Privacy Policy

Last updated: November 13, 2026

Tattuz lets you try tattoo designs on a 3D body, save them as projects, and connect with tattoo artists. This page explains, in plain language, what information Tattuz keeps about you, who can see it, and how to delete it. It covers the website at tattuz.vercel.app and the Tattuz apps for iPhone and Android. "We" and "us" mean the people who run Tattuz.

What we collect

Your account

• Email and password, if you sign up with email. Your password is stored only in scrambled (hashed) form by our sign-in provider; nobody can read it.
• Sign in with Google or Apple: if you use one, we receive your name (when they share it) and email address. Apple lets you hide your email, in which case we only get a private Apple relay address. We never receive your Google or Apple password.
• Whether you're a client or a tattoo artist.

Your profile

• Name, profile photo, phone number and contact email, if you add them. Your phone number and contact email are shown to others only if you switch on sharing for them.
• For artists: city, tattoo styles, bio, Instagram handle and portfolio images, which are public to clients browsing artists.

Your projects

• The tattoo images you upload, where you place them on the 3D body, and the body and skin tone you chose.
• Project details you enter (such as style, size, placement and budget), whether the project is public, and preview pictures of it.
• For artists: which projects you've saved. For clients: which artists you've saved.
• How many times you've used AI background removal, so we can apply your plan's allowance. The photos themselves aren't kept for this; only the finished cutout is saved, as part of your project.

Messages

• Messages, photos and projects you send in chats, and who you've blocked.
• Which conversations you've archived or deleted. Deleting a conversation removes it from your account only; the other person keeps their copy.
• Reports you make about another person. A report keeps a copy of that person's recent messages to you so it can be reviewed.

Your phone

• If you allow notifications in the app, your phone's notification address (a code from Apple or Google that lets us send you alerts) and whether it's an iPhone or Android phone.
• Your sign-in and a few preferences (such as light or dark mode, your last project and your search filters) are kept on your own device, not sent to us.

We don't collect your location, contacts, or anything from your camera or photo library except the pictures you choose to upload.

How we use it

Only to run Tattuz: to sign you in, save your work, show your projects to the artists you choose to share them with, deliver messages and their notifications, and keep the community safe (for example, reviewing reports). We don't use your information for advertising, and we don't sell or rent it to anyone.

Who can see what

• Private projects are visible only to you.
• Public projects can be seen by tattoo artists on Tattuz, along with your name and any contact details you've chosen to share.
• Share links let anyone who has the link see that one project, even without an account.
• Artist profiles and portfolios are visible to clients on Tattuz.
• Messages are seen by the two people in the conversation. We look at messages only when someone reports them, or if the law requires it.

Services we rely on

Tattuz uses a few outside companies to work. Each one only gets what it needs for its job:

• Supabase stores your account, profile, projects, pictures and messages, and handles sign-in.
• Vercel hosts the Tattuz website.
• Google and Apple handle "Continue with Google" and "Continue with Apple" if you use them, and deliver notifications to your phone (through Firebase Cloud Messaging on Android and the Apple Push Notification service on iPhone).
• Photoroom removes the background from a photo when you tap "Remove background with AI". Only that one photo is sent, and only when you tap the button. Photoroom sends back the cut-out picture and doesn't link the photo to your account.
• Have I Been Pwned checks whether a new password has appeared in a known data breach. Your password never leaves your device: only the first few characters of a scrambled version are sent, which isn't enough to work out the password.
• unpkg and jsDelivr deliver some of the code the website runs on.

Like any website, these services may see technical details such as your IP address and browser type when your device connects to them.

Keeping and deleting your information

We keep your information for as long as you have an account. You can delete your account yourself: open the menu (your profile picture, top right), then Delete account. That permanently removes:

• your account, profile, profile photo and portfolio;
• all your projects, their images, previews and share links;
• your saved projects and artists, and notification settings;
• your conversations and their messages and photos, for both people in them.

Two exceptions: reports made about you, with the copy of messages they contain, are kept so they can still be reviewed; and deleted information may remain in routine backups for a short time before those are replaced.

You can also change or remove your profile details at any time from the menu, switch off sharing of your phone number or email, make a project private again, and turn off notifications in your phone's settings.

Security

Information travels between your device and Tattuz over encrypted connections, and database rules make sure each account can only reach its own information and what others have chosen to share. No online service can promise perfect security, but we work to protect your information and will tell you if a problem affects it.

Age

Tattuz is for adults: you must be 18 or older to use it. We don't knowingly collect information from anyone under 18. If you believe someone under 18 has made an account, contact us and we'll delete it.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and the date at the top. For important changes, we'll also let you know in the app.

Contact

Questions or requests about your information? Email us at support@epikhand.com.