TidyDo Privacy Policy

Effective 3 October 2026 · Last updated October 2026

TidyDo ("we," "our," "the app") helps households keep shared spaces tidy by comparing photos of a room against a saved "clean" reference and turning the difference into a checklist family members can divide up. This policy explains what information the app collects, why, and who it's shared with.

1. Information We Collect

Account information

When you create an account: your email address and password (handled by our authentication provider, Supabase — we never see or store your password ourselves), plus a display name and initial you choose.

Household and family member information

A household record, an invite code, and a role (parent or child) for each person who joins. If you add a household member who doesn't have their own device — a young child, for example — we store the name and appearance (an initial, a chosen icon, or a photo) you enter for them on their behalf. They do not create an account or sign in themselves; see Children's Information below.

Room photos

A "baseline" photo of what clean looks like for each room you set one up for, and a new photo each time you scan or verify a room. These photos are the core input the app's tidiness detection runs on.

Camera integration data

If you connect a supported smart camera (see Camera Integrations), we store the authorization tokens needed to request a photo from it on your behalf. We never store your camera account's password — only a token your camera provider issues after you sign in directly with them.

Task and assignment data

The list of out-of-place items a scan identifies, who they're assigned to, and whether they've been marked done — all generated from analyzing your room photos.

Device and notification data

A push-notification token for your device, if you enable notifications, so we can tell you when a task's been assigned to you.

2. How We Use Information

• To compare a new room photo against your saved baseline and identify what's changed, using Anthropic's Claude AI models.
• To generate and track a checklist of items, and to notify assigned family members.
• To let a parent manage household membership, family member profiles, and privacy settings.
• To operate camera integrations you've explicitly connected.
• To maintain and secure the service — for example, enforcing the photo-retention period you choose, and a daily limit on scans per household to prevent runaway automated use.

We do not sell your information, and we do not use your room photos or family data to train AI models.

3. Third Parties We Share Information With

TidyDo is built on several service providers, each of which processes a specific slice of your data to do its job:

• Supabase — hosts our database, file storage, and authentication. Your account credentials, household data, and room photos are stored here.
• Anthropic — every room photo you scan or verify is sent to Anthropic's Claude API for analysis. This is the mechanism the app's core feature depends on.
• Expo (and, in turn, Google Firebase Cloud Messaging / Apple Push Notification service) — routes push notifications to your device if you enable them.
• Your camera provider (e.g. Blink, Ring, Google Nest) — if you connect a camera, we exchange data directly with that provider's servers to request photos on your behalf. See the next section for provider-specific detail.
• Fly.io — hosts the small service that turns a Ring or Nest camera's live video session into a single still photo, because neither offers a way to request a photo directly. For the few seconds one capture takes, this service receives your camera credential (a Ring access token, or a Google Nest authorisation token) and the video frames it pulls. It stores neither, and it is only reached by our own servers, never from the internet at large. It is not involved at all if you connect neither a Ring nor a Nest camera.
• RevenueCat — if you subscribe, processes your purchase status so we know which plan your household is on. See Subscriptions & Payments.

We do not share your data with data brokers or advertisers.

4. Camera Integrations

TidyDo can pair with certain smart cameras so a room can be scanned automatically instead of requiring you to take a photo yourself.

Scheduled scans

A parent can set a room with a paired camera to photograph itself once a day at a chosen time. When that happens, the camera takes one still, it is analysed exactly as a manual scan would be, and the household's parents get a notification with the result. Nobody needs to be present, and nothing is recorded between scans — it is a single photo at a single moment, not monitoring. Scheduled scans are off by default, are only available on rooms you have deliberately paired a camera to, and can be switched off again from the Rooms tab at any time.

5. Children's Information

TidyDo is intended for use by adults managing a household. Children do not create their own accounts, sign in, or interact with any part of the service that collects information directly. A parent or guardian may add a profile for a household member who doesn't have their own device — this may include a child's name and a chosen appearance (an initial, an icon, or, if the parent chooses to add one, a photo) — entirely at the managing parent's discretion and control. A parent can remove this profile at any time, which deletes it permanently.

Needs legal reviewWhether this data-handling approach fully satisfies COPPA or equivalent regulations in your jurisdiction should be confirmed with legal counsel before launch, particularly if photos of children are ever stored as part of a family member's profile.

6. Data Retention & Deletion

• A room's baseline photo is kept indefinitely until you replace it — it's the reference every future scan compares against.
• Scan photos are kept for the retention period your household chooses in Settings (7 days, 30 days, or forever) and are automatically deleted once that period passes. New households default to 30 days — keeping photos indefinitely is available, but only as a choice you make, never as the result of leaving the setting alone.
• A parent can delete all stored photos for the household at any time from Settings. This covers room and scan photos; profile pictures are separate and are removed with the member they belong to.
• Removing a family member profile deletes that profile permanently, along with their profile picture; any tasks assigned to them become unassigned rather than being deleted. For a device-less profile a parent manages, the picture is deleted immediately. For a member with their own account, it is removed by a daily clean-up, so allow a day or two rather than expecting it to be instant.
• You can delete your account at any time from Settings → Delete my account. If you are the last member of your household, deleting your account also deletes the household and every room, photo, scan, and task in it. If other members remain, the household stays for them and only your own profile, assignments, avatar files, and any camera you paired with your own camera-provider account are removed.
• Deleting your account also deletes our record of your purchases, and we ask our payments provider to forget you. The app store you bought through keeps its own record of the sale, which we do not control and cannot delete on your behalf.
• Deleting your account does not cancel a subscription. Subscriptions are managed by the app store, not by us, and will keep renewing until you cancel them there. Cancel first, then delete.

7. Security

Access to your household's data is enforced at the database level (row-level security), so one household's data is never readable by another. Room and profile photos are stored in private buckets and only ever accessed through short-lived, signed URLs — they are not publicly browsable. Camera provider tokens are stored with no client-facing access at all; only server-side functions you trigger can read them.

8. Your Choices

• Set your household's photo retention period, or delete all stored photos, from Settings.
• Remove a family member profile you manage at any time.
• Disconnect a camera integration (contact us if this isn't yet available directly in the app).
• Leave a household, or (as a parent) approve or deny requests to join yours.

9. Subscriptions & Payments

Paid plans are sold through the app store you installed TidyDo from (Google Play, or the App Store on iOS). We never see or handle your card details. The store takes the payment and tells us only whether a subscription is active, which plan it is, and when it renews or lapses.

We use RevenueCat to receive that status from the store and relay it to us. RevenueCat receives an anonymised identifier for your account and your purchase history for this app. It does not receive your room photos, household data, family member profiles, or camera credentials.

What we store as a result is limited to the plan your household is on, when it expires, which member's store account pays for it, and your remaining scan allowance for the month. Manage or cancel a subscription through your store account, not through us — cancelling there stops the renewal, and the plan stays active until the period you have already paid for ends.

10. Changes to This Policy

If this policy changes materially, we'll update the date at the top and, where required, notify you through the app.

11. Contact

Questions about this policy or your data: support@tidydo.app