Privacy policy

This is what TinyOrange's apps and website do with information, in plain words. TinyOrange is Edd Smith, in the UK. Questions to tinyorange.cloud@gmail.com.

Signing in

Every app uses Google sign-in and nothing else. We store the name and email address Google gives us. No passwords, so none to leak.

What each app holds

Only what it needs.

  • Karl — collection and delivery jobs: your customers' names, phone numbers, addresses, vehicle registrations, photographs of their vehicles, condition reports and signatures. Entered by your team, seen only by your team.
  • Vince — your own vehicles and trailers, each daily check with its photos, the driver's declaration, and the location and time of the check. No customer data.
  • Hourglass — your staff's hours, your clients, your invoices.
  • Clara — your own books: income, expenses, invoices, and your tax details.
  • James — public procurement notices and the notes you make on them.
  • Marco and MarcoRV — destinations, your saved vehicles and your own address notes. Your location is used only while a route is running, to guide you, and is never shared or stored as a track.
  • Vivian — the photographs and words a photographer chooses to publish. Vivian publishes what is in the connected Drive folder, so only put in it what you are happy to have public.
  • Eddy — the enquiries visitors make on a business's website and the contact details they choose to leave.

Where it lives

Google Firebase, in Google's London region, for the database and every file. A few things run outside the UK:

  • Eddy's replies — when Eddy's own rules cannot answer a visitor's question, the question is sent to Anthropic, in the US, who write the reply. Anthropic do not use it to train their models.
  • Eddy's estimates — to price a job, the collection and delivery places a visitor gives are sent to Google Maps, to work out the distance.
  • Eddy's account emails — the emails we send a business about its Eddy account (a trial ending, a monthly limit nearly reached) go through Resend, in the US. They carry the business's name and email address and nothing a visitor typed.
  • Vivian's web server — runs in Google's US region. It shows the published pages and keeps nothing itself.
  • A small live feed — upload progress and app health counts, in Google's Belgium region, carrying no personal data beyond an account id.

Who sees it

Your business's own members, by the role you gave them. TinyOrange staff (Edd) can read a business's data, only to support it, fix problems or keep the service running. We do not sell it, use it for advertising, or email your customers.

Cookies and tracking

None. The apps keep you signed in using your browser's own storage, not tracking cookies. The website loads no third-party scripts or fonts; there is no analytics script.

Keeping and deleting

Kept while your account is active. Ask and it is deleted; close a job, a check or an invoice and it stays only because it is your record. If a free trial ends and you do not subscribe, or you cancel a paid plan, the app turns read-only — still there to read and to copy. While your business uses another TinyOrange app nothing is deleted. Once none is left, we email you a download of everything at 30, 45 and 60 days, and it is deleted a week after the last one (Vivian galleries are never deleted: see the terms). Backups: a copy of the database is taken every night, and deleted files stay recoverable, for 30 days, in London. So anything deleted is gone from the apps at once and from the backups within 30 days.

Your rights

See what we hold, correct it, delete it, take a copy, or complain to the ICO — set out on our GDPR page.

Changes

If this page changes in a way that matters, we say so in the app.

Last updated 4 November 2026.