Tiptint ("we") is operated by Mustafa Batin Efe. This policy covers the Tiptint iOS app and this website. The website itself sets no cookies and runs no analytics.
Design generation sends your description and style choices to Google Gemini (prompt planning) and fal.ai (image generation). Try-on sends your photo to fal.ai. If you explicitly request a personalized DIY guide, your saved design, selected look, application method, and beginner preference are sent to Google Gemini to plan the steps, and the selected look is sent to fal.ai to create the step images. When fal.ai is unavailable (for example, an outage or rate limit), the same image request — including a try-on photo — is sent to Google Gemini's image model instead, under the same consent and retention terms; a request is never sent to both providers.
Providers process each request to deliver the feature you asked for; see Google's Gemini API terms and fal.ai's terms. You consent in-app before anything is sent, and you can withdraw consent at any time in Settings → Data & AI transparency — withdrawal re-gates every AI feature.
Apple — App Store distribution, payments, and receipt-based sign-in.
Google Firebase — authentication, database (Firestore), analytics, and app integrity (App Check).
Google Gemini — AI text planning for designs and DIY guides, and image generation when fal.ai is unavailable.
fal.ai — primary AI image generation and try-on rendering.
Cloudflare — private storage and delivery of your generated media.
Each provider processes data only to deliver its part of the service, and we require that every third party handling your data protects it to the same or an equal standard as this policy — enforced through their contractual commitments and our configuration (private buckets, authenticated access, deny-by-default database rules).
Kid profiles exist under a parent's account. Photos of a child's hands require the account holder's (parent's) consent, are processed identically (never stored), and kid profile data is minimal: a name label and saved sizes. We comply with COPPA and GDPR-K; where regional law requires, we honor Apple's Declared Age Range and parental-consent signals.
Data lives in Google Firebase (Firestore) under your account ID with deny-by-default access rules. Generated media lives in private Cloudflare storage and is served only to your signed-in, integrity-checked app; your device keeps an encrypted local cache so images don't need to be re-downloaded. All traffic is encrypted in transit.
Delete designs (along with their try-ons and DIY guides), journal entries, collections, wishlist items, and kid profiles individually in-app, or delete your entire account in Settings → Account → Delete account: this immediately and permanently removes your profile, designs, renders, personalized DIY guides, sizes, journal, subscription linkage, and stored media. Routine server operation logs kept by our infrastructure providers (which can include request metadata, never your photos) age out automatically, typically within 30 days.
Access, correct, or erase your data anytime via in-app tools; for a data export, or anything else, write to help@mbefe.com. For EU/UK users: our legal bases are contract performance (the features you use) and legitimate interest (service security and abuse prevention); you may lodge a complaint with your supervisory authority.
If Tiptint is ever acquired or merged, your data may transfer to the successor under this same policy (or a successor policy at least as protective), and we'll flag the change in the app.
We'll update this policy here and in the app; material changes are flagged in the app before they take effect.