Privacy Policy

Last updated: 14 September 2026

This policy explains what the Tuck iOS app (“Tuck”, “we”) collects, why, and what you can do about it. If anything here is unclear, email talzvi99@gmail.com.

There is no account

Tuck has no sign-up, no login and no password. We never ask for your name, your email address, your phone number or your date of birth, and we do not build a profile tied to your real-world identity.

What stays on your device

Your closet lives on your iPhone. It is not uploaded to us and we cannot see it:

• Every garment you add — its type, colour, brand, material, occasions and notes
• The pictures of your clothes, including the ones the app draws for you
• Your outfits, and any photos of yourself wearing them
• Your answers to the questions the app asks when you first open it
• App settings

Deleting the app removes all of it from your device. There is nothing for us to delete afterwards, because we never had a copy.

What leaves your device, and when

Photographs you scan

This is the one thing that leaves your phone, and only when you start it. When you photograph a garment or a look, that photograph is sent to our service, which forwards it to Google to be read and to have the catalogue picture drawn. The result comes back and is stored on your device.

We do not keep the photograph. Our service passes it straight through and writes nothing but the result’s cost to its own counters; it has no file storage. Google processes it under the Google Gemini API terms for paid services, which state that content submitted through the paid API is not used to train Google’s models.

A photograph you never scan — one you add to a garment or an outfit by hand — never leaves your device at all.

Your device’s identity to our service

So that our costs cannot be run up by someone who is not a real user of the app, every request is signed by your iPhone using Apple’s App Attest. Our service stores the public key and identifier Apple generates for this, and a count of what has been scanned. That identifier is Apple’s, it is specific to this app on this device, it contains nothing about you, and iOS issues a new one if you reinstall.

When you tell us a reading was wrong

If you remove a detected piece and say why — “it isn’t clothing”, “wrong kind of thing” — that answer is sent to us, without the photograph. It is the only way the reader gets better.

Usage and diagnostic data

We collect anonymous information about how the app is used — which screens are opened, which features are used, and technical details such as your device model, iOS version, app version and country. We use it to find what is broken and decide what to build next. It is processed by PostHog and is tied to a random identifier generated when you first open the app. That identifier is not your Apple ID, not your device’s ID, and not the App Attest key; deleting the app loses it, and a fresh install is a new, unconnected one.

Purchases

If you subscribe, the purchase is handled by Apple. We never see your card, and Apple does not give us your name or your email address. Adapty processes the receipt on our behalf so the app knows whether your subscription is active.

What we never collect

• Your name, email address, phone number or postal address
• Your location
• Your contacts, calendar, health data or messages
• Your photo library — Tuck only receives the individual pictures you choose
• Anything at all that we could use to advertise to you. Tuck has no advertising and we do not sell data to anybody.

The people who process data for us

• Google (Gemini API) — reads the photographs you scan and draws the catalogue pictures
• Cloudflare — runs our service, which sits between the app and Google
• PostHog — anonymous usage and diagnostic data
• Adapty and Apple — subscriptions

Children

Tuck is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the app and something needs deleting, email us and we will do it.

Your rights

Because your closet never leaves your phone, the fastest way to exercise every right you have over it is to delete the app. For anything we do hold — the anonymous usage data, the device attestation record — email talzvi99@gmail.com and we will delete it. If you are in the UK, the EU or California, you have the right to ask what we hold, to have it corrected or deleted, and to complain to your data protection authority.

Changes

If this policy changes in a way that matters, the date at the top changes with it and the new version is published here before it takes effect.

Contact

Tal Zvi — talzvi99@gmail.com