Privacy Policy

1. Who we are

Tatfly is operated by Averniq Ltd ("we", "us" or "our"). Averniq Ltd is the controller of the personal information handled by us as described in this policy.

Privacy contact: support@tatfly.online.

This policy explains how we handle personal information when you use Tatfly to explore tattoo ideas, generate designs, upload photos and create tattoo previews.

2. Information we process

For design and preview requests, we process the information you provide, including tattoo descriptions, style selections, uploaded photos and designs, and generated results.

Where you use account or project-saving features, we process information needed to manage your account and saved projects. For purchases, we process transaction and entitlement information needed to manage access, subscriptions and credit balances.

If you contact us, we process your email address, message and attachments. We also process technical information necessary to operate, troubleshoot and protect the service.

Body photos can reveal identifying or sensitive information. Avoid uploading unnecessary personal information. Only upload another person's photo if you have appropriate permission.

3. Purposes and legal bases

We process information necessary to provide requested features, manage purchases and respond to service enquiries on the basis of performing our contract with you or taking steps at your request before entering into a contract.

Where applicable, we rely on legitimate interests to protect the service, prevent fraud and misuse, and resolve technical problems. Those interests are maintaining a reliable and secure service; we assess them against your rights and interests.

We process information required for accounting, tax and other legal obligations on the basis of compliance with those obligations.

Where we rely on consent for optional processing, we explain it when requesting consent. You can withdraw consent without affecting the lawfulness of earlier processing.

A photo is necessary for a preview using that photo. If you choose not to provide it, we cannot generate that photo-based preview.

4. AI and service providers

Tatfly uses external AI services to process design and preview requests. Depending on your request, this involves sending prompts, selected styles, uploaded images and related request information to the services involved.

Tatfly’s AI integrations involve Google Gemini and OpenAI. The service used depends on the feature and request. Relevant prompts, images and request information are processed by the services involved to produce the requested design or preview. Provider retention and any use of data for model training depend on the integration, service terms and settings; this policy does not promise immediate provider deletion or a particular training exclusion. Contact support@tatfly.online with questions about a specific feature before submitting sensitive content.

We also use service providers where needed for hosting, storage, account functionality, support and service reliability. Hosting and storage providers handle service data needed to deliver features; account providers handle sign-in and account information; support providers handle communications; service-reliability providers handle technical information needed for operation and troubleshooting.

Apple handles App Store purchases under its own privacy terms. Tatfly processes purchase and entitlement information necessary to manage subscriptions, credits and access.

5. International processing

Some providers may process information outside your country.

Where information is transferred outside the UK and data protection law requires safeguards, the transfer must be covered by an appropriate legal arrangement, such as an applicable adequacy decision or approved contractual safeguards.

Contact support@tatfly.online for information about applicable safeguards.

6. Retention and deletion

We retain information for the periods needed for the purposes described in this policy, taking account of the information involved, the feature used, legal obligations and the need to resolve disputes.

Retention is assessed by category: images, prompts and generated results are relevant to processing requests and any saved projects; account information is relevant to maintaining accounts and resolving closure requests; transaction records are relevant to managing purchases, accounting and legal obligations; support messages are relevant to resolving enquiries and related disputes; technical information is relevant to troubleshooting and security. External-provider records and backups can have separate retention and deletion arrangements. Contact support@tatfly.online for information about a particular record or deletion request.

Deleting a local image or project does not necessarily delete information already processed by an external service.

Request deletion at support@tatfly.online. Some records may need to be retained to meet legal obligations or establish, exercise or defend legal claims.

7. Security

We take appropriate technical and organisational measures to protect information, considering the risks involved. No transmission or storage system can guarantee absolute security.

8. Your rights

Depending on applicable law and circumstances, you may have rights to access, correct or erase information, restrict processing, object to processing based on legitimate interests, and receive eligible information in a portable format.

Where processing relies on consent, you may withdraw it.

Contact support@tatfly.online to exercise your rights. We may request proportionate information to verify your identity. Rights may be subject to legal exceptions.

You may complain to the UK Information Commissioner's Office at https://ico.org.uk/ or another relevant data protection authority. You do not need to contact us first to complain.

9. Changes and contact

We may update this policy when the service or our processing changes. We will make the current version available and notify you of material changes where required.

Privacy enquiries: support@tatfly.online.

10. Website and social links

The homepage illustration runs in your browser without asking you to upload a photo, create an account or make a payment. The website does not include advertising or analytics scripts. Website hosting can involve technical request information needed to serve and secure pages. Instagram and TikTok links open external services, whose privacy policies apply to your use of them.