties beyond those listed above.

6. Your rights

Under GDPR you have the right to:

  • Access the data we store about you.
  • Correct inaccurate information.
  • Delete your data (account deletion).
  • Receive your data in a machine-readable format (data portability).
  • Withdraw consent to processing.

Contact us at contact@tidex.no to exercise your rights.

7. Security

We use industry-standard security measures including hashed passwords, HTTPS encryption, secure authentication through Supabase, and iOS Keychain storage for session tokens on your device.

8. Changes to this policy

We may update this notice. Significant changes will be announced via email or inside the service.

9. Contact

Questions about privacy can be sent to contact@tidex.no.