Tuhdun

Privacy Policy

Effective date: May 21, 2026
Version: 0.1 (initial pre-release draft; will be updated and re-published before the public release of the Tuhdun mobile application)

1. About this policy

This Privacy Policy describes how Underhill Software LLC ("Underhill Software", "we", "us", or "our"), a limited liability company registered in the Commonwealth of Virginia, United States, collects, uses, and shares information when you visit tuhdun.com ("the website") or use the Tuhdun mobile application when it becomes available ("the App", collectively with the website, "the Service").

This is a pre-release draft published while Tuhdun is in development. It will be updated and re-issued before the App is made available to the public. Material changes will be communicated through the website and, once accounts exist, through in-App notifications and email.

2. Information we collect

The Service is designed to collect only what is necessary to function. Categories include:

  • Account information — when account creation becomes available, we collect your email address, your chosen display name, and authentication credentials managed by our identity provider (Clerk, Inc.). If you sign in with Apple or Google, we receive a unique user identifier and the email address you authorize for sharing.
  • User content — ideas, activities, events, locations, dates, notes, and scheduling proposals that you save or share within the App.
  • URLs and content you share to the App — when you use the share sheet or manual paste to capture an idea from another app or website, we receive the URL and any accompanying text. Our backend may fetch the public contents of that URL to extract structured information about the activity using an AI provider.
  • Device and usage data — device type, operating system, App version, push notification tokens, crash and error reports, and product usage events (e.g., "user saved an item", "user scheduled an event"). We collect this to operate, debug, and improve the Service.
  • Website analytics — when you visit tuhdun.com, we may collect basic access logs (IP address, browser type, page visited, referrer) for security and analytics purposes.

We do not collect biometric data, financial account numbers, government identifiers, health information, or precise location unless you voluntarily attach a location to an item you save.

3. How we use information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service
  • Process the activities and events you save, including running AI-powered extraction
  • Authenticate you and protect your account
  • Send transactional communications (e.g., notifications about scheduling proposals from people you've invited)
  • Detect, prevent, and respond to fraud, abuse, security incidents, and harmful activity
  • Comply with legal obligations, including tax, accounting, and law-enforcement requests
  • With your consent, send product update emails about Tuhdun

We do not sell your personal information, and we do not share it with advertisers for cross-context behavioral advertising.

4. Third-party service providers

We use service providers ("processors") to operate the Service. Each processor receives only the data necessary to perform its function and is bound by contractual obligations to protect that data. As of the effective date, our processors include:

  • Clerk, Inc. — user authentication and account management
  • Neon (Databricks) — managed PostgreSQL database hosting
  • Fly.io — application server hosting
  • Anthropic, PBC — AI-powered content extraction (Claude API)
  • OpenAI, LLC — backup AI provider, used only as a fallback
  • RevenueCat, Inc. — subscription and in-app purchase management
  • Apple Inc. — App Store, in-app purchases, push notifications (iOS)
  • Google LLC — Google Play, in-app purchases, push notifications (Android)
  • Sentry (Functional Software, Inc.) — error and crash reporting
  • PostHog, Inc. — product analytics
  • Pendo.io, Inc. (Novus) — mobile behavioral analytics, used during development
  • Axiom Pty Ltd — server-side log management
  • Cloudflare, Inc. — content delivery network, DNS, storage, and email routing
  • Expo (650 Industries, Inc.) — push notification delivery and mobile build tooling

We maintain a current subprocessor list and will update this policy when it changes materially. Each provider operates under its own privacy policy; links are available on request.

5. Data sharing with other people you choose

Tuhdun is designed for sharing — when you invite another person to a specific activity, they will see the details of that activity (title, description, location, dates) and the identities of other invitees on the same activity. You control which activities are shared with whom; sharing is per-item, not account-wide.

Information you share with other Tuhdun users may be retained by them in their own accounts even after you remove them or delete your account. We cannot recall information others have already received.

6. Data retention

We retain information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Specifically:

  • Account and user content: retained until you delete your account, plus a 30-day soft-delete window for accidental-deletion recovery, after which hard deletion occurs.
  • Server logs: retained for up to 90 days for security and operational purposes.
  • Backups: retained for up to 90 days, after which they are overwritten.
  • Tax and accounting records: retained for the period required by applicable law.

7. Your rights

Depending on where you live, you may have the following rights with respect to your personal information:

  • Access — request a copy of the personal information we hold about you
  • Correction — ask us to correct inaccurate or incomplete information
  • Deletion — request that we delete your personal information
  • Portability — receive a machine-readable copy of your data
  • Objection — object to certain processing of your information
  • Withdrawal of consent — withdraw consent where we rely on it as a legal basis

To exercise any of these rights, email admin@tuhdun.com. We will respond within 30 days. We may need to verify your identity before fulfilling the request.

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect and the right to opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

European Economic Area, United Kingdom, and Swiss residents have additional rights under the General Data Protection Regulation (GDPR) and equivalent local laws.

8. Children's privacy

Tuhdun is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact admin@tuhdun.com and we will promptly delete it.

9. International data transfers

Underhill Software LLC is based in the United States, and the Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. Where required by applicable law, we rely on standard contractual clauses or equivalent mechanisms to lawfully transfer personal information from your jurisdiction to ours.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. No security measure is perfect, however, and we cannot guarantee absolute security. In the event of a security incident affecting your personal information, we will notify you in accordance with applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at this URL and updating the "Effective date" at the top. When the App is in active use, material changes will also be communicated by email or in-App notification.

12. Contact

For any questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact:

Underhill Software LLC
Attn: Privacy
Email: admin@tuhdun.com
Virginia, United States