Privacy policy

Last updated: October 29, 2026

What Tatties stores

Tatties stores the following data locally on your device in the app's built-in database:

• Tattoo info you enter: name, artist, studio, style, date, notes, cost, sessions
• Photos you upload or take
• Your body (shape, age, height, weight and measurements) and skin tone

Your collection, photos and body are not sent to any server by default. Recognising and cutting out your tattoo happens on your device itself; your photos do not go to an AI service. Your collection only leaves your device when you use cloud sync yourself. An anonymous daily count is only sent if you say yes to it (see below).

In the iPhone app you can turn on an aftercare reminder; those notifications are scheduled on your phone itself. The photo picker shows your recent photos only on your phone; the app only uses the photo you choose.

Optional cloud sync

If you create an account, your collection (including photos) and your body (shape, age, height, weight and measurements) are encrypted in transit and stored on a secure server in the EU (Supabase, Stockholm, Sweden). You control when sync happens. You can delete your account and all associated cloud data at any time via Settings → Account. If you sign in with Google or Apple, we only receive your email address from them (with Apple, this can be a forwarding address). We also note which version you use (iPhone app, Android app or web) and the last day you did, so we know which versions to keep improving.

What we do NOT collect

• No behavioural tracking: no click paths, no screen tracking, no advertising profiles
• No usage statistics, except the anonymous daily count if you switch it on yourself (see below)
• No advertising or ad networks
• No selling of your data and no data to advertising companies (the service providers that make the app work are listed below)

Anonymous count (only if you say yes)

The app asks you once whether you want to share anonymous usage. It is off by default; you can switch it on or off at any time in Settings (‘Share anonymous usage’). The app sends at most one message per day to our own server in the EU containing: a random number the app generates itself (not an account or device id), the date, the app version, whether it is the iPhone app, the Android app or the web version, your language, whether you opened the 3D view, and which band your number of tattoos falls into (for example “4-10”). No names, no photos, no tattoo data, no location, no click tracking. We use it for one question: do people come back. We only do this with your consent, and the number is not linked to anything else. Switch it off and sending stops immediately; rows sent earlier contain nothing that identifies you.

Waitlist & notify-me

If you leave your email on tatties.app to hear when the Android app is in Google Play, we store your email address, whether you offered to help test, your browser language and the date. It is stored with Supabase (servers in the EU, Stockholm). We use it only to tell you when the app is out and, if you offered to help test, to add your address as a tester in Google Play (Google then knows it is on our test list). We delete the list once the Android app is in Google Play and everyone has been told. You can ask us to delete your address sooner by emailing hello@tatties.app.

Feedback

If you send feedback through the app, we receive your message, its type (bug or idea), the app version and the type of device (for example 'iOS app' and the screen width), an image if you add one, and your email address if you fill it in (when you are signed in it is filled in for you; remove it if you do not want a reply). An image is first scaled down and saved again, without location or other photo data. We do not store your feedback with your account; when you are signed in, the request does go through your session. We use it to answer your question and to improve the app. It is stored with Supabase (servers in the EU, Stockholm), forwarded to our mailbox and kept for at most 2 years. If you would like us to delete your feedback sooner, email hello@tatties.app.

Service providers

These companies process data on our behalf, only to make the app work: Supabase (database, storage and sign-in; servers in the EU, Stockholm) for your account and cloud sync; Resend for account emails (confirmation, password reset; it only receives your email address and the message) and to forward feedback from the app to our mailbox (message, image and, if you fill it in, your email address); Apple and Google only if you sign in with them (they give us your email address). Without an account the app uses none of these services, except Supabase when you send feedback.

Retention

We keep your cloud data until you delete your account; it is then fully erased within 30 days. Rows of the anonymous count are kept for at most 13 months. Feedback is kept for at most 2 years. Local data lives only on your device and is managed by you.

Age

Tatties is not intended for children under 16. We do not knowingly collect their data; if that has happened anyway, email us and we will delete it.

Your rights (GDPR)

• Access & correct - all your data is visible and editable in the app
• Delete local data - use “Erase all local data” in Settings, or delete the app (web version: clear the site data for tatties.app)
• Delete cloud data - delete your account in Settings → Account
• Portability - use the Export function to download a copy of all your data
• Waitlist removal - email us and we remove you within 48 hours

Data controller

Tatties, the Netherlands - hello@tatties.app