Privacy Policy

Last updated: May 2026

TatStudio is a local-first iOS app. Your portfolio lives on your phone. Here's exactly what we collect, why, and what we never do.

What we collect

• A random device token. We generate a single UUID on first launch and store it on your device. We send it with every generation request so we can count your free generations. We do not link it to your Apple ID, email, name, phone, or device identifiers. It cannot be reversed into a person.
• Your generation prompts (transiently). When you tap Generate, your prompt is sent to our server and forwarded to OpenAI's gpt-image-2 model to render the image. We do not log prompts to durable storage. OpenAI may retain them under their API terms — see openai.com/policies.
• Your portfolio. Stays in SwiftData on your device. We never see it, sync it, log it, or back it up.
• App Store purchase state. If you buy TatStudio Pro, Apple tells your device "this Apple ID is entitled." We never see your card details, name, or email.

What we never do

• No third-party analytics SDKs (no Mixpanel / Amplitude / Firebase / PostHog).
• No advertising SDKs.
• No crash-reporting SDKs (we use Apple's built-in MetricKit only).
• No data brokers, no affiliate tracking.
• No selling, no sharing, no "anonymized aggregate" reselling.

Third-party services we DO touch

• OpenAI (api.openai.com). Your generation prompt is sent to OpenAI to render the image. They process it under their API policy: openai.com/policies.
• Cloudflare (workers.dev). Our proxy server routes the request to OpenAI. Standard request metadata (IP, timestamp) is logged for abuse prevention only, retained ≤30 days.
• Apple App Store. Processes the one-time $19.99 unlock. We see a transaction identifier; never your card.

How long we keep things

On-device: forever, until you delete the app or tap "Delete everything" in Settings. On our servers: nothing about your portfolio. Request logs (IP, timestamp) ≤30 days. KV bucket of free-generation counters: indefinitely, keyed only by the random device UUID.

Deleting your data

Settings → "Delete every design" wipes your local portfolio. To also reset your free-generation counter, delete and reinstall the app — a new device token is generated on next launch.

Children

TatStudio is rated 17+ on the App Store (tattoo themes). We do not knowingly collect data from anyone under 17.

Contact

Questions? hello@toolbelt.app. We answer.