--- title: "Privacy Policy — Tidy" description: "What Tidy collects, why, who else processes it, and your rights over your data." url: https://www.tidy.engineering/legal/privacy last_updated: 2026-10-13T10:33:58.000Z --- [Terms & Privacy](https://www.tidy.engineering/legal) Tidy Engineering / Legal # Privacy Policy Effective October 13, 2026 ## Who we are and what this covers Tidy Engineering, LLC runs Tidy: the web app, the Android app, and the tidy.engineering site. This policy covers all of it. It explains what we collect, why, who else touches it, how long it stays, and what you can do about it. Questions: [privacy@tidy.engineering](mailto:privacy@tidy.engineering). ## The short version - We don’t sell your data. Ever. - We don’t train AI models on your personal content. - Connections to Tidy and outside providers are encrypted in transit; stored server data is encrypted at rest. Internal traffic stays on an isolated private network. - You can ask for a copy of your data or delete your account. - Staff see your content only when a workspace owner grants support access. - No advertising trackers. No ad pixels, no cross-site cookies. - Your phone number is used only for the texts you asked for. ## What we collect **What you give us.** Your name, email, password, and profile. Accounts you connect (Google, Microsoft, and others). Billing is handled by Stripe; we don’t store your full card number. **Your content.** The email, calendar events, notes, tasks, files, contacts, voice recordings, and photos you connect or create, and what you make with them. **Derived AI data.** Summaries, embeddings, and structure Tidy generates from your content so it can search and reason across it. **Usage data.** Content-free metrics about whether the app is working. Tidy is local-first: the apps read from a local copy and sync with Tidy’s servers. On Android, each account has its own app-private storage, protected by Android’s device encryption; the chat session store is additionally encrypted, and the main local database has no separate encryption. The web app’s local copy relies on your browser and device security. Local-first does not mean your content never reaches a server. ## Google account data If you connect a Google account, Tidy requests only the access its features actually use. Google’s consent screen is where you approve it. Disconnecting disables the connection and revokes the credentials Tidy saved. You can also remove Tidy’s access in your Google account settings. **Tidy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.** Every permission Tidy asks Google for, and why: - **Gmail:** Read your mail so Tidy can surface what needs your attention, send the messages you write, and apply your Tidy labels back to your Gmail threads. - **Calendar:** See your calendars and events so Tidy can show your day, and create or update the events you ask it to schedule. - **Contacts:** Read your saved contacts so Tidy can put a name and a face to the people in your mail and calendar. Tidy never edits your Google Contacts. - **Other contacts:** Read the addresses Google records from people you have corresponded with, so they appear in Tidy by name rather than as a bare email address. - **Drive (read):** List, search and open your Drive files so you can bring a document into Tidy. Tidy never modifies or deletes a file you already own. - **Drive (create):** Create new documents and folders in your Drive when you ask Tidy to. This covers only the files Tidy creates, never your existing ones. - **Meet (create):** Create a Meet call when you start one from Tidy. - **Meet (read):** Read back the recording and transcript of a call that Tidy started, so the notes land in your journal. - **Email address:** See which Google account you connected, so Tidy can label it and avoid connecting the same mailbox twice. - **Basic profile:** See your name and profile picture so your connected account is recognisable in Tidy. What happens to that data: it is encrypted in transit using TLS 1.2 or better between your device and Tidy’s edge, and between Tidy and outside providers. Internal service calls use plain HTTP on an isolated private network; those calls are not encrypted. Stored server data is encrypted at rest, and access tokens are separately encrypted before storage. We never sell it or share it for advertising. It is never used to train any AI model, ours or anyone else’s. Disconnecting disables the connection and revokes its saved credentials; content already imported stays until you delete it or your account. Account deletion removes ingested content within 30 days of your request. Nobody at Tidy reads it routinely; the staff access rule below is the only exception. ## Other accounts you connect The same rules apply to every provider you connect, including Microsoft and other mail providers: their data is used to run the features you connected, it follows the encryption described above, and disconnecting disables Tidy’s connection. ## Why we process your data - To provide the service you signed up for: sync, search, organization, and the AI features you use. - To send the notifications, texts, and reminders you set up. - To bill you through Stripe. - To help you when you ask for support. - To improve the product, using content-free metrics and the feedback you choose to give. - To keep the service secure and prevent abuse. - To comply with the law. ## Who else processes data A short, named list of companies processes data to run Tidy. They act as our service providers, on our instructions, never for their own purposes. The [Subprocessors page](https://www.tidy.engineering/legal/subprocessors) lists each one, what it does, and where it processes data. In brief: AI model providers (Google’s Gemini, Groq, and Fireworks AI), Amazon Web Services for email delivery and encrypted backups, Google Cloud for new-mail notifications, Cloudflare for web traffic and cookieless site analytics, Stripe for payments, Telnyx for texts and voice, and Sentry for crash reports when they are turned on. Transcription: dictation is transcribed on your phone. Meetings, recordings, and podcasts are transcribed on Tidy’s own servers. Two cases use Groq: live voice calls are transcribed by Groq, and Groq takes over meeting and recording transcription when our own servers are unavailable. Image generation: simple images are made on Tidy-managed hardware; rich images use Google Gemini. OpenAI is configured as a backup for bulk extraction, speech, and images, but it has no working credential, so it processes nothing today. We list it because adding a key would turn it back on. On Android, offline search uses a local index and sends nothing to a model provider. The optional downloaded Gemma 4 E4B model processes captures on the phone, under the [Gemma Terms of Use](https://ai.google.dev/gemma/terms). If you set up your own model endpoint, or a virtual employee that uses your own provider account, its prompts and tool results go to the provider you chose, under your agreement with that provider. Check its privacy and training terms before you give it access to content. ## What we never do - **No selling.** Your data is not a product line. - **No training on your data.** Your inbox and notes will not become part of anyone’s model, ours or anyone else’s. - **No reselling in aggregate.** We don’t repackage your activity and sell it to anyone, anonymized or not. - **No advertising trackers.** No ad pixels, no cross-site cookies, no data brokers. - **No sharing for others’ marketing.** Your phone number included. ## Staff access Tidy’s systems process your content to run the service. Staff do not read it routinely. There are two cases: 1. **Is the service working?** Automated performance metrics, which never include your content. 2. **You ask for help.** A workspace owner can grant our support team access to the workspace. A grant lasts at most 8 hours, ends on its own, can be ended sooner, and is logged. ## How long we keep things Your data stays while your account is active. The [Data Deletion page](https://www.tidy.engineering/legal/data-deletion) has the full detail: - Deleting your account starts a 7-day grace period you can cancel. You can also choose to delete right away. - Deletion from our live systems completes within 30 days of your request. - Deleted data leaves our backups as they expire, within 6 months. Backups are encrypted and never used to bring back a deleted account. - If your plan lapses, your data stays. We don’t delete an unpaid workspace on our own, and we will email you at least 30 days before we ever do. - Disconnecting a provider stops that connection right away; it does not delete content already imported. - A few records outlive an account, such as billing records and an opt-out list for texts. The Data Deletion page lists each one and how long it stays. ## Cookies The marketing site sets one first-party cookie, `tidy_aid`. It’s a random id with no personal information in it. It lets us see which campaigns bring people to Tidy, from first visit through signup. The campaign link you arrived from is recorded against that random id, and connected to your account only if you sign up. The id lasts about 13 months, and clearing your cookies removes it. Site analytics run on Cloudflare Web Analytics, which is cookieless and collects no personal information. There are no advertising cookies anywhere on the site. You can block or clear cookies in your browser; the site keeps working. ## Where your data is Tidy’s servers and backups are in the United States. If you use Tidy from another country, your data is transferred to the United States. Some of our providers also process data in other countries; the [Subprocessors page](https://www.tidy.engineering/legal/subprocessors) says where. Tidy is based in the United States and has no establishment in the EU or UK. We have not appointed a data protection officer or an EU or UK representative. ## Your rights Everyone gets the same rights, wherever you live: - **Access and export:** ask [privacy@tidy.engineering](mailto:privacy@tidy.engineering) for a copy of your data. - **Correction:** edit your data in the app, or ask us to fix anything you can’t edit. - **Deletion:** in Settings (Privacy & Data on web, Storage then Manage account data on Android), or by email. The [Data Deletion page](https://www.tidy.engineering/legal/data-deletion) explains the timeline. - **Withdrawing consent:** turn the feature off. For texts, turn them off in Settings or reply STOP. We may confirm who is asking before we act, and you can have an authorized agent ask for you. Using these rights never costs you anything or changes how we treat you. If you are in the EU or UK, you can also complain to your local data protection authority; please write to us first so we can fix it. For California readers, in the terms the law uses: we do not sell or share personal information, and we have not done so. The attribution cookie is first-party campaign measurement, not a sale. There is no “Do Not Sell” link because there is nothing to opt out of. ## Children You must be at least 18 years old to hold a Tidy account, the same age as in the [Terms of Service](https://www.tidy.engineering/legal/terms). Tidy is not directed at children, and we don’t knowingly collect their personal information. If you believe a child gave us personal information, email [privacy@tidy.engineering](mailto:privacy@tidy.engineering) and we will delete it. ## Legal requests and business changes If the law requires us to disclose data, we disclose only what is required. If the company changes hands, the new owner must keep these privacy commitments or tell you about any change before it takes effect. ## Changes to this policy When something important changes, we email you before it takes effect and update the effective date at the top of this page. ## Contact Privacy questions, deletion, export, and other requests: [privacy@tidy.engineering](mailto:privacy@tidy.engineering).