← byanton.dev
Privacy Policy
Effective: March 28, 2026 · Last updated: March 28, 2026
Tattoo Stencil Maker is developed by Anton (Batumi, Georgia). We don't track you. Stencils are processed on your device. AI prompts are encrypted in transit and not stored. Contact: support@byanton.dev
Also see our Terms of Use.
Who We Are
Data Controller: Anton, individual developer
Location: Batumi, Georgia
Contact: support@byanton.dev
As a small-scale individual developer not engaged in large-scale data processing, we are not required to appoint a Data Protection Officer under GDPR Article 37. For all privacy inquiries, contact us at the email above.
AI System Disclosure (EU AI Act Article 50)
This app uses artificial intelligence. Specifically:
- AI stencil generation is powered by Google Gemini (via Cloudflare Workers AI). Text prompts and reference images are sent to this service for processing.
- AI-generated stencils are machine-generated artwork, not hand-drawn designs.
- AR preview uses on-device processing only (no AI involved).
Data Collection Overview
| Data Type | Collected? | Purpose |
|---|
| Name, email, phone | No | — |
| Device identifiers (IDFA) | No | — |
| Analytics / usage tracking | No | — |
| Photos & camera frames | No | Stay on device (PHPicker, no full library access) |
| AI prompts & reference images | Transient | Generate stencil, then discarded immediately |
| Purchase history | No | Managed entirely by Apple |
Legal Basis for Processing (GDPR Article 6)
| Processing Activity | Legal Basis |
|---|
| AI stencil generation from prompts | Consent (you initiate generation) |
| AI stencil generation from reference image | Explicit consent (you choose to upload) |
| AR camera preview | Consent (on-device only, no data leaves device) |
| Bluetooth printer connection | Consent (you initiate pairing) |
| Subscription processing | Contract performance (via Apple StoreKit) |
Third-Party AI Services (Apple Guideline 5.1.2(i))
Named AI providers: Your text prompts and reference images are processed by the following services.
| Provider | Service | Data Sent | Retention |
|---|
| Google LLC | Gemini (via Cloudflare Workers) | Text prompt, reference image (if provided) | Not retained; processed and discarded |
| Cloudflare, Inc. | Workers AI (API routing) | Request data | Logs max 30 days |
No data is sent to advertising, analytics, or crash-reporting services.
Device Permissions
- Camera: Used only for real-time AR preview. No images are captured, recorded, or transmitted
- Photo Library: Access via PHPicker only — you select specific images, we never access your full library
- Bluetooth: Connects exclusively to thermal printers for stencil output
Data Storage and Retention
| Data | Where | Retention |
|---|
| Stencils you create | On your device (SwiftData) | Until you delete them or uninstall the app |
| AI prompts sent to API | Cloudflare Workers (transient) | Processed and discarded immediately; logs max 30 days |
| Reference images sent to AI | Cloudflare Workers (transient) | Processed and discarded immediately; not stored |
| AR camera frames | Device memory only | Never saved, never transmitted |
| Subscription data | Apple servers | Managed by Apple |
We do not indefinitely retain any data. No personal data is stored on our servers.
Children's Privacy
- Tattoo Stencil Maker is rated 4+ on the App Store (no age-restricted content)
- We do not knowingly collect personal information from children under 13
- The app does not require account creation, login, or personal data entry
- If we discover data from a child under 13 was collected, we will delete it immediately
Your Rights
All Users
- Access: All your data is on your device — you have full access
- Deletion: Delete stencils within the app, or uninstall to remove everything
- Portability: Export stencils to your photo library at any time
EU/EEA Residents (GDPR)
- Right to access, rectification, erasure, restriction of processing, portability, and objection
- Right to withdraw consent at any time
- Right to lodge a complaint with your local data protection authority
- Right not to be subject to solely automated decisions with legal effects
California Residents (CCPA/CPRA)
- Right to know, delete, correct, and opt-out of sale/sharing
- We do not sell or share your personal information
- We do not use your data for cross-context behavioral advertising
- Automated decision-making: AI stencil generation is user-initiated, entertainment/creative-only, with no legal or similarly significant effects
Brazil (LGPD), Turkey (KVKK), Japan (APPI)
- Rights to access, correction, deletion, portability, and consent withdrawal apply
- Response times: LGPD 15 days, KVKK 30 days, APPI reasonable period
International Data Transfers
AI prompts are processed via Cloudflare's global network (servers in the US and worldwide). Transfers are protected by:
- EU Standard Contractual Clauses (SCCs) per GDPR Article 46
- Cloudflare's data processing agreements
- Data minimization — only transient processing, no storage
Data Security
- All API requests encrypted with TLS 1.3 (HTTPS)
- All stencils stored locally, protected by iOS device encryption
- No user accounts or passwords — zero authentication attack surface
- No server-side data storage
No Tracking, No Advertising
- No IDFA, no App Tracking Transparency, no fingerprinting
- No analytics SDKs (no Firebase, no Amplitude, no Mixpanel)
- No ad networks, no data brokers
- We do not sell or share your personal information under any circumstances
Data Breach Notification
Since we store no personal data on our servers, the risk of a data breach is minimal. In the unlikely event of a breach affecting transient processing data, we will notify affected users and authorities within 72 hours.
Changes to This Policy
Updates communicated via "Last updated" date. Continued use constitutes acceptance.
Contact
Email: support@byanton.dev
Developer: Anton
Location: Batumi, Georgia
Website: byanton.dev
© 2026 Anton. All rights reserved.