ProTattoo Privacy Policy

1. Introduction

Welcome to ProTattoo. BLLEKHOLL ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the ProTattoo mobile application ("App").

By using ProTattoo, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

This Privacy Policy is compliant with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

We collect several types of information to provide and improve our service:

2.1 Information You Provide

• Onboarding Information: Name, age, gender, and tattoo style preferences that you provide during the onboarding process
• Design Inputs: Text prompts, design concepts, and style selections you use to generate tattoo designs
• User-Uploaded Images: Photos you upload for body placement visualization (these are processed locally and not stored on our servers)
• Account Information: Your Apple ID for purchase processing and account management

2.2 Automatically Collected Information

• Usage Data: Information about how you use the App, including features accessed, designs generated, and time spent in the App
• Device Information: Device type, operating system version, unique device identifiers, and mobile network information
• Generated Designs: Tattoo designs you create and save within the App
• Purchase History: Records of credit purchases through Apple's In-App Purchase system (processed by RevenueCat)
• App Performance Data: Crash reports, error logs, and performance metrics to help us improve the App

2.3 AI Processing Data

When you generate a tattoo design, we send your text prompts and selected parameters to our AI service provider to process and generate images. This data is used solely for generating your requested designs.

3. How We Use Your Information

We use the collected information for the following purposes:

• To Provide Services: Generate AI tattoo designs based on your inputs and preferences
• To Process Transactions: Handle credit purchases and verify payment through Apple's In-App Purchase system and RevenueCat
• To Personalize Experience: Remember your preferences and design history to improve your user experience
• To Improve the App: Analyze usage patterns and feedback to enhance features and fix issues
• To Provide Support: Respond to your questions, troubleshoot problems, and provide customer service
• To Ensure Security: Detect and prevent fraud, abuse, and security breaches
• To Train AI Models: Use anonymized design data to improve our AI generation capabilities (only with non-identifiable information)
• To Comply with Legal Obligations: Meet legal requirements and respond to lawful requests from authorities

4. Data Storage and Security

4.1 Local Storage

Most of your data is stored locally on your device, including:

• Your saved tattoo designs
• Favorite designs
• Onboarding preferences
• Credit balance

4.2 Cloud Storage

Some information is stored on secure cloud servers:

• Purchase records (managed by RevenueCat and Apple)
• Design generation requests (temporary, for processing)
• Analytics and usage data (anonymized)

4.3 Security Measures

We implement industry-standard security measures to protect your data, including encryption, secure data transmission (HTTPS), and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your information with third parties only in the following circumstances:

5.1 Service Providers

• RevenueCat: For processing in-app purchases and managing subscriptions. RevenueCat's privacy policy can be found at https://www.revenuecat.com/privacy
• Apple: For App Store distribution and payment processing
• AI Service Providers: For generating tattoo designs based on your inputs (data is used only for processing and not retained)
• Cloud Infrastructure: For hosting and data storage services

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to lawful requests from authorities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such change.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 GDPR Rights (EU Users)

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

6.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, and the right to request deletion of your information.

6.3 Exercising Your Rights

To exercise any of these rights, please contact us at info@bllekholl.com. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Design Data: Stored locally on your device until you delete the App or manually delete designs
• Purchase Records: Retained for accounting and legal compliance purposes (typically 7 years)
• Usage Analytics: Retained in anonymized form for up to 2 years
• AI Processing Data: Deleted immediately after design generation is complete

8. Children's Privacy

ProTattoo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@bllekholl.com, and we will take steps to delete such information.

In accordance with Apple's App Store guidelines, users must be at least 17 years old to download the App due to its content nature.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

For EU users, we ensure data transfers comply with GDPR requirements, including the use of Standard Contractual Clauses where necessary.

10. Cookies and Tracking Technologies

The ProTattoo mobile application does not use cookies. However, we use similar technologies:

• Local Storage: To save your preferences, designs, and credit balance on your device
• Analytics SDKs: To collect anonymized usage statistics (you can opt out through device settings)
• Device Identifiers: To recognize your device for authentication and fraud prevention

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this page
• Sending an in-app notification for significant changes

Your continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.

12. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Data Protection Officer

For privacy matters, you can reach our Data Protection Officer at info@bllekholl.com with "DPO" in the subject line.

15. Supervisory Authority

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.