Privacy Policy

TidyFile is made by Cyde Enterprises (“we”, “us”), based in the United Kingdom. This policy explains what we collect when you use the TidyFile website and app, why, and what you can ask us to do with it. We're the data controller for this information under UK GDPR.

The short version

• Your files never leave your computer. TidyFile sorts, renames and recycles files locally. We never see their contents.
• We store what we need to run your account: your email, your subscription status and a backup of your rules.
• Payments are handled by Stripe. We never see or store your card number.
• We don't sell your data or use it for advertising.

What we collect

Your account

When you create an account we store your email address, a display name and a unique account ID. If you sign in with Google we receive your name and email from Google. Passwords are handled by Google Firebase Authentication; we never see them.

Your rules

So your setup survives a new computer, the app backs up your rules and profiles to your account. Rules can contain folder paths (for example C:\Users\you\Downloads) and the file name patterns you type in. They don't contain your files or a list of your files.

Your subscription

Stripe processes payments and tells us your subscription status, plan, renewal and trial dates and currency, plus your Stripe customer ID. Stripe also receives your billing details and card, under Stripe's privacy policy.

Reviews and bug reports

If you rate TidyFile or report a problem in the app, we store what you wrote with your account ID, email and app version. We only quote a review on the website if you ticked the box allowing it, and we only show the display name you chose.

Emails

During a free trial we email you a few times about it: when it starts, about halfway with what TidyFile has sorted, and before it ends if there's no card on your account. Every email has an unsubscribe link. If you ask us to email you the download link, we use that address only to send that one email and don't keep it.

Invites

If you invite friends, we create an invite code for your account. Your invite page shows your first name (“Sam gave you a free month”) to anyone with your link. We record which accounts joined with your code so we can credit your free months. Shared “before & after” pages only show a file count and your code, never file names.

Usage and analytics

To see where people get stuck, the website and app send a small number of events (such as “download clicked”, “app opened for the first time”, “first rule created”) with a random install ID and, once you're signed in, your account ID. The website also uses Vercel Web Analytics, which counts page views without cookies and without identifying you. Our hosting provider keeps short-lived server logs, including IP addresses, for security.

What stays on your computer

Your files, the activity log of what TidyFile moved, and your app settings stay on your computer and are never sent to us.

Why we use it (legal basis)

• To provide the service you signed up for (contract): your account, rule backup, subscription and support.
• Legitimate interests: keeping TidyFile secure, fixing bugs and understanding which parts of the site and app work.
• Consent: quoting your review on the website. You can withdraw it at any time.
• Legal obligation: keeping payment records for tax.

Who processes it for us

• Google Firebase: sign-in and the account database.
• Stripe: payments, invoices and the billing portal.
• Vercel: website hosting and cookieless analytics.
• CrabNebula: app downloads and updates.
• Resend: sending our emails.

Some of these providers store data outside the UK, including in the United States. Where they do, they rely on UK-approved safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

We keep your account data while you have an account. If you ask us to delete your account, we delete your profile, rules, reviews and bug reports within 30 days. Payment and invoice records are kept for six years because UK tax law requires it. Analytics events are kept for up to two years.

Cookies

The public website doesn't set tracking or advertising cookies. Signing in with Google on the website uses the cookies and storage Google needs for that sign-in.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email help@backpocket.pro from the address on your account and we'll reply within a month. You can cancel your subscription at any time without contacting us; see the Terms.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

Children

TidyFile isn't aimed at children under 13 and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update the date above and, for significant changes, tell you by email or in the app.

Contact

Questions about privacy: help@backpocket.pro.