tiptop home

Privacy policy

Last updated October 12, 2026

tiptop is a Mac app that changes how you look on video calls. To make your filter it needs pictures of you, so this page says plainly what it collects, where that goes, how long it's kept and how to delete it. "tiptop", "we" and "us" mean 18301514 Canada Limited.

The short version

What we collect

Your invite code. There's no name, email or password. Entering an invite code creates an account number and a sign-in key, which is kept on your Mac and sent with each request so our servers know it's you.

Clips from your calls, if you allow it. When you first open the app it asks whether it can save clips from your calls ("Allow" or "Camera only"). You can change this in Settings. If it's on, while a call app is using the tiptop camera, your Mac records the camera, without sound. It keeps a few seconds here and there, deletes the rest, and uploads only what it keeps. Anyone else in view of your camera may appear in them.

Recordings you make in the app. When you record yourself following the app's spoken instructions, the whole recording (up to 10 minutes, no sound) is uploaded so your filter can learn from it.

Photos and words for a look. When you describe a look, the app takes a few photos of your head from the camera (facing forward and turned to each side) and sends them, with what you typed, to make the "Variation" pictures. The photos and a log of your messages are also kept on your Mac. When you choose "Create filter", the picture you picked and a short description of the change are uploaded.

Details that go with the clips. For each clip: the position, size, angle and brightness of your face in each frame (not a map of your facial features), the name of your camera, times, a blurred picture of the room, and a code describing the room so clips from different places can be told apart.

Your filters. The filters made for you are taught from your clips and photos, so they're specific to your face. They're stored on our servers and downloaded to your Mac.

Service records. Our servers see your IP address (also used to limit sign-in attempts) and the app's version. For each image or text request we keep which account made it, which service handled it, whether it worked and what it cost.

Usage records. To see how tiptop is used, for each day the app reaches our servers we keep your account number, how many requests it made, roughly how long the app was open, the IP address and country it connected from (the country comes from Cloudflare), and the app's version. When the app checks for an update, or someone downloads it from our website, we note the IP address, the country and the name of the app or browser that asked, without any account.

What stays on your Mac. How long you've spent on calls in each place, light and angle (for the past 28 days), your settings, and the live picture from your camera while you're on a call.

tiptop never uses your microphone.

How we use it

Only to run tiptop for you: to make the pictures you ask for, to make and update your filters, to tell you when you have enough clips, and to keep the service working, secure and within budget. Your clips and photos are used to make your own filters. We don't use them for advertising, and we don't sell or rent them to anyone.

Who else handles it

We use these services to run tiptop. Each one only gets what it needs for its part.

OpenRouter, ByteDance, Google and Anthropic handle this data under their own privacy terms and may keep it for a limited time. We don't control how long they keep it. The app also contacts Hugging Face once to download a part it needs. That doesn't involve your data.

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of tiptop. If tiptop is sold, this policy would keep applying to your data.

These services may store and process data in the United States and other countries.

How long we keep it

Deleting your data

Delete my clips in Settings deletes your clips, recordings and the details that go with them, both on your Mac and on our servers.

It doesn't delete your look pictures, the descriptions of your looks, your filters or your account. To delete those too, or everything at once, email [contact email] and we may ask you to confirm the account is yours. We'll confirm when it's done, within 30 days. You can also ask us for a copy of your data, or ask us to correct it, the same way.

Depending on where you live (for example in Canada, the EU, the UK or California), you may have further rights over your data, including the right to complain to a data protection authority such as the Office of the Privacy Commissioner of Canada. Write to us and we'll help.

Keeping it safe

Everything between the app and our servers is encrypted in transit. Your sign-in key is stored on your Mac where only your user account can read it. Updates to the app are signed, and the app checks the signature before installing them. No system is perfectly secure, though, and we can't promise yours will never be exposed.

Children

tiptop is for people 18 and over. We don't knowingly collect data from anyone younger. If you think someone under 18 is using it, tell us and we'll delete their data.

Changes

If we change what we collect or who we share it with, we'll update this page and its date. If a change is significant, we'll also tell you in the app.

Contact

18301514 Canada Limited, [postal address]. Email [contact email].