1. What we collect
We collect your name, email, family space data, and the content you create (text notes, voice recordings, doodles, uploaded images of scanned physical notes, AI transcript text of those notes, or photo attachments). We store these strictly to deliver the tuck experience to your loved ones. We also use a single session cookie to keep you logged in. It contains only a session identifier — no tracking or advertising data. It expires after 7 days of inactivity, and the window is extended each time you use the app. It is not used for tracking or advertising.
A scanned physical note (and its generated transcript text, if applicable) is stored and kept like any other vault content, and is deleted when the parent deletes it. A scanned physical note carries the name of the family member the uploader tagged as its author; photo attachments carry no identification of who appears in them. For notes authored by adults, we offer an optional feature to read the handwritten words. This is never automatic: it only runs when a member taps to read a specific note's handwriting. When used, a copy of the image is sent to Google (specifically Google's Gemini model, accessed through Floot's AI service) solely to convert the handwriting into text. No account information—such as the sender or recipient's name, email, or family details—is sent with the image. Floot has confirmed to us that these requests are routed through Google's paid Vertex AI or Gemini API tier — never a free or consumer tier — and that neither the image nor the resulting text is used to train or improve Google's models, and neither is reviewed by human annotators at any point. Floot has also confirmed that it does not use data from customer applications, including these images, to train any models. Per Floot, Google may retain this content on its side for up to 90 days. These statements reflect Floot's representations to us rather than terms we have independently verified. The resulting transcript reproduces the note as written, including misspellings, odd capitalization and mistakes, because the original errors are part of what is being preserved; they are not corrected or tidied up. The transcript is generated by AI, not by a person, and can occasionally misread a word, a symbol, or an emoji. It cannot be edited or corrected by hand. The original image is always kept and displayed with the transcript, so the note itself remains the record. The text is stored with the note in the family vault and deleted together with it. Notes attributed to a child are never sent to any AI or transcription provider, and child profiles cannot use the feature.
A birth month and year is provided by the family admin as part of the invite flow when they add a family member aged 13 or older, and is used only to route that teen invite flow and to tailor age-appropriate writing prompts. A birth date is never collected for a child under 13.
2. How we use your information
Your information is used to deliver notes between family members, to store your vault, and to manage your family space. We never sell your data or use it for advertising.
Tuck employees do not access, read, or monitor the content of your tucks under any circumstances, except where required by law, to investigate a specific report of abuse, or as part of internal security and compliance review. Family admins manage membership and settings but cannot access tucks sent or received by other members. Your vault is private to you.
3. Children's Privacy (Under 13)
tuck allows children under 13 to be receive-only profiles within a parent-created family space. They do not use the app directly and have no account, login, or device access. We've built tuck to follow COPPA's requirements for children under 13.
- What we collect regarding children: The parent or guardian creating the profile provides the child's first name. The system automatically assigns a display color, family space association, role, and profile creation date. Children under 13 do not create notes, voice recordings, or doodles. Content addressed to them is created by adult family members.
- We do NOT collect from under-13 children: email addresses, phone numbers, birth dates, passwords, logins, device identifiers, location data, or anything for advertising or analytics. Nothing is collected from an under-13 child online.
- Parental consent: Because no information is collected from the child online and the child has no account, there is no separate in-app consent step. The parent or guardian creates the child's profile inside their own family space and controls it at all times.
- Parental rights: Parents can view the notes they have sent to their child, delete any or all content associated with their child (which immediately deletes the record, the stored image file, and any transcript text), and remove the child's profile from the family entirely (which permanently hard-deletes their first name and profile). Because photos identify no one, they are removed by deleting the individual note that carries them. This can be done via Settings > Children's accounts or through the Need Help form in Settings.
- Operator contact: Parents can contact the operator directly at hello@givetuck.com for any COPPA-related requests (reviewing the information held about a child, deleting a child's content, removing a child's profile, etc.).
- Data sharing: We never share child content with advertisers or analytics providers. It is shared only with service providers that operate on our behalf under contract (such as our media storage provider).
For full details see our Children's Privacy Policy at givetuck.com/children-privacy.
4. Data retention
Tucks, including media files and transcript text, are stored as long as your family space is active. When you choose to delete content, it is permanently and irreversibly removed from our systems immediately. Residual copies may persist briefly in routine infrastructure backups maintained by our service providers and are overwritten in the ordinary course of their retention cycles.
5. Your rights
You have the right to request a full data export or complete account deletion. You can exercise these rights at any time through the Need Help form in Settings, or by using the Export Data / Delete Account options in Settings. You can also request account and data deletion from the web at givetuck.com/delete-account (useful if you can no longer sign in).
6. Data security
Your tucks are encrypted at rest and in transit. Only members of your family space can access your content.
We use industry-standard TLS encryption for traffic between your device and our servers. Data stored at rest, such as your text notes, is encrypted. For stored media files (including voice recordings, doodles, and uploaded images), we use AES-256 encryption.
Our infrastructure is hosted by a third-party platform provider. Authorized personnel at our infrastructure provider may access data in a controlled manner solely for the purpose of debugging issues at our request. This access is limited and occurs only when necessary to resolve technical problems.
7. Third-party services
We use the following services to operate tuck: Cloudinary (media storage), Resend (email delivery), OneSignal (push notifications), Sentry (error tracking), RevenueCat (subscription billing and purchase management), and Google (handwriting transcription for adult-authored scanned notes, accessed through Floot's AI service only when a member taps to read one). These services process data only as necessary to provide the tuck experience and are bound by their own privacy policies.
RevenueCat receives your email address, an internal account identifier, and your subscription and purchase status. It does NOT receive your name, and it does not receive any tuck content. A child's or teen's email address is never sent to RevenueCat.
8. Contact
If you have any questions about this privacy policy or how we handle your data, please reach out through the Need help? form in your Settings page, or email us directly at hello@givetuck.com.