Privacy policy

This is what TinyOrange's apps and website do with information, in plain words. TinyOrange is Edd Smith, in the UK. Questions to tinyorange.cloud@gmail.com.

Signing in

Every app uses Google sign-in and nothing else. We store the name and email address Google gives us. No passwords, so none to leak.

What each app holds

Only what it needs.

  • Karl — collection and delivery jobs: your customers' names, phone numbers, addresses, vehicle registrations, photographs of their vehicles, condition reports and signatures. Entered by your team, seen only by your team.
  • Vince — your own vehicles and trailers, each daily check with its photos, the driver's declaration, and the location and time of the check. No customer data.
  • Hourglass — your staff's hours, your clients, your invoices.
  • Clara — your own books: income, expenses, invoices, and your tax details.
  • James — public procurement notices and the notes you make on them.
  • Marco and MarcoRV — destinations, your saved vehicles and your own address notes. Your location is used only while a route is running, to guide you, and is never shared or stored as a track.
  • Vivian — the photographs and words a photographer chooses to publish. Vivian publishes what is in the connected Drive folder, so only put in it what you are happy to have public.
  • Eddy — the enquiries visitors make on a business's website and the contact details they choose to leave.

Where it lives

Google Firebase, in Google's London region, for the database and every file. Nothing leaves the UK except a small live upload-status feed in Google's Belgium region carrying no personal data.

Who sees it

Your business's own members, by the role you gave them. TinyOrange staff are blocked by the access rules from reading any business's data. We do not look at it, sell it, use it for advertising, or email your customers.

Cookies and tracking

None. The apps keep you signed in using your browser's own storage, not tracking cookies. The website loads its fonts from Google, which means Google sees the request; there is no analytics script.

Keeping and deleting

Kept while your account is active. Ask and it is deleted; close a job, a check or an invoice and it stays only because it is your record.

Your rights

See what we hold, correct it, delete it, take a copy, or complain to the ICO — set out on our GDPR page.

Changes

If this page changes in a way that matters, we say so in the app.

Last updated 20 September 2026.