Who we are
Tuck: Budget & Pantry ("Tuck", "we", "us") is an app for iPhone and Android and this website, tuckbudget.com. Tuck is provided by NomadFalcon, 2725-032 Lisboa, Portugal. We are the controller of the personal data described in this policy, which explains what we collect when you use the app or the website, why, and the choices you have.
For anything about your data, write to privacy@tuckbudget.com.
What we collect
Information you give us
- Account details: your name, email address and a password. We store only a secure hash of your password, never the password itself.
- Budget information: the months, categories, planned amounts, savings goals and transactions you enter, including merchant names, amounts, dates, notes and splits.
- Pantry information: the items you track, their counts, full-stock and reminder levels, pack sizes, and the prices you paid at which stores.
- Shopping preferences: the stores you choose (up to five), the branch you shop at, and an optional ZIP code so we can look up local prices and delivery.
- Reminder settings: which reminders you want, the time of day, and your time zone.
- Subscription status: if you use Tuck Premium, Apple or Google tell us your plan, when your free trial or subscription started and when it renews or ends. Payments go through them, and we never see your card details.
- Messages to us: what you send through the contact form or by email, including your name and email address.
Information collected automatically
- Push token: if you allow notifications, your phone gives us a token so we can send reminders. We store it with the platform (iOS or Android).
- Basic logs: our servers record requests, such as the time, the IP address they came from and errors, to keep Tuck running and secure.
We don't collect your precise location, contacts, photos or advertising identifiers, and we don't use analytics or advertising SDKs.
How we use it, and why we're allowed to
| What we do | Legal basis (GDPR) |
|---|---|
| Run your account, budget, transactions, pantry and smart purchase | Performing our contract with you |
| Send the reminders you turned on | Your consent, which you can withdraw in the app or your phone's settings |
| Keep Tuck secure, prevent abuse and fix problems | Our legitimate interest in a safe, working service |
| Answer you when you contact us | Our legitimate interest in replying, or steps you asked for before a contract |
| Send important notices about your account or these policies | Performing our contract, and legal obligations |
| Improve Tuck using aggregated information that doesn't identify you | Our legitimate interest |
We don't use your information for advertising, we don't build profiles to sell, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
Who we share it with
We don't sell or rent your personal information, and we don't share it for cross-context behavioral advertising. We give it only to service providers who process it for us under data-processing agreements that limit them to that work:
| Provider | What they do | What they receive |
|---|---|---|
| Heroku (Salesforce) | Hosts our servers and database | All app data, stored on our behalf |
| Anthropic | Powers smart purchase price checks | Item names, store names and websites, and your ZIP code if set |
| Apple and Google | Deliver push notifications and handle Premium payments | Your push token and the reminder text; they already hold your purchase details as the store |
| Cloudflare | Hosts this website, protects it from bots and delivers contact-form email | Website requests and contact messages |
We may also disclose information if the law requires it, to protect the rights, safety or property of our users or the public, or as part of a merger or sale of the business, in which case this policy keeps applying to your information.
Smart purchase and AI
When you ask Tuck to compare prices, our server sends the names of the items you want, the stores you picked and your ZIP code (if you gave one) to Anthropic's Claude, which searches those stores' websites for current prices, deals and delivery options. We don't send your name, email, budget or transaction history. Under our commercial terms with Anthropic, this data isn't used to train its models.
Prices come from the stores' websites at the time of the check and can change or be wrong. Always confirm the price at the store.
Bank connections
Linking a bank account isn't available yet. When it is, it will be optional and handled by a dedicated provider such as Plaid. We'll never see or store your bank username or password, and we'll update this policy before the feature launches to explain exactly what's collected.
International transfers
We operate from Portugal, and some of our providers (including Heroku, Anthropic, Apple, Google and Cloudflare) process data in the United States or other countries outside the EU/EEA. When data leaves the EU/EEA or the UK, we rely on the European Commission's adequacy decisions, including the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses, with extra safeguards where needed. You can ask us for a copy at privacy@tuckbudget.com.
How long we keep it
We keep your account information for as long as your account is open. When you delete your account, we delete your budget, transactions, pantry and settings from our live database right away, and from backups within 30 days. Server logs are kept for up to 30 days. Contact messages are kept for up to two years so we can follow up, unless you ask us to delete them sooner. We keep something longer only when the law requires it.
Security
Data travels between the app and our servers over encrypted connections (HTTPS), and our database is encrypted at rest. Passwords are stored as one-way hashes. Access to production systems is limited to the people who need it. No system is perfectly secure, so if a breach puts your rights at risk, we'll notify the authorities and tell you as the law requires.
Your rights
Wherever you live, you can see and edit almost everything in the app, delete your account in the app's settings, and turn reminders off. Under the GDPR, and similar laws such as the California Consumer Privacy Act, you also have the right to:
- know what we hold about you and get a copy (access), in a portable format;
- correct it, or have it deleted;
- restrict or object to some uses, including those based on our legitimate interests;
- withdraw consent at any time, without affecting what we did before;
- not be treated differently for using these rights.
To make a request, email privacy@tuckbudget.com from your account email. We'll answer within one month, and may need to confirm it's you first. You can also complain to a data-protection authority: in Portugal that's the Comissão Nacional de Proteção de Dados (cnpd.pt), or the authority where you live or work.
Children
Tuck is for people aged 16 and over, and we don't knowingly collect information from anyone younger. If you think a child has given us information, contact us and we'll delete it.
This website
tuckbudget.com doesn't use advertising, analytics or tracking cookies, and our fonts and scripts are served from our own domain.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.
Contact us
Questions or requests about privacy: privacy@tuckbudget.com, or use our contact form.
NomadFalcon · 2725-032 Lisboa, Portugal