Privacy Policy

This Privacy Policy explains how TUCKR89 LLC ("TuckR89," "we," "us," or "our") collects, uses, stores, discloses, protects, retains, and deletes information in connection with TuckR89 Cloud, including our website, Android and iOS applications, APIs, account services, cloud-storage service, support, and related services (collectively, the "Service"). TuckR89 Cloud is an online, account-based cloud-storage service. Customer files and account information are transmitted to and processed by our backend infrastructure so users can store, protect, retrieve, and manage their files.

1. Scope

This Policy applies to information processed through the Service. It does not govern third-party services that operate under their own privacy policies, including Google Play, Apple's App Store, your device operating system, or a recipient app you choose when sharing a downloaded file.

2. Information you provide

You provide information when you create an account, upload files, configure security features, contact support, request account deletion, or otherwise interact with the Service.

3. Account information

We process account information such as your email address, internal account identifiers, account status, storage plan, quota, verification status, and other account authentication/security state required to operate the Service. Passwords are not stored in plain text; the Service stores password-verification data using secure password hashing.

4. Files and content you upload

You intentionally upload files to TuckR89 Cloud. The Service necessarily receives, stores, processes, and transmits those files to provide cloud-storage functionality, file retrieval, integrity verification, recovery, and protected storage features. Uploaded content may include documents, photos, videos, archives, backups, application data, and other files you select.

We do not claim that TuckR89 Cloud is a zero-knowledge service or that we are cryptographically incapable of accessing files. Authorized infrastructure may process file content as technically necessary to store, replicate, verify, recover, deliver, secure, or support the Service.

5. File metadata

Associated file metadata may include file name, unique file identifier, file size, file type or MIME information, folder/location information, upload and modification timestamps, deletion/restoration timestamps, integrity information such as a SHA-256 checksum, storage-object identifiers, availability state, Trash state, and storage/protection or replication state.

6. Device and session information

The mobile application and backend may process service-relevant device/platform metadata used for account/session identification and security functionality, such as operating system/platform, app version, device/session identifiers, IP address, user-agent information, login/logout timestamps, and session state. We do not describe this as collection of unrelated hardware information.

7. Authentication and security information

We process login/session information, access and refresh-token state, email-verification activity, password-reset/recovery activity, two-factor-authentication state, recovery-code state, passkey registration information and credential identifiers where applicable, signed-in session/device information, and security activity. Mobile authentication tokens may be stored using platform-provided secure storage.

When passkeys use device biometrics, biometric verification may be performed by your device, operating system, or credential provider. TuckR89 Cloud does not receive your fingerprint or facial scan merely because you use a passkey.

8. Activity information

We process account, file, and security activity necessary to operate features such as recent activity, security history, audit logging, troubleshooting, and abuse prevention. This can include registration, verification, sign-in events, password/security changes, uploads, downloads, renames, moves, folder changes, deletions, restorations, subscription changes, and suspicious-access events.

9. Storage information

We process storage consumption, account quota, active-file usage, pending upload information where applicable, Trash usage, and plan entitlement so we can display usage and enforce storage limits.

10. Billing and subscription information

Where enabled, mobile subscriptions may be processed by Google Play or Apple's App Store. The applicable store processes payment information under its own privacy practices. TuckR89 Cloud may receive product identifiers, purchase or transaction tokens/identifiers, subscription state, renewal/expiration information, entitlement information, and verification results needed to validate the subscription and apply the associated storage quota. We generally do not receive complete payment-card details for app-store purchases.

11. Information collected automatically

When you use the Service, technical and security information may be collected automatically, including request timestamps, IP address, app version, session state, API request information, operational events, error information, and security signals reasonably necessary to operate, protect, and troubleshoot the Service.

12. How we use information

We use information to create and maintain accounts; authenticate users; verify email addresses; provide uploads, downloads, folders, file management, Trash and restoration; enforce quotas; verify integrity; provide secondary replication/protection; manage sessions and security controls; verify subscriptions; deliver transactional account messages; support customers; prevent fraud, abuse, malware, and unauthorized access; monitor reliability; diagnose errors; comply with law; and protect users, our infrastructure, and our rights.

13. Legal bases where applicable

Where law requires a legal basis, we may process information to perform our contract with you; to pursue legitimate interests such as security, fraud prevention, service reliability, support, and improvement; with consent where required; and to comply with legal obligations.

14. How information is disclosed or shared

We may disclose information to service providers that process information on our behalf; when you direct us to share information; to verify app-store subscriptions; to prevent or investigate fraud, abuse, malware, unauthorized access, or security incidents; to enforce our agreements; when required by valid legal process; to protect users, rights, property, or safety; or in connection with a merger, financing, acquisition, restructuring, or sale of assets subject to appropriate safeguards.

15. Service providers and processors

We use providers necessary to operate TuckR89 Cloud. Current infrastructure may include Cloudflare for network/security services and Cloudflare R2 object storage; Backblaze B2 for secondary/recovery object storage; DigitalOcean for application hosting; database infrastructure providers for metadata; Brevo for transactional email; Google Play for Android distribution and billing; Apple for iOS distribution and billing; and security, monitoring, or operational providers necessary to protect and operate the Service. Provider roles and infrastructure may change as we maintain provider independence.

16. Google Play and Apple App Store

Google and Apple may independently process information related to app installation, device services, diagnostics, payments, subscriptions, fraud prevention, distribution, and store accounts under their own privacy practices. Our Google Play Data Safety and Apple App Privacy disclosures are intended to reflect the app's actual data handling and should be read together with this Policy.

17. File sharing and temporary links

Saving a downloaded file to your device is different from sharing it. If you explicitly use the operating system share interface, a downloaded copy may be sent to another application or service that you choose; that recipient then handles the copy under its own privacy practices. Where temporary-link functionality is enabled, the Service may create a short-lived authorized file link. Anyone who receives a valid link may be able to access the linked file during its validity period, so share such links carefully.

18. Cookies and website technologies

Our public website may use essential browser technologies needed for security, preferences, or normal site operation. If we later deploy analytics, advertising, or other non-essential tracking technologies, we will update this Policy and provide any consent controls required by applicable law.

19. Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain account/security history, resolve disputes, prevent fraud and abuse, satisfy billing/accounting requirements, comply with legal obligations, and enforce agreements. Exact retention can vary by data category, account status, operational need, applicable law, and documented deletion/recovery behavior.

20. Trash and file recovery

Deleting a file may move it into Trash or a recovery workflow rather than immediately destroying every storage copy. Files can remain recoverable during the applicable service recovery window. After that window, files may be scheduled for permanent deletion. Replicated, backup, recovery, or security systems may retain limited copies until those systems are rotated, overwritten, repaired, or securely purged according to operational requirements.

21. Account deletion

You may request deletion of your TuckR89 Cloud account and associated personal data using the instructions at our Account Deletion page. We may verify your identity before processing a request. After a verified deletion request is completed, we delete or de-identify associated account information and customer content except where limited information must be retained for security, fraud prevention, billing disputes, legal/accounting requirements, legal claims, enforcement, or backup/recovery rotation.

22. Security

We use administrative, technical, and organizational safeguards designed to protect information, which may include HTTPS/TLS, provider-supported encryption at rest, private object storage, authentication/authorization controls, secure password hashing, multi-factor authentication, passkeys, session management, short-lived authorized storage URLs, rate limiting, audit/security logging, integrity checks, secondary replication, recovery, and repair workflows. No online service can guarantee absolute security or that data can never be lost.

Unless a feature is expressly identified otherwise, TuckR89 Cloud should not be understood as an end-to-end encrypted, zero-knowledge, or client-side-encrypted storage service.

23. International data processing and transfers

TuckR89 Cloud and its service providers may process information in the United States and other countries where service providers operate. Where required by law, appropriate safeguards are used for international transfers.

24. Children's privacy

TuckR89 Cloud is not directed to children under 13, or a higher minimum age where required by applicable law. We do not knowingly collect personal information from children in violation of applicable law. Contact us if you believe a child has provided information without appropriate authorization.

25. U.S. state privacy rights

Residents of certain U.S. states may have rights to know/access, correct, delete, obtain a portable copy of, or opt out of certain uses of personal information, subject to legal exceptions. TuckR89 Cloud does not knowingly sell customer files or use customer file contents for targeted advertising, and we do not knowingly sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable law.

26. EEA and UK privacy rights

Where applicable, users may have rights of access, rectification, erasure, portability, restriction, objection, withdrawal of consent where processing is based on consent, and complaint to an appropriate supervisory authority. These rights may be subject to legal exceptions.

27. Exercising privacy rights

To submit a privacy request, email [email protected]. We may request information reasonably necessary to verify the request and protect the account from unauthorized disclosure or deletion.

28. Changes to this Policy

We may update this Policy as our Service, infrastructure, legal requirements, or business practices change. We will update the Last Updated date when changes are published and provide additional notice where required by law.

29. Contact information

TUCKR89 LLC
Privacy: [email protected]
Support: [email protected]
Security: [email protected]

30. Effective date and Last Updated

Effective: September 17, 2026
Last Updated: September 17, 2026