Privacy Policy

We use your information to:

• Provide and maintain the Tuka service
• Create and manage your account
• Show you personalized recommendations based on your location and preferences
• Connect you with friends who are also using Tuka
• Enable you to create, share, and discover drops
• Improve and optimize our app's performance
• Send you service-related notifications (e.g., friend requests, comments on your drops)
• Respond to your support requests
• Detect and prevent fraud, abuse, and security issues

We do NOT sell your personal information. We share your information only in these limited circumstances:

With Other Users:Your profile information, drops, comments, and collections are visible to other Tuka users based on your privacy settings. Your exact location is never shared—only the locations of your drops.

With Service Providers: We use trusted third-party services to help us operate Tuka:

• Clerk (Authentication and user management)
• Cloudinary (Image hosting and optimization)
• Google Places API (Location geocoding and place information)
• Google Gemini API (AI concierge — generates the chat and text-message replies)
• MongoDB Atlas (Database hosting)
• Twilio (Text message delivery and receipt)
• Expo Push Notifications (Push notification delivery)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

AI Concierge:Our concierge replies are generated by an artificial intelligence service (Google Gemini). To produce a reply, we send that service the messages you exchange with the concierge, including earlier messages in the same conversation and any contact details you choose to type into the chat, along with the hotel's list of recommendations and what helps tailor the reply (what you have told the concierge about your trip, and the places you have opened, liked or saved; see section 9). We use a paid Google API tier under terms that prohibit Google from using this content to train or improve its models; Google retains it only briefly to detect abuse. The concierge is automated—please avoid sending sensitive personal information (such as payment card, health, or government ID details) in the chat or by text.

For Legal Reasons: We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Where We Store Your Data: Your data is stored on secure cloud servers provided by MongoDB Atlas and Cloudinary, located in the United States.

How We Protect Your Data:

• All data transmission is encrypted using HTTPS/TLS
• Passwords are encrypted and never stored in plain text
• Database access is restricted and monitored
• Regular security audits and updates

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

We retain your information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time through the app settings.

When you delete your account:

• Your profile, drops, comments, and personal information are permanently deleted
• Some anonymized usage data may be retained for analytics
• Deletion is irreversible and cannot be undone

You have the following rights regarding your personal information:

Access: You can access your personal information at any time through the app.

Update: You can edit your profile information, including name, username, and profile picture.

Delete:You can delete your account and all associated data through Settings → Privacy and Permissions → Delete Account.

Control Permissions: You can manage device permissions (location, contacts, camera, photos) through your device settings.

Privacy Preferences:You can control who can follow you, send friend requests, and see your activity status through Settings → Privacy and Permissions.

Data Portability: Contact us at support@tuka.world to request a copy of your data in a portable format.

Tuka is intended for users aged 10 and older. If you are under 18, you must have permission from a parent or legal guardian to use Tuka.

We do not knowingly collect personal information from children under 10. If we become aware that a child under 10 has provided us with personal information, we will take steps to delete that information.

Parents: If you believe your child under 10 has created an account, please contact us at support@tuka.world to request deletion.

If you provide your mobile phone number (for example, to receive a concierge text about a place you liked, or to continue a chat conversation by text), you consent to receive text messages from Tuka related to that request.

• We do not sell, rent, or share your mobile number with third parties for their own marketing purposes. Your number is used only to send you the messages you requested.
• You may receive recurring automated concierge text messages from Tuka (for example, reservation booking links and replies to your questions) at the number you provide. Message frequency varies based on your activity and requests — these are tied to your specific concierge interactions, not scheduled marketing broadcasts.
• Message and data rates may apply, depending on your carrier and plan.
• Reply STOP at any time to opt out of further messages. Reply START to opt back in. Reply HELP for help.
• Carrier delivery is not guaranteed; carriers are not liable for delayed or undelivered messages.

The Tuka mobile app does not use cookies. The Tuka website uses a small number of cookies, all of them set by us. Most are needed to make the site work; the one exception, tuka_tap, only notes which tag or QR code you used and is not set if you choose “Essential only”. We do not use advertising cookies, and we do not track you across other websites or apps. If you choose “Essential only”, we still count conversations with the concierge, anonymously: without your identifier and without what you wrote, so the hotel can see how often the concierge is used.

• tuka_guest_id(1 year) — a random identifier, so your saved places, trip and concierge conversation are still there when you come back. It is not linked to your name unless you give it to us.
• tuka_unlocked_<hotel> (1 year) — remembers that you have unlocked a hotel's full list of recommendations, so you are not asked again. Cleared when you sign out.
• tuka_staff_<hotel> (30 days) — hotel staff only: keeps staff signed in to that hotel's console after they enter the passcode.
• tuka_internal (1 year) — set only on our own team's and hotel staff's devices (for example when signing in to the staff console), so their activity is left out of a hotel's visit statistics.
• tuka_tap(2 minutes) — when you open Tuka from a tag or QR code in the hotel, notes which spot it was (the front desk or the bar, say), so the hotel can see which ones guests use. Not set if you have chosen “Essential only” — though the spot is still noted in your trip profile (below) so the concierge can tailor its suggestions.
• tuka_cookie_consent(1 year) — remembers the choice you make in the cookie banner, so we don't ask again.
• Sign-in cookies from Clerk— only if you create an account or sign in. These keep you signed in and are governed by Clerk's privacy policy.

Your trip profile.So the concierge's suggestions fit your trip, we keep a short profile against tuka_guest_id at each hotel: what you tell the concierge about your trip (who you're with, what the trip is about, any must-haves and an optional note), what you tell it about your tastes as you chat (for example, that you love live music or would rather skip bars), the tag or QR code you scanned to open Tuka, and the last places you opened. This is part of how the concierge works, so it is kept whichever cookie choice you make, separately from the usage records below; it is never sold or used for advertising. It is deleted 60 days after it last changes. You can change or clear your trip answers, and what the concierge has learned, at any time from the concierge chat, or contact us (section 13) to delete the whole profile sooner.

We also record how the site is used — pages viewed, recommendations opened, searches run — to give hotels aggregate statistics and to improve Tuka. Those records are kept against the random identifier above, not against your name.

Videos from TikTok or Instagram may set their own cookies, but only after you tap one to play it. See Third-Party Links below.

Tuka may contain links to third-party websites or services (such as Google Maps for location information). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Some recommendations include short videos by creators on TikTok or Instagram. Nothing is loaded from those platforms until you tap a video to play it; when you do, the video plays in TikTok's or Instagram's own player, and that platform may set its own cookies and collect information under its own privacy policy.

Tuka is operated in the United States. If you access Tuka from outside the United States, your information will be transferred to, stored, and processed in the United States. By using Tuka, you consent to this transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. Your continued use of Tuka after such notification constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Triple W Collective
Email: support@tuka.world
Website: https://tuka.world

For privacy-specific inquiries or to exercise your data rights, email: privacy@tuka.world