Privacy Policy
The short version
The try-on runs on your phone. Your photos are never uploaded, there is no account, and we run no server and no analytics of our own.
This version of the app shows you no advertisements. Nothing in it asks you to watch anything, and there is no exchange to opt into: every design on the wall, the camera, the try-on, the sliders and saving a preview work the same way and work with no connection.
Because there is no advertisement, the app never asks you about advertising consent, and the question you may have read about in an earlier version of this policy is not put to you at all.
In this version, none of the app’s own code can reach the ad library, and that is checked automatically every time the app is built — it is a fact about how the app is assembled, not an impression of one running. The library is still inside the app, because one app is built for every version, and we have configured it not to start itself at launch: that second part is a setting we have made rather than something we have watched happen. So the accurate statement is that nothing in the released app reaches for it, not that it is absent.
This is not a promise about our intentions. It is a description of what the app can do: an automated check refuses to build the app if networking is added anywhere outside the one library described below, and nothing that reaches the internet ever carries an image.
Photos and camera
When you take a photo or pick one from your library, it is processed on the device — segmentation, pose estimation and rendering all happen locally.
The photo you start from stays in the app’s own private storage on this phone while you work, and a working copy may remain in the app’s temporary storage afterwards until the system reclaims it. It is never sent anywhere, and deleting the app removes all of it.
The camera is used only while a camera screen is open. There is no background capture, and no audio is ever recorded.
What the app stores on your phone
Designs you upload, so your wall survives a restart.
A short list of which bundled designs you deleted, so they stay deleted.
Your language choice, and whether you have saved a preview before.
In the version published to a store, that is the complete list of what we store.
This version asks you nothing about advertising, so no advertising-consent answer is stored by anyone, by us or on our behalf.
All of it lives in the app’s private storage and is deleted with the app.
Saving to your photo library
When you save a preview, the app adds one image to your photo library. It asks only for permission to ADD — it cannot read, browse, or delete anything already there.
Saved previews carry the tattooo mark in one corner. That mark cannot be switched off.
Advertising
This version of the app serves no advertising. There is no rewarded video, nothing to watch, and no feature that costs an advertisement: importing your own design, the bundled designs, the camera, the try-on, the sliders and saving a preview are all free, and all of them work with no connection.
A future release may offer an advertisement in exchange for keeping a design you imported yourself. If that happens, this policy will say so before it ships, and the version number and date at the top are how you can tell which text applies to the app you have.
Google’s Mobile Ads SDK is nevertheless inside the app, and we would rather explain that than let you find it and wonder. One app is built for every version, so the SDK ships whether or not a version uses it. In this version nothing in the app’s own code can reach it — checked automatically on every build — and it is configured not to start itself when the app launches.
That configuration is a setting we have made, not an observation we have published: nobody has run this build with a network monitor attached and watched it stay silent. We are telling you what the app is assembled to do and where the limit of our knowledge is, which is the standard the rest of this document holds itself to.
What it never receives is the part that matters here: it never receives your photos or your designs. There is no image, no pixel data and no value derived from either in anything the app sends. That is a property of how the app is built, not a setting.
The app asks for no advertising identifier of its own, shows no tracking-permission prompt, and does nothing to follow you between apps or websites.
Because no advertisement is served, you are never asked for advertising consent, and none is stored. If a future release brings the exchange back, the question comes back with it and this policy will describe it before that happens.
A note on earlier versions of this policy
If you read a copy of this policy that described a rewarded advertisement, that text was written for a version of the app which offers one. This version does not. The version number and date at the top of this page tell you which text applies to the app you have installed.
We keep the older wording rather than quietly replacing it, so that what we said before can be checked against what we say now.
What we do not do
No account, no sign-up, no email address collected.
No personalized advertising, no advertising identifier, and no tracking of you across apps or websites.
No crash-reporting, session-recording or analytics SDK of ours, and nothing anywhere in the app reports to us. The advertising library that ships inside the app publishes its own disclosure of what it would collect if it ran; in this version nothing starts it, and no photo or design would be part of it in any case.
No selling or sharing of anything by us, because we collect nothing to sell or share. What Google’s ad SDK collects is covered by Google’s own disclosures, and no photo or design is ever part of it.
Test builds
A separate build given to a small group of testers counts things like how many previews were rendered and how often a design was rejected. It stores those counts on the tester’s own phone, with no identifiers and no image data, and they leave the device only if the tester deliberately exports them through the system share sheet.
That build is never published to a store. If you installed tattooo from a store, it does not apply to you — and the app itself would say so, on the sheet that links to its privacy screen, if it did.
Your rights, and how to exercise them
Because your photos and your designs never leave this phone, there is no copy of them for us to show you, correct, or erase. Deleting the app removes everything the app stored.
Individual designs can be deleted from the wall at any time, permanently.
Previews are previews
What the app shows is an approximation on a photograph, not a prediction of a tattoo. Do not treat anything here as a guarantee of how ink will look on skin — that is a conversation for a tattoo artist.
Children
The app is not directed at children, and we collect nothing from anyone, of any age. This version shows no advertisements at all; in a version that does, they are requested at Google’s “Teen” content rating and are never personalized. Its store age rating is set by each store’s own questionnaire and is shown on its listing.
Changes and contact
If this policy changes materially, the version and date at the top of this page change with it. There is no mechanism to update the text inside the app without releasing a new version of it, which means the policy shown in the app is always the one that shipped with the code you are running.
Questions go to support: email malfara.labs@gmail.com. In the app, the same route is “Info + privacy” on the home screen, then Support.