Privacy policy

Notice at collection and state privacy rights: see “Personal information we collect” (section 2) and “State privacy rights” (section 13). People in Europe: see “Notice to people in Europe” (section 14).

Kin Money, LLC (“Kin Money,” “we,” “us” or “our”) makes Tilly Reader. Tilly is a Chrome extension that reads web pages, PDFs and Google Docs aloud and highlights each word as it is spoken. This Privacy Policy explains how we handle personal information collected through:

the Tilly Reader extension for Chrome;
our website at tillyreader.com, including the waitlist, the blog, and sign-in, checkout and account pages when they open;
the emails we send; and
the other activities described here.

Together, these are the “Service.” Kin Money also makes Kin, a shared-money app at kinmoney.app. Kin has its own privacy policy. We do not combine your Tilly data with Kin data.

The short version

What you read stays on your computer. That includes the text of web pages, PDFs and Google Docs, the audio Tilly makes, anything you dictate, and your place in a page. Tilly does this work on your computer. It never sends any of it to us or anyone else.
Our server knows only who you are, whether you have paid, and your settings.
We never sell your personal information. We do not show ads, and we do not use your information for advertising.
We do not ask about dyslexia or any health condition. Using Tilly does not tell us anything about your health, and we do not try to work it out.
Usage counts and error reports are on by default. They never include what you read. You can turn them off in Tilly’s settings. In Europe, we ask first.

1. What stays on your computer

Tilly turns text into speech on your computer. These things are processed and stored there only, and are never sent to us:

the text of the web pages, PDFs and Google Docs you open with Tilly;
the audio Tilly makes;
anything you dictate;
your reading position in each page, which is saved under a scrambled code made from the page address, not the address itself; and
your Tilly settings on that computer.

Google Docs. To read a Google Doc, Tilly asks Google for a copy of the open Doc, using the Google account you are already signed in to in Chrome. That copy goes straight to Tilly on your computer. It never passes through our servers. Tilly can open only Docs you already have access to.

Chrome Web Store. Tilly’s use of information it gets from your browser follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that information only to provide and improve Tilly’s reading features. We never sell it, use it for ads, or let anyone read it.

2. Personal information we collect

Information you give us

Account data: your email address, or the ID and email address that Google or Apple gives us when you sign in with them. If you sign in with a code by text message, your phone number. Code accounts also set up an authenticator app, and we keep the data needed to check it.
Subscription data: whether your trial or subscription is active, your plan, and its dates.
Payment data: your name, email address and card, which you enter on the page of Stripe, our payment company. Stripe keeps your card details. We see only the card type, its last four digits and its expiry date.
Settings: your voice, speed, highlight colors and similar choices, so they follow you to your other computers.
Waitlist and newsletter data: your email address, if you join our waitlist or newsletter (they are one list).
Messages: what you send us when you email us, and our replies.

Information collected automatically

Usage counts (on by default, and you can turn them off): small events such as “a reading started,” with the voice type and the kind of page (web page, PDF or Google Doc). They are tied to a random ID. They never include the page text, its title or its address.
Error reports (on by default, and you can turn them off): what went wrong, your browser and extension version, and the page address with private parts removed. We remove everything after “?” and “#”. Google Docs and Drive links become just “docs.google.com/document”. Local files become “local PDF”.
Server logs: when you visit tillyreader.com or Tilly contacts our servers, our hosting companies keep standard logs for security, such as IP address, browser type, the time and the page requested.
Email data: our email provider may record when an email was delivered and whether you opened it or clicked a link in it.
Cookies: tillyreader.com uses only cookies that are needed for the site to work. Our Cookie notice lists them.

Information from others

Google or Apple, if you sign in with them: your name, email address (or an Apple private relay address) and an account ID. We never receive your Google or Apple password.
Stripe: whether a payment worked, and the card details listed above.

3. How we use your personal information

To run the Service: to create and secure your account, check your subscription, sync your settings, take payment, and send trial and renewal reminders, receipts and account messages.
To keep the Service safe: to stop abuse, fraud and attacks, and to limit how many sign-in codes are sent.
To fix and improve Tilly: usage counts and error reports show us which voices and kinds of pages people use and what breaks.
To send news, if you join the waitlist or newsletter: news about Tilly, its launch and new blog posts. Every email has an unsubscribe link.
To answer you when you contact us.
To follow the law: to keep tax and payment records, respond to lawful requests, and protect our rights and the rights of others.
To make combined statistics, such as how many readings started this week. We remove anything that identifies you, and we do not try to identify anyone from them.

If we want to use your information for a new purpose that does not fit these, we will ask you first.

No artificial intelligence training. We do not use your personal information, or anything you read, to train artificial intelligence models. Tilly’s voices run on your computer and learn nothing from you.

No automated decisions. We do not use your information to make automated decisions that have legal or similarly significant effects on you.

We use a few companies to run Tilly. Each gets only what it needs to do its job for us, under a contract that limits what it can do with it. None of them receives the text, audio, titles or addresses of what you read.

Company	What it does	What it receives
Supabase	Stores accounts and handles sign-in	Email address or Google or Apple ID, phone number for text sign-in, subscription status, settings
Stripe	Takes payment	Name, email address, card (entered on Stripe’s page). See Stripe’s privacy policy.
Resend	Sends our emails and keeps the waitlist	Email address and the messages we write
PostHog	Receives usage counts and error reports, if you leave them on	The events and cleaned error reports described in section 2
Cloudflare	Hosts tillyreader.com and serves voice downloads	Server logs. Voice downloads carry nothing about you.
Sent (sent.dm)	Sends sign-in codes by text message	Your phone number and the code

We also share personal information:

with professional advisors, such as lawyers, accountants and insurers, when they need it to advise us;
with authorities and others, when we believe in good faith that the law requires it, or to protect the rights, safety or property of our users, the public or us;
in a business transfer, if Kin Money or Tilly is sold, merged or reorganized. The new owner must keep the promises in this policy, and we will tell you before your information is covered by a different policy; and
when you ask us to.

We do not sell your personal information, and we do not share it for advertising.

5. How long we keep information

Account data, subscription data and settings: while your account is open. When you delete your account, we delete them and cancel your subscription within 30 days.
Error reports: 90 days, then they are deleted.
Usage counts: up to 2 years, then they are deleted.
Payment and tax records: as long as tax and accounting law requires, usually 7 years.
Waitlist and newsletter data: until you unsubscribe or ask us to delete it. If you unsubscribe, we may keep your address only to make sure we do not email you again.
Server logs: usually no more than 30 days.
Emails you send us: up to 3 years after the last message, unless we need them longer for a legal reason.

Copies in backups are deleted as the backups expire, usually within 30 days.

6. Your choices

Turn off usage counts and error reports in Tilly’s settings at any time.
See, download or change your data from your account page.
Delete your account from your account page, or by emailing us. Deleting it does not erase Tilly’s settings stored in Chrome on your computer. Removing the extension does.
Unsubscribe from news emails with the link in any of them. You will still get account emails, such as trial and renewal reminders.
Chrome permissions: Tilly asks for the fewest permissions it needs. It reads the current tab only after you start it. It can open Google Docs you already have access to. It asks for access to all sites only if you turn on auto-resume, and you can turn that off at any time.
Do Not Track and Global Privacy Control: we do not sell or share personal information for advertising, so there is nothing for these signals to opt out of. We still honor Global Privacy Control as an opt-out where the law requires it.
Not giving us information: you can use the website without an account. To use Tilly, we need an email address or a Google, Apple or phone sign-in, and a payment card for the trial.

7. Children

You need to be 13 or older to make an account, or have a parent or guardian set it up for you. We do not knowingly collect personal information from children under 13 without a parent’s consent. If you are a parent and think your child gave us information without your consent, email us and we will delete it.

8. Security

We protect data in transit with HTTPS. Every account can read and change only its own data. Sign-in uses Google, Apple, or one-time codes, so Tilly never handles passwords. No system is perfectly secure, so we cannot promise that your information will never be accessed without permission. If you find a security problem, please email help@tillyreader.com.

9. Where we process data

Kin Money is based in the United States, and so are most of the companies listed in section 4. Your personal information will be processed in the United States, where privacy laws may be less protective than where you live. Section 14 explains how we protect information from Europe.

10. Other sites

Our website and emails link to other sites, such as the Chrome Web Store and Stripe. We do not control them, and this policy does not cover them. Tilly reads the pages you open, but it does not change what those sites collect about you.

11. Changes to this policy

If we change this policy, we will update the date at the top. If we change what we collect or how we use it in a way that matters, we will email account holders before the change takes effect.

12. How to contact us

Email: help@tillyreader.com
Mail: Kin Money, LLC, 2261 Market Street STE 72267, San Francisco, CA 94114
Phone: (650) 523-3301

13. State privacy rights

This section applies to residents of U.S. states whose privacy laws apply to us, such as California, Colorado, Connecticut, Virginia, Texas and Oregon (the “State Privacy Laws”). Not every state gives every right below.

Your rights. Depending on where you live, you may ask us to:

know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to;
get a copy of your personal information;
correct personal information that is wrong;
delete your personal information; and
appeal if we turn down your request.

What we do not do. We do not sell personal information. We do not share it for targeted advertising. We do not use it for profiling that has legal or similarly significant effects. We do not knowingly sell or share the personal information of anyone under 16. We do not collect sensitive personal information to infer anything about you. The only sensitive personal information we handle is your sign-in, and we use it only to sign you in.

Making a request. Email help@tillyreader.com or write to us at the address in section 12. To protect your account, we will check that the request comes from you, usually by asking you to confirm it from the email address or phone number on your account. An authorized agent can make a request for you. We will ask for proof that you gave them permission, and may ask you to confirm your identity with us directly. We will not treat you differently for using these rights.

What we collected in the last 12 months.

Personal information	Category under California law	Why we collect it	Who we disclose it to	Sold or shared for ads
Account data and settings	Identifiers; customer records	Run the Service; security	Supabase; Sent	No
Subscription and payment data	Commercial information; customer records	Take payment; reminders; tax records	Stripe; Supabase	No
Waitlist and newsletter data	Identifiers	Send news you asked for	Resend	No
Messages you send us	Identifiers; customer records	Answer you	Our email providers	No
Usage counts and error reports	Internet or other electronic network activity	Fix and improve Tilly	PostHog	No
Server logs and email data	Identifiers (IP address); internet activity	Security; send email	Cloudflare; Resend	No
Sign-in data	Sensitive personal information (account sign-in)	Sign you in	Supabase	No

California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing. You may still email a request to help@tillyreader.com with “Shine the Light Request” in the subject line.

Nevada. We do not sell covered information as Nevada law defines it. Nevada residents may opt out of any future sale by emailing help@tillyreader.com.

14. Notice to people in Europe

This section applies to people in the European Economic Area, the United Kingdom and Switzerland (“Europe”). Here, “personal information” means “personal data” as the GDPR and UK GDPR define it.

Controller. Kin Money, LLC is the controller of your personal information. Our contact details are in section 12.

Our legal bases.

Purpose	Legal basis
Running the Service: account, subscription, settings, payment, reminders and account emails	Performance of our contract with you
Keeping the Service safe	Our legitimate interest in protecting the Service and its users; compliance with law
Usage counts and error reports	Your consent, which Tilly asks for at install. You can withdraw it in Tilly’s settings at any time.
Waitlist and newsletter emails	Your consent, given when you sign up. You can withdraw it with the unsubscribe link.
Answering you	Our legitimate interest in helping you, or performance of our contract with you
Tax, payment records and legal requests	Compliance with law; our legitimate interest in protecting our rights
Combined statistics	Our legitimate interest in understanding how Tilly is used

Your rights. You may ask us to give you access to your personal information, correct it, delete it, send a copy to you or another company, or limit how we use it. You may object to any use based on our legitimate interests, and you can withdraw consent at any time. Email help@tillyreader.com. If we turn down a request, we will tell you why.

Complaints. You can complain to the data protection authority where you live. In the UK, that is the Information Commissioner’s Office (ico.org.uk, +44 303 123 1113). In the European Economic Area, the European Data Protection Board lists each country’s authority at edpb.europa.eu.

Transfers out of Europe. We are based in the United States, so your personal information is processed there. When we or our service providers move personal information out of Europe, we rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission’s standard contractual clauses. Email us for a copy of the safeguards that apply.

Retention. Section 5 explains how long we keep each kind of information.

This policy is based on a template prepared and made publicly available by General Legal, PC. General Legal has not reviewed this policy, and it is not legal advice from General Legal.