Privacy policy

Who operates Tuck

Tuck is operated by 2618991 Ontario Inc., an Ontario corporation. In this policy, “Tuck,” “we,” and “us” refer to 2618991 Ontario Inc. when it operates the Tuck service.

What Tuck collects

Tuck may collect phone numbers, email addresses, family and child names, child birthdays or ages when provided, message content, photos, MMS voice notes, transcripts, saved memories, memory summaries, tags, digest preferences, opt-in and opt-out records, basic billing details, and technical logs needed to operate the service. Most of this is information families choose to send to Tuck.

How Tuck uses information

Tuck uses family information to capture memories, respond to messages, ask useful follow-up questions, organize memories by child and theme, create private digests and keepsakes, manage subscriptions and billing, provide support, prevent abuse, respect quiet hours and opt-outs, and keep the service reliable. Tuck does not use family content for advertising.

Text messages and mobile information

Tuck communicates with families mainly through the Tuck Moments recurring SMS and MMS program. When you provide your mobile number and opt in on tuckmoments.com, you agree to receive recurring automated text messages from Tuck Moments, such as saved-memory confirmations, follow-up questions, account messages, check-ins, and recap notifications. Consent is not a condition of any purchase. Message frequency varies, and message and data rates may apply. Reply STOP at any time to unsubscribe, or HELP for help.

During website or ad signup, Tuck may ask for your mobile number and text-message consent before checkout. Tuck stores that limited contact and consent record so it can connect a completed payment to the correct private text line. If checkout is not completed, Tuck does not text the number and removes the number, country, and consent record within 48 hours. Tuck does not keep these unpaid signup numbers as a marketing list.

Tuck does not share or sell your mobile phone number, your SMS opt-in, or your consent information with any third parties or affiliates for their own marketing or promotional purposes. Phone numbers and message content are shared only with the service providers that help operate Tuck’s messaging, such as our telecommunications provider, and only to deliver the service to your family.

AI processing

Tuck uses AI services from Microsoft Azure and OpenAI through their APIs to transcribe, summarize, classify, search, illustrate, and respond to family memories. These services process the messages, photos, audio, transcripts, and other family information needed for those tasks. The original message, note, quote, media, or transcript is preserved separately from any AI-generated summary, tag, or illustration.

Tuck does not use your family content to train AI models. Microsoft Azure and OpenAI do not use the family content that Tuck sends through their APIs to train their models under the API data protections Tuck uses. Tuck does not opt in to sharing this content for model training.

AI providers may retain data needed to run a feature, prevent abuse, or meet legal requirements, depending on the service and its settings. Authorized provider personnel may review content for safety, security, or abuse investigations. These activities are separate from model training.

Voice notes and transcription

When a family sends an MMS voice note, Tuck copies the audio into Tuck storage and transcribes it so the moment can be saved and returned. Voice-note audio and transcripts are treated as private family content. Tuck does not use voice recordings to create voiceprints or other biometric identifiers, and does not use them to identify people. Tuck does not accept inbound live calls or place outbound live calls.

If a family archive contains a historical voice_call or voicemail capture from an earlier product version, it remains private family content and is included in the same export and deletion-request process as other captures.

Payment information

Subscriptions are processed by a third-party payment processor. That processor handles your card details under its own terms and privacy policy; Tuck receives limited information such as billing status and the last digits of a card, and does not store full card numbers.

Give Tuck

When someone buys a gift, Tuck collects the buyer’s name and email, the recipient’s email and service region, any optional gift message, and the payment and gift records needed to deliver and support it. The gift email names the buyer. An optional message appears in the email body and private gift page. We use the recipient’s email to send that requested invitation; receiving a gift does not enroll them in marketing emails or recurring texts. The recipient chooses their own communication settings during setup.

The buyer can receive their payment receipt and the gift email delivery status. Buying a gift does not give access to the recipient’s family memories, chapters, or private account. Private gift and phone-confirmation pages do not load marketing tracking or session replay. Gift support and refund requests are handled through tuck@tuckmoments.com.

If you choose Google address search on the private book shipping form, Google receives your search text and standard connection data, such as your IP address. You can enter your address without Google search. Check the full address before you confirm it. Tuck stores the address you confirm to arrange book delivery. See Google’s Privacy Policy.

Service providers

Tuck uses service providers for messaging, email, hosting, database storage, media processing, AI processing, payments, book printing and shipping, website analytics, error monitoring, logging, and operations. These providers process information to support the service and under obligations of confidentiality and security. They may also process information to prevent abuse and meet legal requirements.

Our book printer receives the book pages you approve and the shipping address. Sentry, our error-monitoring provider, receives error reports that can include internal account IDs, with contact details and access links removed. Tuck staff receive internal alerts in Slack; some alerts quote a family’s messages and Tuck’s replies, with contact details and links removed, so staff can check a reply.

Authorized Tuck personnel and service-provider personnel may access family information when needed to provide support, operate or repair the service, investigate safety or security issues, or meet legal obligations. Private family content is not public content, but it is not restricted to access by your family alone.

Where information is processed

Tuck and its providers may process and store information in the United States and other countries where they operate. Processing locations depend on the provider and service used. Laws in those countries may differ from the laws where you live.

Website analytics and ad measurement

Tuck’s public website uses PostHog for analytics and the Meta Pixel to measure Tuck’s own ads. Both load on public pages, such as the home, pricing, and FAQ pages, and on the signup pages. They do not load in the parent app, on private links, or on the privacy, terms, and gift pages. PostHog and Meta store identifiers in your browser, such as cookies, and Tuck stores the campaign details of the link you arrived from.

PostHog records page views, clicks, and session replays of how visitors move through the public pages. Replays hide what you type into forms. On the signup pages, Tuck turns off automatic page-view and click tracking, sends only Tuck’s own signup events, and hides all text and images in replays except the fixed public page copy. After you sign up, Tuck’s servers also send PostHog account and billing events, such as a started trial, linked to internal account IDs and without names, phone numbers, or email addresses.

The Meta Pixel records page views and signup steps, such as starting checkout, with the ad or campaign that brought you and standard browser details. When you start checkout, and when a trial or payment starts, Tuck’s servers may also send Meta the event with the plan, amount, currency, and ad and campaign details. That server message includes Meta’s browser and click identifiers, your browser’s user-agent string, and the page address without its query string. Where Tuck turns on purchase matching, it also includes a hashed (one-way encoded) copy of the purchasing adult’s email address and phone number from checkout.

For visitors who arrive from a ChatGPT ad, Tuck may also send OpenAI a checkout-start, free-trial, or first-payment event. This server message contains OpenAI’s ad click reference, an opaque event ID, the event time, a public page address without query parameters, and the amount and currency. It does not contain names, email addresses, phone numbers, IP addresses, or family content. Tuck keeps the ad click reference in separate first-party browser storage for up to seven days and with the signup record to connect a later first payment. Tuck excludes this measurement when the browser sends Global Privacy Control or Do Not Track, or when website analytics are opted out. A later browser opt-out clears the browser reference; it does not automatically change a signup record already submitted. Tuck marks these events as opted out of future user-level personalization. See OpenAI’s Privacy Policy.

On the public U.S. signup pages, Tuck also uses a Google Ads tag to measure its own ads. Google can receive standard connection data, such as your IP address, and use advertising cookies. Tuck can import confirmed trial starts and first successful payments using the Google ad click identifier, event time, amount, currency, and an opaque event identifier. Tuck does not send Google family memories, children’s names, messages, photos, voice notes, or checkout contact details for this measurement. Page visits do not count as trials or payments. Tuck excludes this measurement for Global Privacy Control, Do Not Track, website analytics opt-out, and internal or preview visits. Ad personalization and enhanced conversions are off. See Google’s Privacy Policy.

Tuck uses Trybe on public marketing and signup pages to measure visits from creator campaigns. Trybe receives a browser visitor identifier, the public page address and permitted campaign parameters, the referring page, and standard connection and browser details, such as IP address, user-agent string, and screen size. Trybe stores a visitor cookie for up to one year. Automatic form and element tracking is off. Tuck sends explicit plan-view, checkout-start, and confirmed trial events. For a confirmed first payment, Tuck sends Trybe a browser visitor identifier, an opaque order reference, the paid amount, currency, and payment time. This connects a creator visit to the payment, including payment after a free trial. Tuck does not send Trybe names, email addresses, phone numbers, child content, or private links. Trybe does not load on private, gift, privacy, or terms pages, or when a page address or referrer can contain private link data. Global Privacy Control, Do Not Track, and website analytics opt-out prevent the pixel from loading.

Neither PostHog nor Meta receives the content you send to Tuck: children’s words, photos, voice notes, names, or memories. You can limit this measurement by blocking or clearing cookies and site data in your browser, by using a browser or extension that blocks trackers, and through your ad settings in your Meta account. See PostHog’s Privacy Policy and Meta’s Privacy Policy.

Advertising and sale of data

Tuck does not sell or rent family memories, does not share family content for cross-context behavioral advertising, does not build an ad-targeting profile from family content, and does not run a public social graph.

Children’s information

Tuck is a service for parents, guardians, and trusted adult caregivers — not for children. Tuck is not directed to children, and children should not use Tuck or send content to it directly. Information about a child in Tuck is provided by the adults in that family, as private family content, and is used only to capture and return that family’s own memories.

Tuck does not knowingly collect personal information directly from a child under 13. If you believe a child has contacted Tuck directly, or you want a child’s information reviewed or removed, email tuck@tuckmoments.com and we will address it.

Security

Tuck uses reasonable technical and organizational measures to protect family information, including encrypted web connections and access controls. SMS and MMS are not end-to-end encrypted. Mobile carriers and messaging providers, including Twilio, process the messages you send to and receive from Tuck. Copies can also remain on phones or in device backups. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Retention, export, and deletion

Tuck keeps memories and account records while a family uses the service. Family owners and admins can sign in through Parent login and open the Family page to export family data or delete the family account. The export includes current family records and available original attachments. Individual memory and attachment deletion controls are also available to authorized family members.

You can also request access, correction, export, or deletion by emailing tuck@tuckmoments.com. Tell us which account and information your request concerns. We may need to verify your identity and authority before we provide family data or delete it. We will explain any limits that apply to your request.

When family deletion takes effect, access to the family account ends, further messages from Tuck stop, and permanent cleanup begins. Some limited records may remain when needed for security, legal, billing, audit, or messaging-compliance purposes. We also keep limited deletion records to prevent deleted data from returning after a backup restore.

Deletion from active systems does not immediately remove backup copies. Our backup retention schedule keeps daily database backups for 35 days and schedules deleted media backup copies for removal after 35 days. Automatic backup cleanup can finish after that retention period. These backup periods are separate from the time needed to verify and process a deletion request. Copies that other people have already received or downloaded are outside Tuck’s deletion controls.

Your choices and rights

You can opt out of texts at any time by replying STOP and adjust digest and check-in preferences. Stopping texts does not delete information already saved in Tuck. You can make the privacy requests described above wherever you live. You may also have rights under the privacy laws that apply to you. To make a request, email tuck@tuckmoments.com.

Private sharing

Tuck is private by default. Family owners and admins can view and manage the family archive, manage family access, and export or delete family data. Contributors can add memories but do not receive access to the family dashboard or full archive through that role. Recap-only recipients receive the recaps shared with them by email; that role does not give them dashboard access or permission to text memories to Tuck. When someone gives Tuck as a gift, the buyer becomes a recap-only recipient once the family activates the gift and the buyer confirms their email. Owners and admins can remove them at any time, and the buyer can unsubscribe from any recap.

Owners and admins can revoke member access and remove recap recipients within their permissions. An admin cannot revoke the owner’s access. Revoking access stops future use of that access, but does not remove memories the person already contributed. Removing access or deleting content from Tuck cannot erase emails, downloads, screenshots, or other copies already held by recipients. Treat any recap or share link you forward as access to the content it contains.

Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date, and we will notify you directly (by text or email) before they take effect, with time to export or delete your family’s content first.

Contact

Questions or privacy requests? Email tuck@tuckmoments.com.