Privacy Policy

Tucked helps families keep track of the things that land on them - school newsletters, bills, appointment texts, group chat messages - by organising them into events, action items, news and supplier records. This page explains what information we collect to do that, who we share it with, and how you can have it deleted.

Who we are

Tucked Limited operates tucked and is the data controller for the personal information described in this policy. We are a company registered in Scotland, number SC904202, with our registered office at 43 St. Alban's Road, Edinburgh, EH9 2LT, and registered with the Information Commissioner's Office under number ZC261183. If you have any questions, contact us at privacy@wearetucked.com.

What we collect and why

• Account information - if you sign in with Google or Microsoft, we receive your email address, name and profile picture from them (we never receive your Google or Microsoft password). If you sign in with an email link instead, we only ever have your email address. We use this to create your account, identify you when you sign in, and personalise the service.
• Calendar connection details - if you connect a calendar, we store what's needed to keep it in sync. For Google and Outlook that's an access token they issue us, never your password. Apple doesn't offer that, so an Apple calendar uses an app-specific password you generate in your Apple ID settings - it grants access to your calendar only, never the rest of your Apple account, and we encrypt it before storing it. Disconnecting a calendar in Family settings deletes what we hold for it.
• Family members - first names and a colour for each person in your family. We use this so events and reminders can be assigned to the right people.
• Whatever you send us - photos, PDFs, forwarded emails, pasted text or links - and the events, action items, news items and supplier details we extract from them. This is the core of the service: without it, there's nothing to organise.
• Learned preferences - small facts we pick up from corrections you make, so future extractions get better for your family specifically. These are used only for your family's account and aren't shared with other users.

Children in your family

A child added to your family has no account of their own - no email, no password, nothing they log in with directly. A parent pairs a child's device using a short-lived code, and after that the device is recognised by a session on that device only. We store nothing about a child beyond their first name and a colour, plus whatever shared family items (like a school event) they're assigned to.

Why we're allowed to process your information

We process most of your information because it's necessary to provide tucked to you. Where required, we'll ask for your consent - for example, before connecting a calendar. We may also process information where we're required to comply with the law.

Who we share it with

• Anthropic - processes the photos, documents and text you send us so we can extract events, action items, news and supplier information using AI. Nothing from a calendar you connect is ever sent to Anthropic.
• Resend - sends your sign-in links and digest emails, and receives anything you forward to your tuckit@ address.
• Stripe - if you upgrade to a paid plan, your payment details go directly to Stripe and never touch our servers. We only ever see that a subscription exists, not your card details.
• Cloudmersive - scans every file you upload or forward for malware before we open it.
• Google, Microsoft or Apple - only for a calendar you choose to connect, to sync events between tucked and that calendar. Nothing is sent to a provider you haven't connected.

We don't sell your data, and we don't use any advertising or analytics trackers. Some of the providers above (for example, Anthropic) may process information outside the UK. Where that happens, we make sure appropriate legal safeguards are in place.

If you connect a Google Calendar

Connecting a Google Calendar gives tucked permission to see, add, change and delete events on the calendar you connect. It's the only access to your Google account we ask for, and this is everything we do with it:

• What we read - the events on that calendar, so your family's plans sit alongside everything else in tucked.
• What we write - events you confirm in tucked, so they appear in your Google Calendar, and any changes you later make to them in tucked, including deleting them.
• Who sees it - you, and the people in your family on tucked. Those events can also appear in your family's weekly digest email, which Resend delivers for us.
• What we never do - send your calendar to Anthropic or any other AI service, use it to train AI models, sell it, or use it for advertising. Nobody at tucked reads your events unless you ask us to, for security, or because the law requires it.
• Removing access - disconnecting the calendar in Family settings deletes our access and every event we copied from it. Events we added to your Google Calendar stay there until you delete them. You can also remove our access from your Google Account.

Tucked's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping your information secure

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss or misuse.

Where it's stored

Your data is stored with Supabase in London, United Kingdom.

Your rights

Depending on where you live, you may have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Object to certain processing.
• Request a copy of your data.

Contact privacy@wearetucked.com if you'd like to exercise any of these rights.

Deleting your account

You can permanently delete your account at any time from within the app. When you do, we permanently delete your family's events, action items, news items, supplier records and uploaded documents, except where we're required by law to keep information for longer. We keep your information for as long as your account exists. If you'd rather just stop receiving digest emails, there's a one-click unsubscribe link in every digest instead.

Cookies

We only use essential cookies that are needed to keep you signed in and make the service work properly.

Questions

If you have any questions about this policy or your data, email privacy@wearetucked.com.

If you're unhappy with how we've handled your personal information, you also have the right to complain to the UK's Information Commissioner's Office (ICO).