Skip to main content
中文
Sign in

Privacy Policy

Last updated:

TickTad ("TickTad") is operated by Bashbox ("Bashbox", "we", "us", or "our"), with an address at The Waterfront, 1 Austin Road West, Hong Kong. Bashbox is the data controller responsible for the personal information described in this policy. You can reach us at [email protected].

We collect the following categories of information:

  • Account and contact data — such as your name, email address, a unique user ID (issued when you sign in, for example via Google), and household name when you register or contact us.
  • Household data — such as tasks, routines, calendar events, documents and photos you upload (e.g. receipts, contracts, passports and visas), expense records, meal plans, and helper-management details (e.g. name, nationality, phone number, contract and salary) you enter about your household and its members.
  • Usage data — such as pages or features you use and actions you take (collected through product analytics by PostHog), approximate location (derived from your IP address), device type, browser, and timestamps.
  • Communications — such as messages you send us for support, feedback, or other enquiries.
  • Payment data — if you purchase a paid plan in the future, our payment processor collects billing details on our behalf (we do not store full card numbers).

Photos and PDFs you upload (such as receipts) are read with on-device OCR on your device, so their contents don't leave your device to be read.

  • Directly from you — when you register, enter information, or contact us.
  • Automatically — through cookies and similar technologies when you use our website and services.
  • From members of your household — when the people you invite add or update information.

We use the information we collect to:

  • Provide, operate, maintain, and improve the Services (performance of our contract with you);
  • Create and manage your account and household;
  • Communicate with you about updates, security alerts, and support;
  • Send you marketing communications where you have consented, which you can opt out of at any time;
  • Analyse usage in aggregated or de-identified form;
  • Comply with legal obligations and protect the rights, safety, and security of our users and the public.

We do not sell your personal information. We may share information with:

  • Service providers — including an account-authentication provider and cloud hosting providers based in Singapore, who process data on our behalf under data-processing agreements;
  • Your household members — information you choose to share within your household is visible to invited members according to their roles;
  • Legal and safety — where disclosure is required by law or necessary to protect the rights, safety, or security of our users or the public;
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We process and store information primarily in Singapore and, for account authentication, via our authentication provider. Where information is transferred across borders, we do so under appropriate safeguards as required by applicable law (for example, Standard Contractual Clauses where relevant).

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or de-identify it.

We store personal information on secure, access-controlled servers. We protect it with appropriate technical and organisational measures, including encryption of data in transit and at rest. We process personal information only for the purposes described in this policy and share it only as described in the "How we share information" section. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

  • Access a copy of the personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of your information, subject to legal retention requirements;
  • Request a copy of your information in a portable format;
  • Object to or restrict certain processing;
  • Withdraw consent at any time where processing is based on consent;
  • Opt out of marketing communications using the unsubscribe link in those messages.

In Hong Kong, under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to request access to and correction of your personal data. In Singapore, under the Personal Data Protection Act, you may request access to, correction of, and withdrawal of consent for your personal data. Where other laws apply to you (for example the EU/UK GDPR, California CCPA, or China PIPL), you may also have rights to erasure, portability, restriction, and objection.

To exercise any of these rights, contact us at [email protected]. If you are in Hong Kong, you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) under the Personal Data (Privacy) Ordinance (Cap. 486).

TickTad is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We and our partners may use cookies, local storage, and similar technologies for essential operation, preferences (such as theme), analytics, and marketing where permitted. You can control or delete cookies through your browser settings.

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will post the revised version on this page and update the "Last updated" date. Where required by law, we will notify registered users of material changes.

If you have questions or concerns about this policy or how we handle your information, contact us at [email protected] or write to Bashbox, The Waterfront, 1 Austin Road West, Hong Kong.