Privacy Policy for Tuckaway

Last updated: November 1, 2026

This Privacy Policy explains how Claret Cove (“we,” “us,” or “our”) handles information in connection with the Tuckaway mobile application (the “App”). By using the App, you agree to the practices described here.

Tuckaway is a personal finance app that lets you manually track balances and transactions across your accounts using an envelope budgeting system. Tuckaway does not connect to your bank. All transaction entry is manual.

Our privacy-by-design approach

Tuckaway is built so that we cannot read your financial data. Your financial information is encrypted on your device using AES-256-GCM before it is ever sent to our servers. We store only the resulting encrypted data (ciphertext) and never receive the keys needed to decrypt it. This is often called “zero-knowledge” encryption: even we cannot see your balances, transactions, vendors, or notes.

Information we collect

We collect only what is needed to operate the App:

• Account identifier. When you sign in with Apple or Google, we receive and store your email address (or the Apple private-relay address you choose to use) and the user identifier Apple or Google assigns you. We use these to create and identify your account and to authenticate you. If Apple or Google shares your name during sign-in, we do not store your name on our servers.
• Your encrypted financial data. The balances, transactions, envelopes, vendor names, notes, and dates you enter are encrypted on your device before transmission. We store this data only as ciphertext and cannot decrypt it.
• Limited service metadata. To operate the service, our servers store some non-financial information in unencrypted form: the type of each account (for example, checking or credit), the dates records are created, the number of accounts, envelopes, and transactions you have, and — for recurring entries — the schedule (how often, the next due date, and whether the entry is income or an expense), which credit-card envelopes have balance tracking turned on, and which version of the App your devices use and when they last signed in (so we know when an older version can stop being supported). This metadata never includes any amounts, balances, account or envelope names, vendors, or notes, which remain encrypted and unreadable to us.
• Encryption key material. To make end-to-end encryption work, we store cryptographic material such as salts and encrypted (wrapped) keys. This material does not let us — or anyone else — decrypt your data without your passphrase.
• Subscription information. If you purchase a subscription, the transaction is handled by Apple through In-App Purchase or, on Android, by Google through Google Play Billing. We receive your subscription status from them so we can provide paid features. We never receive your payment card or billing details.

We do not collect analytics or usage tracking, advertising identifiers, location data, your contacts, or bank credentials. The App contains no third-party advertising or tracking software.

How we use information

We use the information above only to:

• authenticate you and provide access to your account;
• store your encrypted data so it is available across your devices and after you reinstall the App;
• provide and manage subscriptions;
• respond to your support requests; and
• comply with legal obligations and protect the security of the service.

How information is shared

We do not sell your information, and we do not share it for advertising.

We use the following service providers (“sub-processors”) to operate the App. They process information on our behalf and only as needed to provide their services:

• Apple — Sign in with Apple (authentication) and In-App Purchase (subscription processing).
• Google — Sign in with Google (authentication) and Google Play Billing (subscription processing on Android).
• Cloudflare — hosting and delivery of our application service.
• Turso — database hosting for your encrypted data and account records.

Because your financial data is stored only as ciphertext, these providers cannot read it. We may also disclose information if required by law or to protect the rights, safety, or security of our users or the service.

Data retention and deletion

We retain your account information and encrypted data for as long as your account is active. Transactions you delete are held in a recoverable state for 30 days and then permanently removed.

You can delete your account at any time in the App, under Settings → Delete Account. Before you confirm, the App offers to save each budget’s transactions as a CSV file. Deletion is immediate and permanent: your sign-in records, email address, encryption keys, recovery phrase data, notes and every budget only you use are erased from our servers. A budget you share with someone is not deleted. It passes to the person who joined it first, who already holds their own key to it, and the transactions in it stay as part of that budget’s history. Budgets someone else shared with you stay with them.

You can also ask us to delete your account by contacting support@claretcove.com. We will delete your data within a reasonable period, except where we are required to retain it by law. You can also stop Tuckaway from using your sign-in at any time: for Apple, in your iPhone’s Settings → [your name] → Sign in with Apple; for Google, at myaccount.google.com → Security → Your connections to third-party apps & services.

Your choices and rights

• Access and export. You can export your transactions to a CSV file at any time from within the App (Settings → Data → Export Transactions (CSV)).
• Correction. You can edit or delete your data directly in the App.
• Deletion. You can delete your account in the App (Settings → Delete Account) or ask us to, as described above.

Depending on where you live, you may have additional rights over your personal information. To exercise any of these rights, contact us at support@claretcove.com.

Data security

We protect your information using:

• AES-256-GCM encryption of your financial data on your device, with keys derived from your passphrase using PBKDF2;
• secure key storage in the iOS Keychain or Android Keystore; and
• TLS encryption for all data transmitted between the App and our servers.

No method of transmission or storage is completely secure. But because encryption happens on your device, we cannot see your balances, transaction amounts, the vendors you pay, your account or envelope names, or your notes. We can see only the limited service metadata described under “Information we collect” above (such as your email and the schedule of recurring entries), which we use solely to operate the App. Because we never hold the key to your data, if you lose your passphrase we cannot recover your financial data for you — keep your recovery phrase somewhere safe.

Children’s privacy

Tuckaway is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@claretcove.com and we will delete it.

International users

We operate the App from the United States, and our service providers may process and store information in the United States and other countries. By using the App, you understand that your information may be processed in countries with data-protection laws that differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the App after an update means you accept the revised policy.

Contact us

If you have questions or requests regarding this Privacy Policy or your information, contact us at:

Claret Cove
support@claretcove.com