1. Introduction
Tuck ("we," "us," "our") is an AI-powered home knowledge management application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Tuck mobile application and our website at tuck.house (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
2. Data Controller
Tuck is developed and operated by an individual developer based in Texas, United States. For all privacy inquiries, please contact us using the information in Section 14 below.
3. Information We Collect
We collect several categories of information to provide and improve the Service.
Information You Provide Directly
| Data Category | Examples | Purpose |
|---|
| Account Information |
Email address, display name |
Account creation, authentication, communication |
| Home Address |
Street address, city, state, ZIP code, closing date (optional) |
Home identification, location-relevant reminders and suggestions |
| Photos and Images |
Photos of appliance labels, serial numbers, equipment, receipts |
AI-powered data extraction, visual record keeping |
| Home and Item Data |
Appliance details, model/serial numbers, warranty dates, maintenance records, notes |
Core home knowledge management functionality |
| Contractor Information |
Contractor names, phone numbers, specialties, notes |
Contractor contact management |
| Free-Text Content |
Item descriptions, notes, chat messages, feedback transcripts |
Core functionality, AI processing, service improvement |
Information Collected Automatically
| Data Category | Examples | Purpose |
|---|
| Device Information |
Device type, operating system version, unique device identifiers |
Service optimization, troubleshooting, analytics |
| Usage Data |
Features used, session duration, interaction patterns |
Service improvement, analytics, identifying issues |
| Performance Data |
App start time, screen rendering performance, network request latency |
Performance monitoring, identifying slow features, post-release regression detection |
Information We Do Not Collect
- Voice audio recordings: When you use voice features in Tuck, speech-to-text conversion happens entirely on your device using Apple's on-device speech recognition. Your voice audio is never uploaded, transmitted, or stored — not by Tuck, and not by any third party. Only the resulting text is sent to our Service for processing.
- Payment information: All payment processing is handled by Apple through the App Store. We do not collect, store, or have access to your credit card number, bank account details, or other financial information.
- Precise real-time location: We do not track your GPS location. Home address is provided voluntarily by you.
4. How We Use Your Information
We use your information for the following purposes:
- Provide the Service: Store, organize, and retrieve your home knowledge; process photos and text through AI to extract structured data and answer questions about your home.
- Improve the Service: Analyze usage patterns to identify bugs, improve features, and enhance user experience.
- Communicate with you: Send service-related notifications, respond to support inquiries, and provide updates about the Service.
- Ensure security: Protect against unauthorized access, fraud, and abuse.
- Comply with legal obligations: Meet applicable legal requirements and respond to lawful requests.
5. AI Processing and Third-Party Services
Tuck uses artificial intelligence to power its core features. Understanding how your data is processed by AI is important to us, so we provide detailed information here.
Google Cloud / Vertex AI (Gemini)
We use Google's Gemini AI models, accessed through Google Cloud's Vertex AI platform, to process:
- Photos: When you capture a photo of an appliance label, receipt, or other item, the image is sent to Gemini for analysis. Gemini extracts text, model numbers, serial numbers, and other relevant information.
- Text from voice input: When you dictate content, Apple's on-device speech recognition converts your audio to text locally on your device. Only the resulting text is sent to Gemini for processing. Audio never leaves your device.
- Text queries: When you ask questions about your home, your query and relevant context are sent to Gemini to generate responses. Your chat messages are stored in your account's database alongside your other home data, and are deleted when you delete your account. In the app, each new chat session starts fresh rather than continuing a prior conversation.
Important information about Google's data practices:
- Google does not use customer data sent through Vertex AI to train its foundation models or improve its general AI services.
- Data is encrypted in transit between Tuck and Google's servers.
- AI processing occurs on Google Cloud infrastructure located in the United States.
- AI processing is essential to the Service's functionality and cannot be opted out of while using the Service.
AI-generated outputs (extracted data, responses to questions) are stored in Tuck's database as part of your home knowledge.
Firebase (Google)
We use Firebase, a Google platform, for:
- Authentication: Secure account sign-in and management.
- Cloud Firestore: Secure storage of your home data.
- Firebase Analytics: Usage analytics to understand how people use Tuck and improve the app experience. This includes which features are used, how often, and general usage patterns. This data is linked to your account but is not used for advertising. We do not use device advertising identifiers (IDFA) or participate in ad networks.
- Firebase Performance Monitoring: Automatically collected technical metrics about app responsiveness — app start time, screen rendering performance, and network request latency. Used to identify and fix slow features and detect regressions after updates.
- Cloud Storage: Secure storage of photos and media.
Apple
- StoreKit / App Store: Handles all payment and subscription processing. We receive confirmation of your subscription status but do not have access to your payment details.
- On-device speech recognition: When you use voice features, Apple's Speech framework transcribes your audio locally on your device. Audio does not leave your device.
6. How We Share Your Information
We do not sell your personal information.
We share your information only in the following limited circumstances:
- Service providers: With the third-party processors described in Section 5 (Google Cloud/Vertex AI, Firebase, Apple), solely to provide the Service.
- Legal requirements: When required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
7. Data Retention and Deletion
We retain your personal information for as long as your account is active or as needed to provide the Service.
- Account deletion: You may request deletion of your account and all associated data at any time through the app settings or by contacting us. When you delete your account, we will delete all your personal data, including home data, photos, chat messages, and account information.
- Deletion timeline: Account deletion is processed promptly. Some data may persist in encrypted backups for a limited period before being permanently removed.
8. Data Security
We take the security of your data seriously and implement appropriate technical and organizational measures, including:
- Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS (Transport Layer Security).
- Encryption at rest: Data stored in our databases and cloud storage is encrypted at rest.
- Firebase Security Rules: Database access is controlled by security rules that ensure users can only access their own data.
- Authentication: Secure authentication through Firebase Authentication.
While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
The Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
If you believe a child under 13 has provided us with personal information, please contact us at the email address in Section 14.
10. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal information. You can also edit most data directly within the app.
- Deletion: You may request deletion of your personal information. You can delete your account through the app settings, or contact us.
- Data portability: You may request your data in a commonly used, machine-readable format.
- Opt-out of analytics: You can limit analytics collection through your device's privacy settings.
To exercise any of these rights, please contact us at privacy@tuck.house. We will respond to your request within 30 days.
11. Do Not Sell or Share
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than providing the Service.
12. State-Specific Privacy Rights
Texas (Texas Data Privacy and Security Act — TDPSA)
If you are a Texas resident, you have the right to:
- Confirm whether we are processing your personal data and access that data.
- Correct inaccuracies in your personal data.
- Delete your personal data.
- Obtain a copy of your personal data in a portable format.
- Opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.
We do not engage in the sale of personal data, targeted advertising based on personal data, or profiling as defined under the TDPSA.
California (CalOPPA and CCPA/CPRA)
If you are a California resident, you have additional rights under California law:
- The right to know what personal information we collect, use, and disclose.
- The right to delete your personal information.
- The right to opt out of the sale or sharing of personal information. (We do not sell or share personal information.)
- The right to non-discrimination for exercising your privacy rights.
In accordance with CalOPPA, our Service does honor "Do Not Track" signals to the extent they relate to analytics collection.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Provide notice through the app or by email for significant changes.
Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us at:
Email: privacy@tuck.house
We will endeavor to respond to all privacy inquiries within 30 days.