Privacy Policy

Who we are

Tucked (“Tucked”, “we”, “us”) is a personal budgeting app operated from Canada and available at tucked.ca. For any privacy question or request, email hello@tucked.ca.

Two ways to store your data

• Tucked Account (the website, and the iPhone app if you choose it): your data is stored in our cloud database so you can use it on any device. Everything in this policy applies.
• On This iPhone (iPhone app, coming soon): your data is stored only on your device, and in your own iCloud if you turn on sync. We never receive it, so we can't see, use or share it.

What we collect with a Tucked Account

• Account details: your email address and a securely hashed password, plus the country you choose (used for your currency) and, if you add them, a username and profile photo.
• What you log: the expenses, income and savings you enter, with their amounts, dates, categories and notes, receipt photos you attach, and your budgets, goals and income sources.
• App settings and progress: things like your Home layout, check-in streaks, points and badges.
• Basic activity: when you signed up, when you last signed in, and a “last seen” time while you're using Tucked.

Tucked doesn't connect to your bank today, and we never ask for or store bank passwords or card numbers. Connecting a bank or credit card is an optional paid feature that's coming soon, provided through Plaid. Before it launches, we'll update this policy to explain exactly what it shares and with whom.

How we use it

• To run Tucked for you: show your budget, calculations, reminders, reports and rewards.
• To keep your account secure and to sign you in.
• To send emails you need, such as confirming your email address, resetting your password, or confirming an account deletion. We don't send marketing email.
• To understand overall use of the website through privacy-friendly, aggregated page statistics (see Analytics).
• To provide support when you contact us.

We never sell your data, never use it for advertising, and never share it with data brokers.

Who can see your data

Your entries are locked to your account using database row-level security, so no other user can ever see them. To run and support the service, Tucked's administrators can see account-level information: your email address, sign-up and last sign-in dates, and how many entries you have. Administrators don't view the contents of your entries, and access to the underlying database is limited to the operator for running, securing and supporting Tucked.

Where it's stored and who helps us

We use a small number of trusted service providers, who process data only to provide their service to us:

• Supabase stores your account and data. Our database is hosted in the United States (AWS, US East).
• Vercel hosts the website and provides aggregated, cookie-free page analytics.
• Resend delivers account emails such as sign-up confirmations.

Because these providers are based in or use servers in the United States, your information may be processed there and be subject to the laws of that country.

Security

Data is encrypted in transit (HTTPS) and encrypted at rest by our database provider. Passwords are hashed and never stored in plain text. You can hide all amounts on screen with one tap and lock Tucked with Face ID, Touch ID or your device passcode. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects you.

Cookies and device storage

Tucked uses only essential cookies, to keep you signed in. It also saves a few preferences on your device, such as whether amounts are hidden, which notifications you've read, and App Lock settings. We don't use advertising or cross-site tracking cookies. Our page analytics don't use cookies.

How long we keep it

We keep your data while your account is active. When you delete your account in Settings, it's scheduled for deletion and permanently erased after 60 days, along with everything you've logged. Signing back in within those 60 days restores your account. You can delete individual entries at any time.

Your rights and choices

• See and edit your information in the app at any time.
• Export reports to Excel or PDF from the Reports screen.
• Delete entries, or your whole account, from within the app.
• Ask us for a copy of your information, a correction, or deletion by emailing hello@tucked.ca. We'll respond within 30 days.

If you're in Canada, you also have rights under PIPEDA and may contact the Office of the Privacy Commissioner of Canada. If you're elsewhere, you may have similar rights under your local law, and we'll honour them.

Children

Tucked isn't intended for children under 13, and we don't knowingly collect their information.

Changes to this policy

If we make meaningful changes, we'll update the date at the top and let you know in the app. Please also read our Terms of Use.