Tattry Privacy Policy
Last updated: 15 October 2026
Tattry lets you see a tattoo on your own skin before you get it. This page explains what the app sends to our server, what we keep, what our providers see, and what we never keep. The short version: your photos are not stored on our server, there are no ads and no tracking, and you can delete your account from the app at any time.
Who is responsible
The data controller is Gabriel Capraru, an individual developer based in Romania (European Union). Contact: gabrielcapraru@gmail.com. If you want to exercise a right under the GDPR, write to that address; see „Your rights" below.
What stays on your phone
Your photos, try-ons and saved designs (the „My ink" gallery), your style and placement preferences, and the camera frames of the live preview are stored and processed only on your device. They are not uploaded to us and are removed when you delete the app.
What we process to render with AI
When you tap „Make it real", use a tool (Remove, Cover-up, Modify) or generate designs, the app sends the photo, the design and the placement preview, or your text prompt, over an encrypted connection to our server, which passes them to our AI provider, KIE (kie.ai), and returns the result to your phone. KIE runs Google's Nano Banana image model and, when prompt enhancement is on (Settings), a Claude text model from Anthropic that rewrites your idea into a fuller description. Tattry does not store these images or the rewritten prompt. KIE keeps the uploaded images for up to 24 hours and the results for up to 14 days on its servers, then deletes them automatically; those copies are not under our control and are not removed earlier when you delete your account. The app asks for your consent before the first AI render, and you can withdraw it in Settings; without it nothing leaves your phone, and the AI features are unavailable.
What we keep, and why
- An account identifier. On first launch the app creates an anonymous account (a random ID) so your credits work. If you choose Sign in with Apple, we also receive the email Apple shares with us (which can be a private relay address). Legal basis: performance of the contract (providing the service).
- Credits and purchases. Your credit balance and its history, and for App Store purchases the transaction identifiers, the product and the subscription status and expiry date. Payments are handled by Apple; we never see your payment details. Legal basis: performance of the contract, and our legal obligations (accounting, refunds).
- A generation log, without images. For each AI generation: its type, the style and body area you chose, the text prompt of a design request, whether it succeeded, how long it took and its estimated cost. We use it to run the service, to apply the free credits and the fair-use limit, to prevent abuse and to fix problems. Legal basis: performance of the contract and our legitimate interest in running the service securely.
- Support notes. If we adjust your credits (a refund, a goodwill gesture) the adjustment and a short internal note about it are kept with your account. Legal basis: legitimate interest (support and accounting).
- Server logs. Our web server keeps standard access logs (IP address, time, the endpoint called, no request content) for up to 14 days, to keep the service secure. Legal basis: legitimate interest.
Photos and prompts sent for an AI render are processed, as described above, on the basis of your consent.
What we don't do
No advertising, no tracking across apps or websites, no third-party analytics or crash-reporting services, no selling or sharing of data, no automated decisions with legal effects.
Service providers and transfers
- Hetzner Online GmbH (Germany): hosts our server, database and sign-in (built on open-source Supabase). Data stays in the European Union.
- KIE (kie.ai, United States): AI image generation and prompt enhancement. This is a transfer outside the European Union. It takes place on the basis of your explicit consent, given in the app before the first render, after being informed of the risks (Article 49(1)(a) GDPR); KIE processes the images only to produce the result and deletes them on the schedule above.
- Apple: App Store payments and subscriptions, Sign in with Apple, and the Live Activity and widget features of iOS. Apple's own privacy policy applies to the data Apple processes.
How long we keep it, and deleting it
We keep your account data until you delete your account; server logs for up to 14 days. In the app, go to Settings › Delete account: your account, credits, purchase records, generation log and support notes are deleted from our server immediately. If you signed in with Apple, we also revoke Tattry's access to your Apple ID. Images already with KIE expire on KIE's schedule (24 hours / 14 days). An Unlimited subscription is managed by Apple: cancel it in your device's Settings › Apple Account › Subscriptions; deleting the account does not cancel it.
Your rights
Under the GDPR you can ask for access to your data, its correction, its deletion, a restriction of its processing or a copy in a portable format, object to processing based on our legitimate interests, and withdraw your consent at any time (in Settings, for the AI features). Write to the address above; we answer within 30 days. You can also complain to your data protection authority; in Romania that is ANSPDCP (dataprotection.ro).
Children
Tattry is not directed at children. We don't knowingly collect data from anyone under 16 (or the age of digital consent in your country); if you believe a child has used the app, contact us and we will delete the account.
Security
All connections are encrypted (TLS). Your session is kept in your phone's Keychain. Only the developer has access to the server, and administrative actions on accounts are logged.
Changes
If this policy changes, we update this page and the date above, and the app shows the new version before the next AI render if the change affects what is sent to our providers.
Contact
Gabriel Capraru, developer of Tattry · gabrielcapraru@gmail.com · for help with the app see Support.