Privacy Policy

Tint ("we", "our", or "the app") is a photo editor — filters, frames, text, effects, and an optional AI tab. Almost everything in Tint runs entirely on your device with no server involved at all. The one exception is the AI tab (Effects, Style, Retouch, Vibe, Headshot, Chat, Critique, and Restore) — the only place in the app where your photo is sent to a server, and only when you actively choose to use it. This policy explains exactly what is processed, where, and why, for both cases.

Tint only ever sees the one photo you choose to import, at the moment you choose it — it never scans or lists your photo library. Cropping, filters, adjustments, frames, text, doodles, one-tap effects, and the features below all run entirely on your device. Your photo is never uploaded or copied to a server for any of this.

• Person segmentation— powers Background Swap's subject cutout, so you can drop in a new color, gradient, or photo backdrop behind the subject.
• Face contour detection — powers Beauty's skin-smoothing mask. Tint does notdo face recognition or identification: it never builds a profile that matches "this is the same person" across different photos, and no face-identifying data is stored anywhere.

Saved presets and unfinished-edit drafts are stored in a local database on your device only — never uploaded anywhere.

The AI tab is different, and Tint tells you so the first time you open it, before anything is sent anywhere. If you choose to generate a result there, the photo you're editing (resized down, not the original file) is uploaded to our server and forwarded to Google Cloud's Gemini API to produce your result — a new edited photo for Effects/Style/Retouch/Vibe/Headshot/ Chat/Restore, or a structured written evaluation (score, comments, tips) for Critique, with no new photo produced. Any text you type into that tab (a custom style description, a chat message) is sent along with it to fulfill that specific request.

• This only ever happens for a photo you are actively editing, when you tap Generate.
• Our server does not store your photo — it is used only to relay your request to Google and your result back to you, then discarded.
• We use Google Cloud Vertex AI's paid API tier, under which Google does not use your content to train its models. See Google Cloud's Service Terms and Google's Privacy Policy for how Google itself handles data sent to its APIs.
• A result the AI tab produces is sent straight back to your device — we don't keep a copy.

Separately from the photo itself, our server keeps a lightweight usage log for each AI tab request, tied to an anonymous app-installation ID (not your name, email, or Apple/Google account) — the same ID RevenueCat already uses to track your AI credit balance. This log records:

• Which AI feature you used, which model handled it, and whether it succeeded
• The credit cost and any refund, for keeping your balance correct
• For a request with typed text (Style's custom description, Chat), the first 200 characters of that text — never your photo, and never used for anything beyond debugging and abuse prevention

This log is never sold, never used for advertising, and is only ever looked at to answer questions like "did this request succeed" or to investigate abuse of the AI credit system.

• Your name, email address, or any personal identity
• Copies of your photos — including AI tab photos, which are relayed and discarded, never stored
• Face-identifying data of any kind
• Your location
• Any data for advertising or tracking purposes

Tint uses a minimal set of third-party services. None of them ever receive your photo unless you actively use the AI tab, in which case only Google (below) does:

• Google Cloud (Gemini API / Vertex AI) — processes the photo and any typed text you submit in the AI tab, to generate your result. See Google's Privacy Policy.
• RevenueCat — manages the one-time Tint Pro purchase, AI credit pack purchases, and your AI credit balance, all keyed to an anonymous app-installation ID. See RevenueCat's Privacy Policy.
• Apple App Attest / Google Play Integrity— before an AI tab request is processed, your device proves to Apple or Google that it's running a genuine, unmodified copy of Tint (standard anti-abuse device attestation). This confirms your device is legitimate; it does not identify you personally.
• Sentry (optional) — crash and error reporting, used only to fix bugs. Crash reports never include your photo or any photo-derived content. See Sentry's Privacy Policy.

Saved presets, edit history, and unfinished drafts are stored exclusively on your device using local storage and are never uploaded anywhere — uninstalling the app removes all of it, permanently. The AI usage log described above (metadata only, never your photo) lives on our server for as long as needed for credit accuracy, debugging, and abuse prevention; contact us (below) if you'd like it deleted.

Tint asks for photo library access only when you actively choose to import a photo — not as a standing, upfront permission. You can revoke this access at any time from your device's system settings (iOS: Settings → Tint → Photos; Android: Settings → Apps → Tint → Permissions). Tint will simply be unable to import a new photo until access is granted again — nothing about edits you've already made changes on our end.

Tint is not directed at children under 13. We do not knowingly collect any information from children.

Tint collects no personal data tied to your real-world identity, so there is no account or profile to access, correct, or delete. If you'd like the anonymous AI usage log described above deleted (e.g. after uninstalling), contact us and we'll remove it.

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the new policy.

Questions? Contact us at support@tuanhoang.dev.