Privacy Policy

1. Who we are

tuckt ("we", "us", "our") provides a personal wealth tracking and financial planning app for iOS. This policy explains what personal data we collect, why, and your rights over it, in line with UK GDPR and the Data Protection Act 2018.

Data controller: Dovestar Limited, a company registered in England and Wales (company number 17445391), registered office Doves Barn, Swattenden Lane, Cranbrook, Kent, TN17 3PN. ICO registration number: ZC246626. Contact: support@tuckt.co.uk

2. What data we collect

Required to create an account: an email address and a password (securely hashed and never stored in readable form). You can also tell us what to call you — a first name or nickname is fine, and we never ask for your surname.

Everything else is optional — you choose what to add, and tuckt works with as much or as little information as you're comfortable providing:

• Additional profile data: your month and year of birth and your employment status, if you choose to add them. We only keep the month and year of birth, not the day, and we don't ask for your address.
• Financial data you enter: investments (individual holdings or simple total-value entries), crypto, cash, property (with the region it's in, if you choose to add it — we don't ask for a postcode or address), pensions (including Defined Contribution and Defined Benefit/Final Salary schemes), debts (credit cards, loans, mortgages, BNPL), income, budget categories, dependants' details (type, and if you choose, a first name or nickname and month and year of birth), sell/buy transaction records for investments and crypto, and payments you've made into ISAs (amount, date and which ISA) for the ISA allowance — add as much or as little as you like, for whichever categories are relevant to you
• Feedback you send us: if you use the in-app feedback form, the message you write, a reply email address if you choose to give one, and your user ID, the app version and the time it was sent
• Optional bank connection data: we may in future offer the option to connect a bank account. If we do, it will never be required — you can use tuckt fully by entering figures manually. If you choose to connect an account, transaction and balance data would be retrieved via our regulated open banking partner (see Section 5)

We also collect the following automatically, as part of providing the service:

• Subscription status: whether you're on our free or paid ("tuckt Pro") tier, trial status, and your purchase history as recorded by Apple and our subscription provider, RevenueCat (see Section 5)
• AI feature usage: to enforce fair-use limits on AI chat and analysis features, we log each use of AI chat, portfolio analysis and the Wealth Report against your account (date and usage type only — not your financial data or the content of your messages; see Section 6)
• Device and connection data: our hosting provider, Supabase, records IP addresses and device details in its security and request logs (for security and fraud prevention), and our subscription provider, RevenueCat, records your device platform, OS and app version. The tuckt app itself contains no analytics, advertising or tracking tools.

3. How we use your data

• To provide the app's core functionality (tracking your wealth, generating insights, budget and retirement planning, wealth reports)
• To power AI-generated analysis, chat responses and Wealth Report commentary — only with your permission, your profile and financial data is sent to our AI provider, Anthropic, to generate a response (see Section 6). The more information you choose to add to tuckt, the more complete and useful this analysis can be
• To send you notifications you've opted into
• To process subscription payments (via Apple's App Store and our subscription management provider, RevenueCat)
• To enforce fair-use limits on AI features and prevent abuse of the service
• To send you account emails (such as sign-up confirmation and password reset) and otherwise communicate with you about your account or the service
• To receive, read and act on feedback you send us

4. Legal basis for processing (UK GDPR)

• Contract: processing necessary to provide the service you've signed up for
• Consent: for sending your data to our AI provider when you use AI features (see Section 6), and for optional features like notifications, bank connection, and marketing communications
• Legitimate interests: fraud prevention, handling feedback you send us, service improvement
• Legal obligation: for financial/payment records we're required to retain (see Section 7)

5. Third parties we share data with

• Supabase (database/authentication hosting) — hosted in the EU West (London) region
• Anthropic (Claude AI) — our AI provider, used only if you consent to AI features. See Section 6 for exactly what is sent and how it is used.
• RevenueCat (subscription management) — records your Apple purchase history (product, dates, price, trial and renewal status, storefront country) and basic device and app details (platform, OS and app version) against your tuckt user ID. The app does not send RevenueCat your name or email address. RevenueCat acts as a data processor on our behalf, and Apple processes your payments.
• Resend (email delivery) — sends our account emails (sign-up confirmation and password reset), which contain your email address and a one-time link or code, and delivers feedback you send us to our support inbox (the message, the reply email address if you gave one, your user ID and the app version). Resend keeps records of the emails it sends for up to 30 days, and may keep addresses that bounce or are reported as spam on a suppression list until they are removed. Resend acts as a data processor on our behalf.
• TrueLayer (open banking) — not currently in use. If we introduce bank connections in future, this would apply only if you choose to connect a bank account; TrueLayer is directly regulated by the FCA as an Account Information Service Provider. We do not see or store your bank login details — these are handled entirely by TrueLayer under open banking standards. Once imported, transaction and balance data is stored in tuckt in the same way as data you enter manually, and is retained under the same terms (see Section 7). If you disconnect your bank account, we stop importing new data immediately; previously imported data already in your account remains until you delete it yourself or delete your account.
• Market data providers (for live price information, when this feature is active) — we send ticker symbols only, never personal data

We do not sell your personal data to third parties.

6. AI features and Anthropic

tuckt's AI features (AI chat, portfolio analysis and Wealth Report commentary) are powered by Claude, an AI model provided by Anthropic PBC, a third-party AI provider based in the United States. We access Claude through Anthropic's commercial API (not the consumer Claude.ai product), and Anthropic acts as a data processor on our behalf.

When you use an AI feature, tuckt sends Anthropic:

• Your age (in whole years), employment status, country, salary and tax rate
• Your financial goals and preferences
• Your investments, pensions, property (with region if you've added one), cash, crypto and debts, including providers, balances, rates and ISA payments in
• Account names and labels you've entered
• Your income and budget, and the type and age of any dependants
• Notes you've added, only if you turn on Include notes in Settings → AI
• The messages you type in AI chat (including earlier messages in the same conversation)

All of this is information you have entered into tuckt yourself. We don't send your name, email address, postcodes or dependants' names, unless you type them into chat, notes or account names.

How it is used: Anthropic uses this data only to generate responses for you. To help answer your questions, Anthropic may carry out web searches based on your request. tuckt does not use your personal financial information to train AI models, and under Anthropic's commercial API terms in place at the time of writing, Anthropic does not use API data to train its models. Prompts and responses are retained by Anthropic only as needed to provide the service, in line with its API terms.

Protection: Anthropic processes this data under its commercial and data processing terms, which provide protection equivalent to that described in this policy. Transfers to Anthropic in the United States are safeguarded as described in Section 10.

7. Data retention

We retain different categories of data for different periods, depending on the purpose:

• General account and financial tracking data (the information you enter into the app — assets, budget, pensions, etc.): when you delete your account, it becomes inaccessible immediately and enters a 30-day recovery window, during which you can contact us to restore it if you change your mind. After 30 days, this data is permanently deleted from our production systems. If you would rather not wait, you can ask us to delete it permanently straight away by emailing support@tuckt.co.uk. Residual copies in routine backups are deleted or overwritten in the ordinary course of our backup cycle, and are not used for any other purpose in the meantime.
• Payment and transaction records (subscription payments, invoices, and related financial records): retained for 6 years from the date of the transaction, in line with UK legal and tax record-keeping requirements (Companies Act 2006 and HMRC requirements), even after account deletion.
• Feedback: feedback you send is stored in our database with your user ID and is deleted when your account is permanently deleted. A copy is also emailed to our support inbox, where we keep it only for as long as it is needed to act on your feedback and then delete it, so a copy may remain after your account is deleted. Resend keeps its own delivery records for up to 30 days (see Section 5).
• Wealth Report PDFs: anything you type when exporting a Wealth Report PDF (such as a name to show on it, or a note) is used only to produce the file. It isn't saved, sent to us or to our AI provider, or logged.
• Subscription records: RevenueCat keeps your user ID and Apple purchase history. These are not deleted automatically when your account is deleted. We keep them for as long as they are needed to manage your subscription and for the record-keeping above, and we will delete them from RevenueCat if you ask us to (subject to those requirements). Apple keeps its own payment records independently of us.
• Technical logs: our hosting provider keeps security and request logs, which can include user IDs and IP addresses, for a limited period. They are not deleted on a per-user basis.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten") — noting that payment/transaction records may be retained per Section 7 where we have a legal obligation to do so
• Export your data in a portable format (tuckt includes a built-in CSV export feature for this)
• Object to or restrict certain processing
• Withdraw consent at any time (for consent-based processing, including turning off AI features in Settings → AI features, or disconnecting a bank account)

To exercise these rights, contact support@tuckt.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data security

We use industry-standard encryption in transit and at rest, alongside access controls that restrict data access to what's necessary to provide the service. Our database provider, Supabase, is SOC 2 Type II compliant, ISO/IEC 27001:2022 certified, and supports GDPR-compliant deployments. We take reasonable technical and organisational steps to protect your data, but no system is completely secure, so we cannot guarantee absolute security. We maintain procedures to detect and respond to security incidents, and will notify the ICO and any affected individuals where we're legally required to do so.

10. International data transfers

Your data is hosted within the UK/EEA (Supabase, EU West London region). Anthropic, our AI provider, processes data in the United States. Where we transfer personal data to Anthropic outside the UK, this is safeguarded by the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, incorporated into Anthropic's data processing terms, as an approved mechanism for lawful UK data transfers under UK GDPR. Some of our other providers, including RevenueCat and Resend, may also process limited data outside the UK; where they do, we rely on the safeguards required by UK data protection law.

11. Automated analysis and personalised insights

tuckt uses automated analysis of the financial information you provide (such as your net worth, income, investments, spending, pensions, debt, and property) to generate personalised insights, projections, categorisations, and AI commentary within the app.

12. Children's privacy

tuckt is not intended for use by anyone under 18. We do not knowingly collect data from children. Dependant information (including minors) may be entered by an adult user about their own dependants for financial and retirement planning purposes only. A first name, a nickname or a label such as "Child 1" is enough, and only the month and year of birth are kept. If you enter information about another person (including a dependant), you confirm you have the appropriate authority to do so. Entering a dependant's information does not make that person a tuckt user or create an account for them.

13. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the app or email.

14. Contact us

support@tuckt.co.uk

Dovestar Limited
Company number: 17445391
ICO registration number: ZC246626
Registered office: Doves Barn, Swattenden Lane, Cranbrook, Kent, TN17 3PN