TECKHEADS is a product of Nairly, its parent business. Nairly is operated by Jaeon George Bucknall, a sole trader based in Mayfair, London, UK.
Last updated: 07/10/2026. Effective date: 07/10/2026.
This Privacy Policy explains how TECKHEADS ("we", "us", "our") collects, uses, shares, and protects information about you when you use the TECKHEADS platform, mobile application, and website (together, the "Service"). This Policy should be read alongside our Terms of Service. We are the data controller for the personal data described in this Policy, unless stated otherwise. TECKHEADS is operated by Jaeon George Bucknall, trading as Nairly, a sole trader based in England, operating from Mayfair, London, UK. Our ICO registration number is [ICO REGISTRATION NUMBER].
1. Information We Collect
1.1 Information You Give Us
Account information: name, username, email address, password (hashed), profile photo, and optional bio or founder details.
Content you submit: startup ideas, Validation Thread submissions, feedback, comments, Stories, messages, and Resources you upload.
Content you submit to Air, which can include text, screenshots, images, files, links you ask Air to read, and voice input.
Payment and payout information: if you subscribe or send Support, your payment is handled by Apple, Google, or Stripe, and we do not store full card details. If you want to receive Support, Stripe collects your identity documents and bank details to verify who you are and pay you (see Section 5B).
Support activity: Support you send or receive, including amounts, any messages, your thank-you message, and your payout history.
Identity verification information, if you apply to be Verified (see Section 5B).
Date of birth and, if you choose, country of residence, which you give at sign-up (see Section 5C).
Communications you send us, including support requests.
1.2 Information Collected Automatically
Usage data: pages and screens viewed, features used, contribution points activity, session length and timestamps.
Device and log data: IP address, device type, operating system, browser type, app version, and crash logs.
Approximate location, inferred from your IP address, used for basic analytics and fraud prevention only.
If a sign-up attempt is blocked because the person is under 16, a hashed device identifier and a timestamp, kept for 24 hours (see Section 5C).
Advertising identifiers (such as your device's IDFA on iOS), collected by our advertising partner to serve and measure ads, only where you have given the relevant permission (see Section 5A).
1.3 Information From Third Parties
If you sign in via a third-party service (for example, Google or Apple Sign-In), we receive the basic profile information you authorise that service to share.
Aggregated or anonymised analytics from our service providers.
Information from Stripe, Apple, Google, and our subscription management provider about your payments, subscription status, payout eligibility, and verification outcome.
2. How We Use Your Information
We use your information to:
create and administer your account, and authenticate you when you log in;
operate the Service, including Validation Threads, contribution points, Stories, messaging, and the Resources library;
process your submissions through the Air AI advisor and other AI-assisted features (see the AI Disclosure Policy section of Legal, Data & Account Deletion);
communicate with you about your account, updates to the Service, and, where you have consented, product news;
monitor, investigate, and enforce our Terms of Service and Community Guidelines, including detecting fraud, spam, or manipulation of the contribution points system;
understand how the Service is used, and to maintain, test, and improve it;
display and measure advertising within the Service, where permitted (see Section 5A);
process subscriptions, Support payments, and payouts, and keep the financial records we are required to keep;
verify your identity and age where needed for Verified and for payouts, and to prevent fraud (see Section 5B);
comply with our legal obligations and respond to lawful requests from public authorities.
3. Legal Basis for Processing (UK GDPR)
We rely on the following legal bases, depending on the activity:
Contract, processing necessary to provide the Service you have signed up for, such as maintaining your account and displaying your submissions to other users.
Legitimate interests, for product analytics, fraud and abuse prevention, and improving the Service, balanced against your rights and expectations.
Consent, for optional marketing communications, non-essential cookies (see the Cookie Policy section of Legal, Data & Account Deletion), and personalised advertising (see Section 5A). You may withdraw consent at any time.
Legal obligation, where we must retain or disclose information to comply with the law, for example tax, accounting, and financial crime rules.
Explicit consent, where identity verification involves biometric data (such as matching a selfie to an ID document). We will ask for your explicit consent first, and you can choose not to verify.
Legal obligation and legitimate interests, for age checks required by laws such as the UK Online Safety Act and to protect children and young people on the Service (see Section 5C).
4. How We Share Your Information
We do not sell your personal data. We share information only in the following circumstances:
Other users, where you choose to make content visible on the Service (for example, a submitted idea shown to a Validation Thread, or Contribution Content attributed to your username).
Service providers and processors who host our infrastructure, provide analytics, process payments, or support customer service, under data processing agreements that require them to protect your information and use it only for the purposes we specify.
AI providers, currently Google (Gemini models), to generate Air's automated feedback. Content you submit to Air is sent to this provider for processing (see the AI Disclosure Policy section of Legal, Data & Account Deletion and Section 5 below).
Advertising providers, currently Google AdMob, to serve and measure advertising within the Service (see Section 5A below).
Creators you support: when you send Support, the Creator can see your name or username, the amount, and any message you include. We do not share your card details with Creators.
Payment, subscription, and identity providers: Stripe (payments, payouts, and identity checks), Apple and Google (store billing), and our subscription management provider, to process payments, verify identity, prevent fraud, and manage subscriptions. Stripe acts as an independent controller for some of its own legal and fraud-prevention purposes, under its own privacy policy.
Age assurance providers: where an extra age check is required, an independent age assurance provider runs the check and tells us only whether you passed or failed (see Section 5C).
Legal and safety purposes, where we believe disclosure is necessary to comply with the law, enforce our Terms, or protect the rights, property, or safety of TECKHEADS, our users, or the public.
Business transfers, if we are involved in a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality safeguards.
5. AI Processing of Your Content
When you use Air or any other AI-assisted feature, the content you submit (such as an idea description, pitch text, landing page copy, screenshots, images, files, links you ask Air to read, or voice input) is transmitted to our third-party AI provider to generate a response. We have contractual arrangements in place that restrict our AI providers from using your content to train their own general-purpose models, except where a provider's standard terms otherwise apply and we have disclosed this to you. Do not submit information via Air that you would not want processed by a third-party AI system.
5A. Advertising
TECKHEADS displays advertising within the Service using Google AdMob. Depending on your permissions and location, ads may be personalised or non-personalised.
On iOS, if we intend to use your device's advertising identifier (IDFA) for personalised ads, we will ask for your permission via Apple's App Tracking Transparency prompt. If you decline, you will still see ads, but they will not be personalised using your IDFA.
If you are located in the UK or EEA, we (via Google's consent management tools) will also ask for your consent before using your data for personalised advertising. You can withdraw this consent at any time through the app's privacy settings.
AdMob may use cookies, device identifiers, and similar technologies as part of ad serving and measurement (see the Cookie Policy section of Legal, Data & Account Deletion for further detail).
5B. Payments, Payouts, and Identity Verification
Payments for subscriptions and Support are handled by Apple, Google, or Stripe, depending on how you pay. We receive confirmation of the payment and a record of the transaction, but not your full card details.
Creators: to receive Support, you must be at least 18 (or the minimum age in your country, if higher) and complete Stripe's onboarding. Stripe collects your identity documents, date of birth, address, and bank details to verify you and pay you, and tells us whether you passed and can receive payouts.
Verified: if you apply to be Verified, an identity provider such as Stripe Identity checks your identity. This can involve scanning an ID document and, in some cases, a selfie that is matched to it. A selfie match uses biometric data, which is special category data, so we only do this with your explicit consent. If you do not consent, you can still use TECKHEADS but will not be able to become Verified.
Records: we keep a record of subscriptions, Support payments, fees, refunds, chargebacks, and payouts. We keep these financial records for the period required by UK tax and accounting law, even if you delete your account.
Fraud prevention: we and our payment providers may use information about your device, payment method, and activity to detect and prevent fraud and misuse, including limiting how often payments can be made.
5C. Age Verification
We ask for your date of birth when you create an account, to enforce our minimum age of 16 and to apply age-appropriate safety, privacy, and payment settings. Full detail is in our Age Verification Policy.
What we keep: your date of birth (encrypted), your age group, your region, and, where an extra age check was needed, only the result of that check (pass or fail, the method, the provider, the time, and a reference). We never store your selfie, your ID document, or your full ID number.
Extra age checks: in some countries, such as the UK and Australia, the law requires stronger age assurance. An independent age assurance provider runs the check in its own secure flow. If you choose a face age estimate or photo ID, you share your image or document with that provider, not with us, and it deletes them under its contract with us.
Under 16: no account is created and the details you entered are cleared. To stop an immediate retry with a different date of birth, we keep a hashed device identifier and a timestamp for 24 hours, and we do not keep the date of birth entered.
Reports: if someone reports an account as possibly belonging to someone under 16, we may ask the account holder to confirm their age, and we keep a record of each age decision (who, when, method, and result) but never the raw images or documents.
Retention: your date of birth and check result are kept while your account exists, and all age data is removed within 30 days after you delete your account.
Never shown: we never display your date of birth or age on your profile, and we recalculate your age group each time you sign in.
6. International Data Transfers
Some of our service providers, including our AI, advertising, payment, identity, and age assurance providers, may process data outside the UK. Where we transfer personal data outside the UK, we rely on adequacy regulations, the UK International Data Transfer Addendum, or other mechanisms recognised under UK GDPR to ensure your data receives an equivalent level of protection.
7. Data Retention
We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where content has been shared with other users in ways that cannot reasonably be unwound, or where we are required to retain information for legal, accounting, or fraud-prevention purposes. Financial and transaction records (subscriptions, Support, and payouts) are kept for the period required by UK tax and accounting law, even after account deletion. Full detail is set out in the Account Deletion Policy section of Legal, Data & Account Deletion.
8. Your Rights
Under UK GDPR, you have the right to:
access the personal data we hold about you;
correct inaccurate or incomplete data;
request erasure of your data, subject to the exceptions in Section 7;
restrict or object to certain processing, including processing based on legitimate interests;
request a portable copy of data you have provided to us;
withdraw consent at any time where processing is based on consent, including personalised advertising;
lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise these rights, contact us at Nairlysupport@gmail.com. We may need to verify your identity before actioning a request.
9. Children
TECKHEADS is not directed at children under 16, and our minimum age is 16 in every country. Our Age Verification Policy, available in the Age Verification Policy section of Legal, Data & Account Deletion, explains how we check age. Users must be at least 16 to create an account, and users aged 16–17 confirm they have parental or guardian permission. Receiving Support payouts requires you to be 18 or over. We do not knowingly collect personal data from children under 13. If we become aware that we have done so, or that an account belongs to someone under 16, we will close the account and delete the data. We do not knowingly serve personalised advertising to users we know to be under the age of consent.
10. Security
We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, and Row Level Security on our database. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.
11. Cookies
We use cookies and similar technologies for essential functionality, analytics, advertising, and (where you consent) other purposes. See the Cookie Policy section of Legal, Data & Account Deletion for full details.
12. Changes to This Policy
We may update this Privacy Policy. Where changes are material, we will provide reasonable notice before the changes take effect.
13. Contact Us
Questions about this Privacy Policy can be directed to Nairlysupport@gmail.com or Mayfair, London, UK. TECKHEADS does not currently have a formal Data Protection Officer, as this is not a legal requirement for our size and type of processing. Data protection queries should be directed to Nairlysupport@gmail.com.