Privacy policy

Last updated: September 13, 2026

What Tatties stores

Tatties stores the following data locally on your device using IndexedDB - your browser's built-in database:

• Tattoo info you enter: name, artist, studio, style, date, notes, cost, sessions
• Photos you upload or take
• Body and skin tone settings

Nothing is sent to any server by default. Something only leaves your device when you use cloud sync or Magic cut yourself (see below).

Optional cloud sync

If you create an account, your collection (including photos) is encrypted in transit and stored on a secure server in the EU (Supabase, Ireland). You control when sync happens. You can delete your account and all associated cloud data at any time via Settings → Account.

Magic cut (optional AI cut-out)

Magic cut lets an AI find the tattoo in your photo. It only works when you are signed in and tap the button yourself; the app asks for your consent every time before sending. That one photo then goes via our server to our AI partner Replicate (United States), solely to recognise the tattoo. We delete the photo at Replicate straight after and keep no copy ourselves; Replicate deletes the processing automatically within an hour. We only keep a counter (how often you used Magic cut this month), linked to your account. If you do not use Magic cut, no photo leaves your device. Because Replicate is outside the EU, this transfer is based on your explicit consent per photo.

What we do NOT collect

• No behavioural tracking: no click paths, no screen tracking, no advertising profiles
• Usage statistics only if you switch them on yourself (see below); off by default
• No advertising or ad networks
• No data sharing with third parties, except the one photo you choose to send with Magic cut (see below)

Sharing anonymous usage (optional)

In Settings you can turn on ‘Share anonymous usage’. It is off by default. With it on, the app sends at most one message per day to our own server in the EU containing: a random number the app generates itself (not an account or device id), the date, the app version, your language, whether you opened the 3D view, and which band your number of tattoos falls into (for example “4-10”). No names, no photos, no tattoo data, no location, no click tracking. We use it for one question: do people come back. Switch it off and sending stops immediately; rows sent earlier contain nothing that identifies you.

Waitlist & notify-me

If you signed up for early access on tatties.app, we store your email address to notify you when the app launches. We will not use it for anything else, and you can request deletion at any time by emailing hello@tatties.app.

Your rights (GDPR)

• Access & correct - all your data is visible and editable in the app
• Delete local data - use “Erase all local data” in Settings, or clear your browser's site data for tatties.app
• Delete cloud data - delete your account in Settings → Account (this also erases the Magic cut counter)
• Portability - use the Export function to download a copy of all your data
• Waitlist removal - email us and we remove you within 48 hours

Data controller

Tatties - hello@tatties.app