Tidy Pick privacy policy

Last updated: October 20, 2026

Tidy Pick ("the app") is made by Tinker Lab. It builds combined pick lists from a Shopify store's open orders. This policy explains what information the app uses and stores when a merchant installs it.

Information we access

With the merchant's permission, the app reads from Shopify:

• Open orders: order numbers, tags, dates and the unfulfilled quantity of each item.
• Products: titles, variants, SKUs, vendors, product types, images and, if the merchant chooses one, a bin-location metafield.
• Store locations and the store's time zone, for filters.

The app does not access or store customer personal information such as names, email addresses, phone numbers or addresses.

Information we store

• The store's domain and the access token Shopify issues to the app.
• The merchant's app settings (for example the "picked" tag name).
• Pick lists the merchant starts on the app: order IDs and numbers, product details and how many of each item have been picked.

How we use it

Only to provide the app's features: showing, printing and tracking pick lists, and adding the merchant's "picked" tag to orders when they ask the app to. We don't sell or share this information, and we don't use it for advertising.

Where it is stored

On our hosting provider and database provider, in encrypted connections and storage. Billing is handled entirely by Shopify; we never see payment details.

How long we keep it

When a merchant uninstalls the app, we delete everything we store for that store. We also honour Shopify's data-deletion requests.

Data processing terms

These terms form the data protection agreement between Tinker Lab and each merchant who installs Tidy Pick. By installing the app, the merchant agrees to them.

• The merchant is the controller of their store's data, including any customer information in their orders. Tinker Lab processes it only on the merchant's behalf, to provide the app's features.
• We process only the minimum data needed, for the purposes described in this policy, and never sell it, share it for advertising, or use it to make automated decisions about customers.
• We keep data confidential, encrypt it in transit and at rest, and limit access to the people who operate the app.
• We use the following sub-processors to run the app: Render (hosting) and Neon (database). Shopify processes billing.
• We help merchants respond to their customers' privacy requests and honour Shopify's data-request and deletion webhooks.
• If we become aware of a security incident affecting the merchant's data, we notify the merchant without undue delay.
• When the app is uninstalled, we delete the merchant's data as described above.

Contact

Questions or requests: tinkerlab.support@gmail.com