Privacy
In plain words, because a policy nobody reads protects nobody.
What Tidy stores
Two things: your account, and what you put in it. The account is an email address, a hashed password, your timezone, your currency and your settings. What you put in it is whatever you captured — expenses, meals, workouts, appointments, tasks, notes, lists, people — along with any photo or PDF you attached.
Who can see it
You, when you are signed in. Every query Tidy runs is scoped to your own account, and uploaded files are never served from a public address — each request is checked against the account that owns the file before a single byte goes out.
Nothing is sold, and nothing is shared with advertisers.
What leaves the server, and why
- OpenAI. The sentence you capture is sent to OpenAI's API so it can be turned into an entry, along with your categories and list names so it reuses yours instead of inventing new ones. When you attach a photo and ask for it to be read, the image goes too. It is not used to train anybody's model.
- Stripe. Subscriptions are handled by Stripe. Card details are entered on Stripe's own pages and never touch Tidy's server.
- Mailgun. Sends the few emails Tidy sends: password resets, and a note before a trial ends.
- OneSignal. Delivers reminders you asked for, if you turned them on.
That is the complete list. There is no analytics tracker, no advertising pixel and no session recorder on this site or in the app.
Photos
Images you upload are re-encoded before they are stored, which strips their embedded metadata — including the GPS coordinates most phones write into a photo.
Cookies
Two, both strictly necessary. One keeps you signed in for the session; the other is the “stay signed in” token, which lasts 90 days and can be revoked from Settings at any time by signing out everywhere. There are no third-party or advertising cookies.
Getting it back, and getting rid of it
Export everything as CSV from Settings, whenever you like, with no request to make and nobody to email. Delete your account from inside the app, in Settings; that removes your entries, your uploaded files and your account itself, and cancels any subscription. It is immediate and it cannot be undone.
How long things are kept
Your entries stay until you delete them or delete your account. Password reset links expire in an hour and are single use. Sign-in tokens expire after 90 days. Sent reminders are cleared after a month.
Children
Tidy is not intended for anyone under 13, and accounts are not knowingly created for them.
Changes, and how to reach a person
If this policy changes in a way that matters, you will be told inside the app rather than quietly. Anything you want to ask about it: hello@gettidy.ai.