Privacy Policy

Effective: October 4, 2026 · Contact: support@tiptint.app

Who we are

Tiptint ("we") is operated by Mustafa Batin Efe. This policy covers the Tiptint iOS app and the tiptint.app website. The website sets no cookies; it counts visits with Cloudflare Web Analytics, which is cookieless (see Service providers).

What we collect

• Account — created silently from an Apple-signed App Store receipt (or a random device key stored in your iCloud Keychain). No email or password is required or collected. If you give your first name during setup, it stays on your device only: it is never sent to us, to Google Analytics, or to the AI.
• Your choices — style, shape, length, palette, redo cadence, occasions, and settings you pick, used to personalize the app.
• Your content — nail-set designs you generate, the exact look you select from a design sheet, try-on renders, personalized DIY guides you explicitly create, collections, journal entries, and saved nail sizes.
• Hand photos — sent only with your explicit consent to create a try-on render, and never stored: not on our servers and not in your account. Only the finished render is kept.
• Inspiration and outfit photos — the single photo you deliberately choose is sent only with your explicit consent to recreate its nail art or suggest coordinating colors, and is never stored by Tiptint. Only a finished design you choose to generate is kept.
• Purchases — subscription and credit-purchase status from Apple's signed transactions (product, transaction identifiers, dates, renewal state). We never see your payment details.
• Usage analytics — only when it is on; see the next section. We do not track you across other apps or websites, and Tiptint contains no third-party advertising.

Usage analytics (in the app)

To see where the app is hard to use, the app can send anonymous usage events to Google Analytics for Firebase: which screens and steps you reach and the options you pick on them (for example "paywall shown", "design generated", or whether you added a hand photo), your plan type, app language, an app-install identifier, and an approximate country derived from your IP address. It never includes what you type, your photos, your designs, your name, or your email, and it is not linked to your account. It is not used for advertising or cross-app tracking, and Google's advertising features and data sharing are turned off. Events are kept for 2 months.

In the European Union, the EEA, the United Kingdom, Switzerland, Turkey, and Brazil, usage analytics is off unless you switch it on. Elsewhere it is on by default. You can change it at any time in the app: Settings → Preferences → Share anonymous usage data.

AI providers

Design generation sends your description and style choices to Google Gemini, which writes the design brief and generates the image. Try-on sends your hand photo and the chosen design to Google Gemini, which renders the design onto your nails. If you explicitly request a personalized DIY guide, your saved design, selected look, application method, and beginner preference are sent to Google Gemini to plan the steps and create the step images. Inspiration and outfit photos you deliberately select are sent to Google Gemini for that one request. On a billing-enabled Gemini API project, Google does not use prompts or responses to improve its products, but may log them for a limited time to detect abuse.

Google processes each request to deliver the feature you asked for; see Google's Gemini API terms. You consent in-app before anything is sent, and you can withdraw consent at any time in Settings → Data & AI transparency — withdrawal re-gates every AI feature.

Service providers

Each provider processes data only to deliver its part of the service, and we require that every third party handling your data protects it to the same or an equal standard as this policy — enforced through their contractual commitments and our configuration (private buckets, authenticated access, deny-by-default database rules).

International transfers

Our service providers are based in the United States and process data there and in other countries where they operate. Where data from the EU, EEA, UK or Switzerland is transferred, they rely on the European Commission's Standard Contractual Clauses and, where they are certified, the EU–US Data Privacy Framework and its UK and Swiss extensions. Transfers from Turkey follow the transfer rules of the Turkish Personal Data Protection Law (KVKK).

Children

Tiptint is not directed to children and does not collect information about children. There are no child profiles and no way to save a child's name, photo or measurements.

Storage & security

Data lives in Google Firebase (Firestore) under your account ID with deny-by-default access rules. Generated media lives in private Cloudflare storage and is served only to your signed-in, integrity-checked app; your device keeps an encrypted local cache so images don't need to be re-downloaded. All traffic is encrypted in transit.

Retention & deletion

Delete designs (along with their try-ons and DIY guides), journal entries, collections, and wishlist items individually in-app, or delete your entire account in Settings → Account → Delete account: this immediately and permanently removes your profile, designs, renders, personalized DIY guides, sizes, collections, wishlist, journal, stored media, and any unused purchased credits.

To protect purchases and prevent fraud, our server keeps a minimal record after deletion: your subscription status and the credits already spent in the current month (so deleting and reinstalling can't start a fresh month of credits), and records keyed by hashed App Store transaction identifiers (so a purchase can't be redeemed twice or replayed after a refund). These records are keyed to a pseudonymous account identifier and contain no photos, designs, name or email. RevenueCat keeps its copy of the same purchase events under that identifier for purchase accounting; ask us and we'll have it deleted. Deleting your account does not cancel an Apple subscription; cancel it in App Store settings (see Support).

Routine server operation logs kept by our infrastructure providers (which can include request metadata, never your photos) age out automatically, typically within 30 days. Usage-analytics events are kept for 2 months. Hand, inspiration and outfit photos are never stored.

If you no longer have the app, email support@tiptint.app with your Support ID (Settings → Support → Support ID) or the approximate date you subscribed, and we'll delete your account and data for you.

Your rights

Access, correct, or erase your data anytime via in-app tools; for a data export, or anything else, write to support@tiptint.app. Our legal bases are contract performance (the features you use), legitimate interest (service security, fraud and abuse prevention, including the minimal purchase records above), and your consent — for sending photos and descriptions to Google Gemini, and for usage analytics where it is opt-in. You can withdraw consent at any time in the app. If you are in the EU, EEA, UK, Switzerland, Turkey or Brazil, you may also object to processing, ask for your data in a portable format, and lodge a complaint with your data protection authority (in Turkey, the Personal Data Protection Board, KVKK).

Business transfers

If Tiptint is ever acquired or merged, your data may transfer to the successor under this same policy (or a successor policy at least as protective), and we'll flag the change in the app.

Changes

We'll update this policy on this page, which the app opens directly; material changes are flagged in the app before they take effect.