Privacy Policy

Tidy is a list-making app at tidy.is, with companion iPhone and Apple Watch apps. This policy describes what we collect, how we use it, and the choices you have. The short version: your lists are private by default, we don't run ads or cross-site trackers, and we never sell your data. Questions: [email protected].

Account. Your email address, and — if you sign in with Apple or Google — the name and avatar those providers share.

Your content. The lists, items, folders, and workspaces you create; your conversations with the Tidy assistant; feedback and support messages you send; and anything you submit to capture features (text, images, PDFs, audio recordings).

Public profile. If you choose to create one: your username, display name, and the lists you publish.

Technical data. Standard server logs (such as IP address and browser type) kept by our infrastructure providers for security, abuse prevention, and debugging.

Product analytics.On the website we use PostHog to see how Tidy is used — which pages get visited and which features get used — so we know what to fix and what to build. It is set up to stay out of your content: no session recording, no automatic capture of what is on your screen, and no advertising or cross-site tracking. Web addresses are stripped of anything sensitive before they are recorded, so share links and sign-in links never reach it, and it is tied to your account by user ID only — never your email or name. It sets no cookies. If your browser sends a “Do Not Track” signal, we record nothing at all. The iPhone, Watch, and Mac apps contain no analytics.

To run the service: storing and syncing your lists across devices, powering the AI features you invoke, sending the notifications and reminders you enable, moderating public content, and answering support requests. Nothing else — no ads, no selling or renting data, no profiling for third parties.

When you use an AI feature — the Tidy assistant, suggestions, or capturing a list from text, an image, a PDF, or audio — the content you submit is routed through Vercel's AI Gateway or directly to a model provider. Our current model providers are OpenAI, xAI, Cerebras, and Groq. We use these providers' API services, which under their terms do not use your content to train their models. AI actions that change your lists are recorded in your list history so you can always see what was done.

You can connect assistants like Claude or ChatGPT to your Tidy account, or create personal access tokens for developer tools. A connected app acts as your account and can read and edit your lists on your instruction. Its actions are recorded in your list history, and you can revoke a connection or token at any time in settings.

Everything you create is private by default. If you publish a list or profile, it is visible to anyone, including search engines, until you unpublish it. If you create a share link, anyone who has the link can access that list under the permissions you chose; you can revoke a link at any time.

Your data is stored with Supabase (database and authentication) and served through Vercel (hosting) and Cloudflare (network). Website usage analytics are processed by PostHog in the United States. The iPhone and Watch apps keep a local copy of your lists on your device so they work offline; signing out removes it.

One small exception worth naming: when an item has a link, its icon is fetched through DuckDuckGo's icon service via our servers — DuckDuckGo sees the link's domain (never the full address, and never who's looking).

Export.You can download everything you've created — every list as a Markdown file, plus your chats, profile, and a machine-readable copy — from Settings → Data & privacy on the web or in the iPhone app.

Account deletion. You can delete your account yourself from the same place, on web or iPhone. Deletion is immediate and permanent: your lists, chats, published lists, share links, and tokens are all removed. If someone copied one of your public lists, their copy remains theirs, with your name detached. Questions or trouble: [email protected].

Retention. Deleting a list or item is permanent — there is no recycle bin. Housekeeping runs automatically: list activity history is kept for 90 days, and read notifications for 30 days.

We only use the cookies and local storage needed to keep you signed in, plus a local storage entry our own analytics uses to recognise a repeat visit. There are no advertising or cross-site tracking cookies.

Tidy is not directed at children under 13, and we do not knowingly collect their data.

If this policy changes, we'll update this page and the effective date above.