Privacy Policy

Who handles your information

Sourdough AI LLC, a California limited liability company, operates Tiptoe and is responsible for the personal information described here. Contact support@tiptoe.ai with privacy questions or requests.

What we collect and why

We collect your account email and the information you and your partner enter, including tasks, chores, dinner plans, lists, topics, check-in answers, date plans, gift ideas, money amounts, photos and Voice note audio. We use this to run your accounts, shared space and requested features.

If you opt into notifications, we collect device tokens and notification preferences to deliver them. In the iPhone app, we collect product usage events only if you opt in. Those events include an account ID, timestamps and technical information that help us understand feature use, diagnose problems and protect the service. Payment providers send subscription status and transaction references so we can provide access; they handle your payment details.

If you contact us, we receive the name, email address and message you send and use them to respond. Please leave out passwords, payment details and private conversations.

What your partner can see

Shared items are visible to both partners. Gift ideas stay private to their owner. Date votes are private before a match, and a no vote is never shown to the other partner. Topic drafts stay private until you choose to queue or share them. Check-in answers stay private until the reveal after both partners submit.

Your partner cannot access or export your private records. Access controls separate private records from shared records; this is not a claim of end-to-end encryption. We do not track your location, monitor partners, or rank their contributions.

Processors and where data lives

Twilio delivers internal signup and payment alerts to the Tiptoe team. These may include your account email, signup platform and payment amount, but never your tasks, private notes or voice recordings.

Account and couple data live on AWS in the United States, in us-east-2 (Ohio). AWS provides hosting, storage and supporting services, including Amazon Cognito for sign-in, Amazon SES for the email we send you, Amazon S3 for photos and uploads, and Amazon DynamoDB for account and couple data. Stripe processes web payments. In-app purchases made in the iPhone app are processed by Apple through the App Store, and we do not receive your card details. These providers also handle information under their own policies.

Learnings and Voice note reports are optional and require the couple's consent. Tiptoe sends the information needed for the requested feature to Anthropic through the Claude API. Learnings use your own Tiptoe data. Voice note reports use the transcript and related context needed to produce a summary, decisions and follow-ups. AWS Transcribe processes Voice note audio to create the transcript. Anthropic and AWS act as processors for these features. You can decline them or withdraw consent in Settings and keep using the rest of Tiptoe.

Google Calendar is accessed only if you connect it, using the permissions you grant to provide the calendar connection. You can disconnect it. Cloudflare delivers and protects the marketing site. Google Analytics runs on the marketing site only, where it collects visit and interaction information and may use cookies and browser identifiers. It does not run inside the Tiptoe app.

Analytics and sharing

When you opt into product analytics in the iPhone app, we use usage events by account ID to measure feature use and reliability. You can change this choice in Settings. On the marketing site, campaign parameters and poster codes help attribute visits and signups. We do not claim that marketing analytics are anonymous or cookie-free.

Separately from optional product analytics, we collect anonymous reliability diagnostics to understand sign-in problems, failed app requests, slow requests, crashes, hangs, memory-limit exits, and slow app launches. A report contains a fixed feature and operation category, a fixed outcome or error category, platform, app version or build, and time. Timing reports include a broad duration range rather than precise timing. Apple device diagnostics are reduced to fixed categories; raw crash stacks, signposts, device metadata and diagnostic payloads are not uploaded. Reports do not contain your email, password, account or couple ID, private content, request addresses, or an unrestricted error message. These reports help us maintain the service; they are not used for advertising or to identify you.

We share information with processors as needed to provide the service, with your partner according to the sharing rules above, and when legally required or necessary to protect rights and service security. We do not sell your personal information.

Retention, uncoupling and deletion

Anonymous reliability reports expire after 30 days and are excluded from diagnostic views after expiry; automatic storage deletion may take additional time. Product analytics events are retained for 365 days. Account data is kept until you delete your account. Deletion removes your account, your data and photos; it does not delete your partner’s separate account.

When a record or an account is deleted, the removed rows leave a short deletion marker for up to 30 days so your devices can sync the removal, and the marker then expires. Photos and uploads are purged from storage when your account is deleted. Deleted data may remain in our encrypted backups for up to 180 days before it is permanently erased. Backups are used only to restore the service.

Voice note audio, its transcript and its report remain with the note so you can listen back and review it. They stay until you delete the note or your account. Deletion removes the audio from active storage; deleted audio may remain in encrypted backups for up to 180 days and is used only to restore the service.

Uncoupling archives the shared space and is separate from deletion. Each partner can export shared data and their own private records. Export what you need before deleting. Payment providers may retain transaction records under their own legal obligations and policies.

Your choices and rights

You can export your data and delete your account inside the app in Settings. You can update account information, choose what to share, withdraw consent for Learnings and Voice notes, turn off notifications or disconnect Google Calendar.

Depending on where you live, you may have rights to access, correct, delete or receive a copy of information, restrict or object to processing, withdraw consent or complain to a privacy regulator. Email support@tiptoe.ai for help exercising your rights. We may need to verify that the request is yours.

California privacy rights

This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act. In the last 12 months we have collected these categories of personal information: identifiers such as your email address, account ID and device tokens; the content you enter, including tasks, lists, plans, check-in answers, money amounts, photos, Voice note audio and messages you send us; commercial information such as subscription status and transaction references; internet activity such as opt-in product usage events, technical information and marketing site analytics. We do not collect precise geolocation, and we do not draw inferences to build a profile about you. We collect this information from you, your partner, your devices and our payment providers, and we use it for the purposes described above.

Sourdough AI LLC does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined by California law, and has not done so in the last 12 months. Tiptoe is for adults 18 and older, so we do not knowingly collect personal information from anyone under 18.

You have the right to know what personal information we collect, use and disclose; to delete it; to correct inaccurate information; and to limit the use of any sensitive personal information to what is needed to provide the service. You can exercise the rights to know and to delete inside the app in Settings, using Export your data and Delete account, or by emailing support@tiptoe.ai with the email address on your account. To verify a request we match it to the account email and may ask you to confirm from that address or to sign in. An authorized agent may submit a request on your behalf with your signed permission; we may still ask you to verify your identity directly. We will not discriminate against you for exercising these rights. We respond within the time California law allows.

Do Not Track and Global Privacy Control

Because we do not sell or share personal information, there is no sale or sharing to opt out of, and browser Do Not Track and Global Privacy Control signals do not change how we handle your information. The marketing site loads Google Analytics on every page and does not currently read those signals. See Cookies and browser storage for how to decline analytics.

Children

Tiptoe is for adults 18 and older. It is not intended for anyone under 18. If you believe a child has provided personal information, contact support so we can address it.

Changes and contact

We will date and post changes to this policy and provide notice of material changes through the service or email where required. Privacy questions and requests can be sent to Sourdough AI LLC at support@tiptoe.ai or by mail at Sourdough AI LLC, 223 Child St, Warren, RI 02885.