Privacy Policy

Last updated: May 2026

TatStudio is a local-first iOS app. Your portfolio lives on your phone. Here's exactly what we collect, why, and what we never do.

What we collect

• A random device token. We generate a single UUID on first launch and store it on your device. We send it with every generation request so we can count your free generations. Before your free-generation count is stored, we replace the token with a keyed one-way hash, so the token you send is never written down on our side. We do not link it to your Apple ID, email, name, phone, or device identifiers. It cannot be reversed into a person. It is still a device-level identifier that we keep past the end of your request, so we disclose it as one on our App Store privacy label.
• Your generation prompts (transiently). When you tap Generate, your prompt is sent to our server and forwarded to OpenAI's gpt-image-2 model to render the image. We do not log prompts to durable storage. OpenAI may retain them under their API terms — see openai.com/policies.
• Your portfolio. Stays in SwiftData on your device. We never see it, sync it, log it, or back it up.
• App Store purchase state. If you buy TatStudio Pro, Apple tells your device "this Apple ID is entitled." We never see your card details, name, or email.

What we never do

• No third-party analytics SDKs (no Mixpanel / Amplitude / Firebase / PostHog).
• No advertising SDKs.
• No crash-reporting SDKs (we use Apple's built-in MetricKit only).
• No data brokers, no affiliate tracking.
• No selling, no sharing, no "anonymized aggregate" reselling.

Third-party services we DO touch

• OpenAI (api.openai.com). Your generation prompt is sent to OpenAI to render the image. They process it under their API policy: openai.com/policies.
• Cloudflare (workers.dev). Our proxy server routes the request to OpenAI. Standard request metadata (IP, timestamp) is logged for abuse prevention only, retained ≤30 days.
• Apple App Store. Processes the one-time $19.99 unlock. We see a transaction identifier; never your card.

How long we keep things

On-device: forever, until you delete the app or tap "Delete everything" in Settings. On our servers: nothing about your portfolio. Request logs (IP, timestamp) ≤30 days. Free-generation counters: up to 365 days from your last free generation, then they expire automatically — and they are keyed by a one-way hash of your device token, not by the token itself. Until August 2026 these counters were written with no expiry at all; that is fixed, and the old un-expiring records were deleted.

Deleting your data

Settings → "Delete every design" wipes your local portfolio. To also reset your free-generation counter, delete and reinstall the app — a new device token is generated on next launch.

Children

TatStudio is rated 17+ on the App Store (tattoo themes). We do not knowingly collect data from anyone under 17.

Contact

Questions? support@keenshift.ai. We answer.