Privacy
How TidyDoc handles your data
TidyDoc keeps your document library on your own device. This policy explains exactly what stays there, what leaves it, who else touches it, and how to get rid of it.
Effective: 21 August 2026
Last updated: 21 August 2026
Applies to: TidyDoc for iOS & web
Contents
1. Who we are
7. Retention
8. Your rights
9. Security
10. Children
01. Who we are
TidyDoc ("we", "us") provides a document management application for iOS and the web that stores your files, extracts structured data from them, and checks them against compliance requirements you define.
TidyDoc is usable without an account. Where this policy refers to account details, that applies only to people who have chosen to sign in.
We are the data controller for the information described in this policy. For anything in this document, or to exercise any right described in section 8, contact us at the address in section 12.
02. What we collect
> Your library is stored on your device, not on our servers. Document titles, categories, tags, notes, summaries and extracted data live in this app's own storage on your iPhone or iPad. We keep no copy and cannot read them. Uninstalling the app removes them.
>
> TidyDoc does not require an account. You can use the app without signing in, and in that case we hold no email address or name for you at all.
Information you give us
- Account details — *only if you choose to create an account*: your email address and display name, used to sign you in and sync your documents.
- Document files — the files themselves are stored on your device, alongside the rest of your library. When you run an AI feature on a document the app can read as text (plain text, Word, Excel, CSV, HTML), only that text is sent for processing — the file never leaves. When you run an AI feature on a scan, photo or PDF, a copy of that file is sent to access-controlled private processing storage so the AI model can read it; it is never public, and it is reachable only through short-lived signed links that expire.
- Document metadata — titles, categories, tags, colours, version history, signatures, extraction templates and compliance requirements. Stored on your device only.
- Extracted data — the structured fields produced from your documents, such as client names, dates, amounts and document types. Stored on your device only.
Information collected automatically
- Analytics: none. The app does not track which screens you open or which features you use, and sends no usage analytics.
- Subscription status — whether your TidyDoc Pro entitlement is active, and its renewal date, held under a random identifier that is not linked to your identity.
> We do not collect payment details. Subscriptions are purchased through Apple. Your card number, billing address, and Apple Account credentials are handled by Apple and are never visible to us.
03. How we use it
| Purpose | What this involves |
|---|---|
| Providing the service | Storing your documents, rendering them, running search, and syncing across your devices |
| Data extraction | Reading document contents to produce the structured fields you asked for, in bulk where you apply a template |
| Compliance checking | Comparing documents against the requirements you define and reporting gaps |
| Account management | Authenticating you and keeping your subscription entitlement current |
| Support | Diagnosing faults you report to us |
| Improving the app | Aggregate, non-identifying analysis of which features get used |
We do not sell your personal information, and we do not use the contents of your documents for advertising.
04. AI processing of documents
TidyDoc's extraction, summarisation, translation, and compliance features work by sending document contents to third-party AI model providers for processing. This is the core of how the product works, and it means document text leaves your device.
- Content is sent only when you trigger a feature that needs it — scanning, extracting, summarising, translating, or running a compliance check.
- Content is sent over an encrypted connection and processed to return a result to you.
- We instruct our providers not to use your content to train their models.
- Documents you never run an AI feature on are stored but not sent for AI processing.
> If a document is too sensitive to be processed by a third-party AI provider, do not run AI features on it. Storing it in TidyDoc without invoking extraction, summarisation, translation, or compliance checking keeps its contents out of that pipeline.
05. Third parties
We share information with the following categories of service provider, only as needed to run the service:
| Provider | Role | What it receives |
|---|---|---|
| Base44 | App hosting, private file storage and AI processing | Document files, and document text at the moment you run an AI feature |
| AI model providers | Extraction, summarisation, translation, compliance analysis | Document contents you submit to those features |
| Apple | App distribution and subscription billing | Purchase and billing information — we never see your payment details |
| RevenueCat | Subscription entitlement management | A pseudonymous user identifier and your purchase status |
| Cloud storage providers | Optional sync to an account you connect yourself | Only the files you choose to sync, and only while connected |
Connecting a cloud storage account is entirely optional and initiated by you. You can disconnect it at any time in Settings, which stops any further transfer.
We may also disclose information where required by law, or to protect the rights, safety, and property of TidyDoc and its users.
06. Private Vault & Face ID
The Private Vault lets you put documents behind a biometric lock. Authentication uses your device's own passkey and biometric hardware.
Your face and fingerprint data never leave your device and are never transmitted to us. iOS reports only whether authentication succeeded or failed. We store a credential identifier on your device so it can recognise your passkey next time.
07. Retention
- Your library lives on your device and is kept until you delete individual items or remove the app.
- Copies sent for AI processing (scans, photos and PDFs you run AI features on) are held in access-controlled private processing storage. They are never public, are reachable only through short-lived signed links, and are not used for any purpose other than returning your result — including model training.
- Account records, where an account exists, are deleted within 30 days of a deletion request.
08. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Export your documents and extracted data — available directly in the app.
- Correct information that is inaccurate.
- Delete your account and all associated documents.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on it.
If you created an account, you can delete it and its contents from within the app at any time. If you never signed in, your documents live only in this installation of the app and removing the app removes them. To make any other request, contact us at the address in section 12. We respond within 30 days.
Managing your subscription — including cancelling it — is done in your Apple Account settings, not by us.
09. Security
Your library is held in the app's private storage area on your device, protected by iOS and by the device passcode or biometric lock you set. TidyDoc can additionally require Face ID or Touch ID to open the app, and to open individual drawers.
Document files in private cloud storage are encrypted in transit using TLS and at rest by our storage provider, and are reachable only through short-lived signed links — never a public URL.
No system is perfectly secure. We cannot guarantee absolute security, and you share documents with the service at your own discretion.
10. Children
TidyDoc is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
11. International transfers
Our providers may process and store data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.
12. Changes & contact
We may update this policy from time to time. Material changes will be signalled by an updated effective date at the top of this page, and where appropriate by a notice in the app. Continued use after an update means you accept the revised policy.
Questions, requests, or complaints about this policy or your data: [email protected]
TidyDoc — AI document management. © 2026 Infinium Research Inc. All rights reserved.
This policy covers the TidyDoc iOS application and the TidyDoc web application.