Legal

Privacy Policy

Last updated: July 12, 2026

This policy explains what personal data is collected when you use the totpose mobile app and the totpose.com website (the "Service"), how it is used, and the rights you have. The Service lets you generate tattoo designs with AI and preview them on a photo of your own body.

1. Data We Collect

Account data: email address, name, date of birth, password (stored only as a hash) or your Apple/Google sign-in identity; optional phone and city.
User content: body photos you upload, designs you pick or generate, and the preview images created for you.
Purchase data: subscriptions and credit packs are processed by the App Store / Google Play; your card details never reach us. We keep an in-app user ID and transaction records to validate purchases.
Technical data: basic device/app identifiers and error logs (to run the Service and validate purchases).

2. How We Use Data

To create your account, manage your session and provide the Service,
To render tattoo previews on your photo — your photos are sent to Google Gemini (Vertex AI) models for this purpose only,
To manage your credit balance, subscription status and purchases,
For security, fraud prevention and legal obligations.

We do not sell your data and do not share it with third parties for advertising.

3. Our Service Providers

Google Cloud / Vertex AI — AI image processing
RevenueCat — subscription & purchase validation
Apple App Store / Google Play — payment processing

4. Retention

Your data is kept while your account is active. When you delete your account, your account data, photos, designs and previews are permanently deleted.

5. Account & Data Deletion

In the app: Profile → "Permanently delete account" deletes your account and all of your data immediately and permanently.

By email: send a request from your registered email to [email protected]; it will be processed within 30 days.

6. Your Rights (GDPR / KVKK)

You have the right to access, correct, delete, object to processing, and port your data. Use the email above for any request.

7. Children's Privacy

The Service is intended for users aged 18 and over; we do not knowingly collect data from anyone under 18.

8. Security

Data is encrypted in transit (HTTPS/TLS). Passwords are stored as irreversible hashes; access is limited to authorized systems.

9. Changes

We will announce material changes on this page. The "last updated" date above indicates the current version.

10. Contact

Questions: [email protected]