Privacy Policy

Effective date: September 12, 2026 · Last updated: September 12, 2026

This Privacy Policy explains how the operator of Tattoo AI (“Tattoo AI,” “we,” “us,” or “our”) handles information when you use our iOS app and related tattoo creation, editing, and preview services (the “Service”). For privacy questions or requests, contact support-tattoo-ai@meloryn.app.

1. Information we handle

• Account and session information. The app creates an account identifier and secure session credentials without requiring a name, email address, or traditional sign-up. This identifier links your saved content, preferences, and subscription access. It is pseudonymous, not a guarantee of anonymity.
• Preferences. Your onboarding selections may include gender, age range, tattoo experience, preferred body placements, styles, size, ink preferences, design intent, and reactions to inspiration images. These selections are stored locally and synchronized to your account to personalize the experience.
• Content and creation records. We process prompts, story or design descriptions, reference photos, editing instructions and selections, design settings, generated images, saved-library records, pinned items, and the status and timing of creation requests.
• Subscription and usage records. We process your app account identifier, product and transaction identifiers, subscription status and dates, purchase verification information, credit allowances, and usage. Apple handles payment details; we do not receive your full payment card number.
• Technical information. Our servers and subscription-processing services handle information such as IP address, device and operating-system information, app version, request timing, and error or service-status information to operate, verify, and protect the Service.
• Product analytics and diagnostics. We use PostHog to measure app launches, screens, feature interactions, onboarding choices, purchase outcomes, and creation status, and to receive application error reports. Records may include a pseudonymous account or installation identifier, session identifiers, language, device and operating-system details, app version, timestamps, selected design options, and structured error information. Expo Observe measures performance and reliability, such as launch and screen-transition timing, responsiveness, and application errors, using installation/session identifiers and technical device and app information. Network requests also expose an IP address to the receiving service. These records can relate to your account or device; they are not represented as anonymous.
• Notifications. If you allow notifications, we register an Expo push token with your app account, notification permission state, language, and registration timestamps so we can notify you when a design is ready. Delivery records include the creation job identifier and delivery/retry status.
• Support messages. If you contact us, we receive your email address, message, and any attachments you choose to send.

2. Photos, faces, and on-device previews

Portrait and AI editing. When you submit a reference photo or an image for AI processing, the image and relevant instructions are sent to our servers and third-party AI services. A reference may show a person’s face, body, or a pet. The processing uses visual features to create or edit the requested tattoo design, including preserving the appearance of a portrait subject.

We do not use these images to authenticate people, identify people across accounts, or build a face-recognition database. Tattoo AI does not create or store separate biometric templates for identity verification. The photos themselves and resulting images may still contain identifiable facial or body information and are handled as user content.

Try On. The current Try On feature places a tattoo image over a camera view or a photo selected on your device. The background photo and composed preview stay on your device unless you save or share them, or separately submit an image to an AI creation or editing feature. The tattoo artwork may be downloaded from our servers, and subscription access is checked online.

Only submit photos you have permission to use, including appropriate permission from anyone shown. Avoid unnecessary sensitive information in photos or prompts. Choosing an image for Try On does not authorize its use for a separate AI request.

3. Why we use information

We use information to operate your account, process your requested designs, maintain your library, apply your preferences, verify purchases, restore subscription access, manage credits, resolve failures, prevent misuse, and respond to support or privacy requests.

We also use product analytics and diagnostics to understand feature usage, improve the app, measure performance, and investigate errors. We do not sell your personal information, include third-party advertisements, or share data for cross-app behavioral advertising. PostHog session replay is disabled. Our product-event instrumentation excludes photo files, full prompts and stories, authentication tokens, and image URLs; technical error reports may still include stack traces and SDK-generated context. We do not use your submitted photos or prompts to train our own AI models. Third-party AI processing and retention are described below; this is not a promise of zero retention by those services.

Where data-protection law requires a legal basis, we rely on performance of the service agreement for requested features, legitimate interests for proportionate security and reliability measures, legal obligations where applicable, and consent where required. You may withdraw consent for future processing without affecting processing that was lawful before withdrawal.

4. Service providers and sharing

• Kie.ai and its AI model-processing providers: receive the prompts, reference or editing images, design settings, and request information needed to generate or edit your images. They may use infrastructure and model-processing providers to fulfill the request.
• Hosting and storage services: process account records, preferences, submitted content, results, and technical requests needed to host and deliver the Service.
• RevenueCat and Apple: process app identifiers, transaction information, device information, and subscription status to verify access, restore purchases, and handle billing. We do not send your tattoo photos or prompts to our subscription processor for billing.
• PostHog: receives product events, pseudonymous identifiers, and application error reports for analytics and troubleshooting. Our configured ingestion endpoint is in PostHog’s EU region. See PostHog’s privacy policy.
• Expo Observe: receives performance, reliability, and error telemetry, together with installation/session identifiers and technical app/device information. Selected route parameters containing content or account identifiers are filtered by our integration. See Expo’s privacy policy.
• Expo Push Service and Apple Push Notification service: process notification tokens, a localized completion message, and identifiers used to open the completed design. The completion message does not include your tattoo photo or prompt. Notification delivery is optional and depends on your device permissions.
• Support services: process correspondence you send us so we can respond.

Your library is not a public gallery. If you choose to share an image, the app opens the device’s sharing controls, and your selected destination handles that content under its own terms and privacy practices.

We may disclose information when required by law or when reasonably necessary to address fraud, security incidents, legal claims, or threats to people’s rights. A transfer of the Service to another operator may involve the associated data, subject to applicable law and appropriate notice.

5. Device permissions and local storage

Camera access is used for the Try On camera. The photo picker lets you choose images for the feature you are using. Permission to add photos is requested when saving a result to your Photos library. You can manage permissions in iOS Settings.

The app stores session credentials in secure device storage and uses local storage or caches for language, preferences, images, analytics identifiers and queues, diagnostic measurements, and pending requests. If you permit notifications, an Expo push token and your language are registered with our backend. You can turn notifications off in iOS Settings; when the app next synchronizes permission state, it disables the registration on our server. Turning notifications off does not delete earlier delivery records immediately.

Removing the app does not automatically delete server-side information or cancel a subscription. Images saved to Photos or shared outside the app remain under your control and the destination’s policies.

6. Retention

Our account and library storage. Uploaded reference images, prompts, preferences, generated designs, and related records are generally retained while your account remains in our systems, so you can access your history and content. They are not automatically deleted when generation finishes, a subscription ends, or a session expires. You can request account deletion as described below.

AI-provider copies. The AI service we use currently documents a retention period of 14 days for generated media and two months for processing logs and metadata. Those periods describe its copies, not your Tattoo AI library. Input photos and other copies held by AI processors are subject to their retention practices; we do not promise that deleting your Tattoo AI account immediately erases every provider-held copy. Contact us for help with a provider-related deletion request.

Analytics and diagnostics. Events and diagnostic records already delivered to PostHog or Expo may remain according to the service configuration, applicable provider retention, and our operational needs. Deleting your app account clears pending local analytics/diagnostic data and resets the PostHog identity, but the current account-deletion flow does not automatically erase previously delivered PostHog or Expo records. Contact us for help with an access or deletion request relating to these records. We do not promise immediate deletion of every provider-held record.

Push registrations and delivery records. Server registrations expire after 90 days without renewal; delivery records are scheduled for removal after seven days. Database cleanup may take additional time. Account deletion removes the account’s push registrations and delivery records from our active database.

Limited operational records. We keep technical and support records for as long as needed for their stated purpose, and may retain limited records where necessary for legal obligations, disputes, security, or fraud prevention. Following account deletion, a hashed deletion receipt remains for seven days to allow the app to confirm completion. A non-reversible subscription reference and aggregate allowance records may remain to prevent duplicate credits; these do not retain your photos, prompts, or app account identifier.

7. Deleting your account

Use Settings → Delete Account in Tattoo AI. You do not need an active Pro subscription. Once the request is accepted, account access is stopped and deletion runs in the background. The process removes account and preference records, uploaded and generated images in our active storage, creation history, and associated subscription-customer records. Temporary service failures may delay completion; the app provides a deletion status and retry flow.

Deletion also removes server-side push registrations and delivery records and clears the app’s related local session, cached content, and pending analytics/diagnostic data. Previously delivered analytics and diagnostic records are subject to the separate retention and request process above. It does not delete your original Photos library, images you exported or shared, or records independently held by Apple. Processing already sent to an AI service cannot be recalled immediately, and provider retention described above still applies.

Deleting your account does not cancel your Apple subscription. Manage or cancel it separately in your Apple subscription settings. If you cannot access the app or complete deletion, email support-tattoo-ai@meloryn.app. We may need information sufficient to verify your relationship to the account; do not send session tokens, passwords, or full payment details.

8. Security and international processing

We use access-controlled storage, authenticated access to account content, and time-limited image access for AI processing. No transmission or storage method can be guaranteed completely secure.

Our service providers may process information outside your country, including in the United States, where privacy laws may differ. International processing is subject to applicable data-protection requirements. Contact us for information about the providers and transfer safeguards relevant to your data.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of personal information, restrict or object to processing, or withdraw consent. You may also complain to your local data-protection authority. We will handle requests in accordance with applicable law, including applicable European, UK, and Turkish data-protection requirements, and will not discriminate against you for exercising your rights.

Contact support-tattoo-ai@meloryn.app to make a request. Because the app does not require an email-based account, we may need to verify ownership before providing or deleting account-specific information.

10. Age requirements

Tattoo AI is intended for adults aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action, including deletion.

11. This website and policy changes

This legal website uses no advertising, analytics scripts, or tracking cookies added by us. Its hosting service may process IP addresses and basic request information to deliver and secure these pages.

We may update this policy as the Service changes. The revised date will appear above. We will provide additional notice or request consent where required for material changes.

12. Contact

Tattoo AI privacy and support: support-tattoo-ai@meloryn.app.