Privacy Policy

The short version

1. Who we are

This Privacy Policy explains how TidepoolFM Inc., a Delaware corporation (in formation) ("Tidepool," "we," "us"), collects, uses and shares personal information when you use tidepool.fm, our apps and related services (the "Services"). Tidepool is the controller of the personal information described here, except where we say otherwise (Section 5.2). Contact us at privacy@tidepool.fm or HaMazgher 1, Ra'anana, Israel.

Capitalized words such as Supporter, Creator, Ripple and Brought-in Supporter have the meanings given in our Terms of Service (tidepool.fm/terms).

2. Information we collect

In shortMostly what you give us directly, plus records of what you do on Tidepool, plus limited data from Stripe and from your device.

2.1 Information you give us

2.2 Information created when you use Tidepool

• Support records: your Monthly Amount, Direct Support, currency, payment status, billing dates and Stripe reference numbers.
• Ripples: which Creator or piece you Rippled, the date and time, and where you Rippled from (for example, a share link or the app).
• Split and payout records: how each month's contributions were allocated and paid.
• Attribution records: which Creator's Ripple Link a Supporter first joined through, and which Creator invited a Creator to apply.
• Sign-in records: one-time sign-in links and their expiry.

2.3 Information from your device

• Technical data: IP address, browser and device type, pages requested and error logs, collected by our hosting provider when you visit.
• App and Wallet data: if you enable notifications or add a Tidepool pass to Apple Wallet, a push token and device identifier so we can deliver them.
• Cookies and similar tools: see Section 9.

2.4 Information from others

• Stripe tells us whether a payment succeeded, the card brand and last four digits, and billing country. For Creators, Stripe tells us verification and payout status.
• Creators may give us the name and public link of other creators they suggest.
• Public sources: to invite creators to Tidepool and to create pages for creators who have not yet joined, we collect publicly available information such as a creator's public name, show name, public social profiles and published business contact details. See Section 4.

3. How we use information, and our legal bases

In shortTo run Tidepool, move money correctly, keep it fair and safe, talk to you, and follow the law.

Where the EU or UK GDPR or a similar law applies, we rely on the legal bases shown below.

We do not use your personal information for automated decisions that produce legal or similarly significant effects on you. The Split is calculated automatically from your own Ripples under a published formula. If you think your Split or payout is wrong, contact us and a person will review it.

4. If we contacted you about joining Tidepool

In shortIf you are a creator and we reached out, here is where your details came from and how to make us stop.

We research creators who might want to join Tidepool, especially within communities we are launching (Currents). We collect only professional information that you have made public, such as your name, show or channel, public social profiles, and a published business email or contact form, and sometimes a warm introduction from someone who knows you. We use it to contact you about Tidepool, and we keep notes on our conversations with you.

If you would like us to stop, reply to any message or email privacy@tidepool.fm. We will delete your details, keeping only a minimal record that you asked not to be contacted, so we can honor that request.

We may also show a page for a creator who has not yet joined Tidepool, built only from public information, so that Supporters can show interest. You can claim the page after verification, or ask us to remove it, at any time.

5. How we share information

In shortWith the service providers that run Tidepool, with Creators in limited ways, and when the law requires. Never sold.

5.1 Public information

Creator profiles, including name, handle, images, tagline, links and published pieces, are public. to be confirmed before launch. Your Ripples, amounts and support history are not public.

5.2 Creators

Creators see aggregated information about their support, such as total Ripples and earnings. to be confirmed before launch the names of individual Supporters who Rippled them. If you message a Creator, they see your message and profile name. If you join a Creator's list, we share your name and email address with that Creator, who then uses it under their own responsibility and privacy practices. You can leave a Creator's list in your account at any time, and we will tell the Creator to stop using your details.

5.3 Service providers

We use service providers that process personal information on our behalf, under contracts that limit their use of it to providing services to us:

5.4 Other sharing

• Inviting Creators see the names and handles of creators who applied through their invite link.
• Legal and safety: when required by law, subpoena or court order, or when needed to protect the rights, property or safety of Tidepool, our users or others, including fraud prevention.
• Business transfers: if Tidepool is involved in a merger, acquisition, financing or sale of assets, information may transfer to the new owner, who must honor this Policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. International transfers

Tidepool is a US company with its team in Israel. Our main database is hosted in the European Union, and some providers process data in the United States. When we transfer personal information from the EU, UK, Switzerland or Israel to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-US Data Privacy Framework. You can request a copy of these safeguards at privacy@tidepool.fm.

7. How long we keep information

We may keep information longer where the law requires it or to resolve disputes, and we may keep de-identified data that can no longer identify you.

8. Security

We use encryption in transit, row-level access controls on our database, restricted administrator access with an audit log, and payment processing through Stripe so that we never handle full card numbers. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

9. Cookies and similar technologies

We use cookies and local storage that are strictly necessary to keep you signed in and to run the Services. We do not use analytics cookies. We do not use advertising cookies or cross-site trackers. If we ever add optional cookies, we will ask for your consent first where the law requires it. We honor Global Privacy Control signals as a request to opt out of any sale or sharing, even though we do neither.

10. Your rights and choices

In shortWherever you live, you can ask to see, fix, download or delete your data. We answer within 30 days.

We extend the following rights to every user, wherever you live:

• Access a copy of your personal information, and receive it in a portable format.
• Correct inaccurate information.
• Delete your information, subject to records we must keep by law (Section 7).
• Withdraw consent, for example to leave a Creator's list or turn off notifications, without affecting earlier processing.
• Object to processing based on legitimate interests, including outreach.
• Opt out of marketing emails using the unsubscribe link.

To make a request, email privacy@tidepool.fm from the address on your account. We may need to verify your identity. We respond within 30 days (or sooner where the law requires) and do not charge for reasonable requests. You may use an authorized agent where your law allows it.

10.1 EU, UK and Swiss residents

You also have the right to restrict processing and to lodge a complaint with your local data protection authority. If we are required to appoint an EU or UK representative, their details will appear here..

10.2 Israeli residents

You have the right to review and request correction of your information under the Israeli Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since August 14, 2025), and to complain to the Privacy Protection Authority. If we are required to appoint a Privacy Protection Officer, their details will appear here..

10.3 US state residents

Residents of California, Colorado, Connecticut, Virginia and other states with consumer privacy laws have the rights listed above. If we deny your request, you may appeal by replying to our decision, and if the appeal is denied, you may contact your state attorney general. We will not discriminate against you for exercising your rights. In the last 12 months we have collected the categories of information listed in Section 2, from the sources listed there, for the purposes in Section 3, and disclosed them to the categories of recipients in Section 5. We have not sold or shared personal information for cross-context behavioral advertising.

11. Children

Tidepool is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect any personal information from children under 13. If you believe a child has given us information, contact privacy@tidepool.fm and we will delete it.

12. Changes to this Policy

We will post any changes here and update the "Last updated" date. If a change is material, we will notify you by email or in the Services before it takes effect.

13. Contact