Privacy Policy

1. Who we are

This Privacy Policy explains how tidee Ltd (“we”, “us”, “our”), a company registered in England and Wales, collects, uses, shares, and protects personal information when you use tidee — the mobile and web application available at tidee.com and app.tidee.com (the “Service”).

We are based at Merriwood, Perks Lane, Prestwood, HP16 0JE, United Kingdom. We are the data controller for the personal information described here. For privacy questions, you can reach the tidee privacy team through our contact form, or by email at hello@tidee.com.

2. What we collect

Account information. When you sign up, we collect your email address, a hashed password, and any name or display preference you provide.

Your content. Whatever you capture in tidee — entries, notes, reminders, and any metadata you create (categories, tags, dates). Voice capture reaches us as text, never as audio; see section 4.

Device and usage information. When you use the Service, we collect:

IP address, browser, and basic technical request data, for security, fraud prevention, and debugging;
a record of the captures you make — how each one was made and what kind of item resulted — so we can apply plan limits and improve the Service. The text you capture is Your Content, covered above, and is not usage data.

Billing information. Paid plans are sold through Paddle.com as our merchant of record. Paddle collects your payment information directly — we don’t see your full card details. We receive an order reference, an obfuscated billing email if different from your account email, and your country (for tax).

Communications. Any messages you send us via the contact form, email, or support channels.

3. Where the information comes from

Directly from you when you sign up, capture content, configure settings, or contact us.
Automatically from your device when you use the app (technical and usage data above).
From Paddle for billing-related events (purchase, renewal, cancellation, refund).

4. Voice capture and AI processing

When you capture by voice, the speech-to-text step happens outside tidee.

On iPhone and iPad, the app uses Apple’s built-in speech recognition. Your audio is handled by Apple, under Apple’s own terms and privacy policy.
In a web browser, your browser’s own speech recognition service does it. Which company operates that service depends on the browser you use.

We never receive your audio. Only the recognized text reaches tidee.

That text is sent to our language-model provider (currently Anthropic Inc., processing data in their service region) to turn it into a clean entry — a title, and which box it belongs in.
The resulting text is stored as Your Content under your account.
The language-model provider acts as our data processor: they do not use your text to train their models, and they keep it only as long as needed to return the response.

You can use tidee without voice capture; nothing forces you to use it.

5. How we use the information

We use the information to:

Provide the Service: authenticate you, store and retrieve your content, sync across devices.
Maintain and secure the Service: prevent abuse, debug, monitor for outages and security incidents.
Improve the Service: understand which features are used, measure performance, plan improvements.
Communicate with you: send transactional emails (account confirmation, billing, security alerts) and respond to your messages.
Comply with law: meet our legal, tax, and regulatory obligations.

We do not sell your personal information, and we do not use Your Content for advertising.

6. Legal bases (where applicable)

For users in jurisdictions that require a legal basis (UK GDPR, EU GDPR):

Contract — to provide the Service you signed up for.
Legitimate interest — to keep the Service secure, debug it, and improve it.
Consent — for any optional processing (for example, marketing emails, if and when we ever send them). You can withdraw consent at any time.
Legal obligation — when we have to keep or disclose information by law.

We share personal information only with these categories of third parties, all acting as our data processors under contract:

Hosting infrastructure (cloud database and application hosting) — where the Service runs.
Anthropic Inc. — to turn captured text into structured items (see section 4).
Paddle.com — to handle billing for paid plans.
Email delivery providers — for transactional emails.
Error monitoring (currently Sentry) — to detect and diagnose faults in the web app and the server.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition (with notice to you).

8. International transfers

Some of our processors are located outside the United Kingdom and outside the European Economic Area — including the United States and other regions. Before transferring personal information across borders, we assess whether the receiving environment provides an equivalent level of protection and we put appropriate safeguards in place:

for transfers of personal information originating in the European Economic Area, the European Commission’s Standard Contractual Clauses, or an adequacy decision covering the destination country;
for transfers originating in the United Kingdom, the International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses, or UK adequacy regulations covering the destination country;
for transfers originating elsewhere, the transfer mechanism required by that country’s law, or an equivalent contractual safeguard.

You can ask us for a copy of the safeguards that apply to a particular transfer through our contact form.

9. How long we keep it

Account data — for as long as your account is active, and for a reasonable period after closure for backups, accounting, and legal obligations (typically up to 12 months).
Your content — until you delete it or close your account. Deleted content is removed from active systems promptly and purged from backups within their rotation period.
Usage and technical logs — typically up to 90 days, longer where needed for security investigations.
Billing records — as required by tax and accounting law (typically 6 years in the UK under HMRC rules).

10. Your rights

Subject to applicable law, you can:

Access the personal information we hold about you.
Correct information that’s inaccurate or incomplete.
Delete your account and your content.
Port your data to another service in a structured, commonly-used format.
Withdraw consent for optional processing.
Object to processing based on legitimate interest.
Lodge a complaint with your data-protection authority. In the UK that is the Information Commissioner’s Office. In the European Economic Area it is the supervisory authority in the country where you live, work, or where the issue arose — the list of EEA authorities is here. Elsewhere, it is whichever privacy or data-protection regulator has authority where you live.

To exercise any of these rights, use our contact form. We respond within 30 days, or sooner where law requires.

11. Cookies and similar technologies

We use only essential cookies and local storage needed to keep you signed in, remember your preferences, and run the Service. We don’t use third-party advertising cookies.

12. Children

The Service is not directed to children under 16, and we don’t knowingly collect personal information from children under 16. If you believe a child has signed up, contact us and we will delete the account.

13. Security

We use industry-standard measures to protect personal information — encryption in transit (HTTPS/TLS), encrypted password storage (bcrypt or equivalent), access controls, and regular security reviews. No system is perfectly secure; if a breach occurs that affects you, we’ll notify you and the relevant authorities as required by law.

14. Changes to this Policy

We may update this Privacy Policy from time to time. If a change is material, we’ll let you know in the app, by email, or on this page in advance. Continuing to use the Service after the change takes effect means you accept the updated Policy.

15. Contact us

For privacy questions, complaints, or to exercise your rights:

Contact — tidee privacy team Reach us through our contact form, or by email at hello@tidee.com.

tidee Ltd, Merriwood, Perks Lane, Prestwood, HP16 0JE, United Kingdom