Privacy Policy | Tatany

Last updated: October 1, 2026

1. Introduction

Tatany runs the AI tattoo generator at tatany.app (the "Service"). This policy describes what information the Service handles when you use it, why, who else receives it, how long it is kept and how it is protected.

2. Information We Collect and Process

What we handle depends on the features you use. It can include:

• Account information: your name, email address, sign-in identifiers, profile and preference settings, and session data.
• Generation information: the tattoo prompts you write, sketches, photos or other files you upload as references, the model and settings you choose, the images or written ideas produced, task status, your creation history and the times of each request.
• Payment and subscription information: your plan, credit balance, order numbers, payment status, billing email, invoices, subscription state and a limited amount of payment metadata. Card numbers are entered with the payment processor and never stored on our servers.
• Technical and usage information: IP address, browser, device and operating system details, the pages and features you open, request timing, error and performance logs, and signals used to prevent abuse.
• Communications: messages to support, reports about content, privacy requests, feedback and any related replies.
• Cookies and similar technologies: data that keeps you signed in, secures sessions, remembers language or display choices, supports analytics and makes core features work.

3. How We Use Information

The information above is used to:

• Run the generator, your account, creation history, subscriptions and credit balance
• Verify who you are, keep you signed in and help you recover access
• Pass your prompts and uploads to the model you selected and deliver the result back to you
• Handle orders, renewals, credits, invoices, cancellations and refunds
• Spot prohibited content, fraud, security problems and misuse
• Debug failed tattoo renders, track speed and stability, and see which styles and tools people rely on so we can make them better
• Answer support, content, legal and privacy enquiries
• Comply with the law and apply the rules set out in our Terms of Service

Where privacy law asks us to name a lawful basis, we rely on one of four: performing our agreement with you, our legitimate interest in keeping the tattoo generator running safely, compliance with a legal duty, or your consent in the cases where consent is mandatory.

4. Tattoo Prompts, Reference Uploads and Generated Designs

To complete a request, your prompt, any uploaded sketch or photo, the chosen settings and the output are processed by the Service and may be sent to third-party AI model, infrastructure, storage and safety providers. Depending on the model you pick, this can include OpenAI GPT Image models, Google Nano Banana (Gemini) image models, and DeepSeek language models for written tattoo ideas.

Photos of skin or body areas used for placement mock-ups are personal images; upload only pictures you have the right to use, and avoid confidential material. Automated safety checks may review prompts, uploads and outputs to detect prohibited content and abuse.

5. Cookies and Analytics

Strictly necessary cookies, or comparable storage, keep you logged in, protect your account and make the basic features run. We may additionally use preference and analytics tools to remember settings, measure how features are used, diagnose performance and improve the Service.

Your browser settings let you clear or refuse cookies; refusing the essential ones will break log-in and parts of the design studio. Where the law requires your consent before non-essential analytics run, we ask for it first.

6. How We Share Information

Your personal data is not for sale, ever. We pass a minimum of it to the following groups, and only for the job each one does:

• AI and content-safety providers that process your prompts, uploads and outputs to fulfil the request or to review it for safety
• Cloud hosting and storage providers that run the Service and keep uploaded or generated media
• Payment providers that handle purchases, subscriptions, refunds, fraud screening and tax or billing duties, which may include Waffo Pancake or another provider shown at checkout
• Sign-in, mail delivery, analytics, uptime monitoring and help-desk vendors we use to keep Tatany working and safe
• Authorities or other parties when the law or legal process requires it, or when we believe in good faith that disclosure is needed to protect users, rights, safety or the Service
• A successor organization in the event of a merger, acquisition, financing, reorganization or asset sale, with appropriate safeguards in place

These providers may use the information only for the purposes we contract them for and must keep it confidential and protected under applicable data-protection rules.

7. Data Retention

We hold on to data for no longer than the tattoo generator, your saved designs, our security work, dispute handling, contract enforcement and our tax, accounting and regulatory obligations reasonably call for.

• Account and generation data may stay on file while your account is open or while history features are switched on.
• Uploaded sketches, photos and generated tattoo concepts may remain in your history or in the storage needed to provide the Service.
• Billing and transaction records may be kept for as long as tax, accounting, payment, fraud-prevention and dispute laws require.
• Security logs and help-desk threads are stored for a sensible period set by what operations and the law require.

Once a deletion or account-closure request is verified, eligible personal data is erased or de-identified within 30 calendar days. Copies in encrypted backups may persist for up to 90 more days before they are routinely overwritten. Limited records can be kept longer where needed for legal compliance, fraud prevention, chargebacks, dispute resolution or protecting legal rights.

8. Your Privacy Rights

Privacy laws differ from country to country. Where yours grants them, these rights are available to you:

• A plain account of the kinds of personal data we gather, use and pass on
• Access to the personal data we hold about you, including a copy
• Correction of profile or account details that are inaccurate or out of date
• Erasure of eligible personal data, together with closing the account
• Restriction of, or objection to, particular processing activities
• A portable, machine-readable export of certain data
• Withdrawal of consent for any processing that relies on it
• Opting out of marketing mail, if we ever send it, without losing essential billing or security messages
• Complaining to the data-protection regulator where you live

How to exercise your rights

Send an email to support@tatany.app from the address linked to your account, with the subject Privacy Request or Account Deletion Request. Tell us which right you want to use—access, correction, export, restriction, objection, closure or deletion—and which account or data it concerns.

To avoid disclosing or deleting data for the wrong person, we may ask for reasonable proof of identity. We confirm and finish valid requests inside 30 calendar days; if a request is complicated and the law lets us extend that window, you will hear from us with the reason and a new date. Your display name and a few other profile fields can be edited yourself from account settings.

Removing an account or eligible personal data does not mean removing transaction, security, fraud-prevention or dispute records that the law requires us to keep or that we need to protect the Service and its users.

9. International Data Transfers

Tatany and the vendors behind it may process data on servers outside your home country. Where the law calls for it, such cross-border transfers rest on safeguards like standard contractual terms, official adequacy decisions and strict access controls.

10. Security

We apply reasonable technical and organizational measures to protect information, including encrypted connections, access controls, credential protection, logging and, where suitable, content-safety and abuse-prevention tools. No online service can promise perfect security.

Should a breach of personal data happen that is legally reportable, we will notify the people affected and the competent regulator within the deadline the law sets.

11. Children's Privacy

Tatany is built for adults and older teens; nobody under 13 may use it, and we do not knowingly gather data from children in that age group. Where your local law sets a higher minimum age, that higher age applies. Tell us if you believe a child under 13 has shared personal data with us and we will check and remove what we are able to.

12. Third-Party Links and Services

Some pages point to, or integrate with, outside websites and tools. Their own privacy notices govern whatever data they gather independently; this policy does not reach that data.

13. Changes to This Policy

As the Service, our providers or the law change, this policy may be revised. The new version will be posted here with an updated date at the top, and where the law requires it we will give additional notice of material changes.

14. Contact Information

Reach us here with any privacy question or rights request about your Tatany account:

• Email: support@tatany.app
• Website: tatany.app