Privacy Policy

Last updated 24 August 2026

This explains what we collect, why we collect it, and which processors see it. We keep the list short on purpose.

01What we collect

Account data: your email, name, studio name and avatar if you sign in with Google.

Content: the tattoo photos you upload and the stencil frames and videos we generate from them.

Usage data: which templates you run, credit transactions, and technical logs needed to debug failed renders.

02Why we collect it

To run generations, show you your history, enforce credit limits, and take payment. We do not sell your data and we do not use your uploads to train models.

03Processors we use

Supabase hosts our database and handles authentication. Cloudflare R2 stores your uploads and rendered videos. fal.ai runs the image and video models. Our payment provider handles subscriptions and never gives us your full card details.

Each processor only receives what it needs to do its job.

04Retention

Uploads and renders stay in your account until you delete them or close the account. Deleting a generation removes its files from storage.

Closing your account deletes your profile, uploads and renders. Billing records are kept as long as tax rules require.

05Your rights

You can export or delete your data from the dashboard, or ask us to do it. If you are in the EU or UK you also have the right to object to processing and to lodge a complaint with your local authority.

06Cookies

We set a session cookie so you stay signed in. There is no advertising or cross-site tracking.

This document is a starting point written for the product as it is built, not legal advice. Have a lawyer review it before you take payments in production.