Privacy Policy

Tamorin LLC (“we”) operates Appliftoff. This policy explains what we collect, how we use it, and the choices you have.

1. What we collect

• Account data: email, display name, and avatar you provide.
• Project data: screenshots you upload and the rendered output we generate on your behalf.
• Payment metadata: processed by Stripe. We store the resulting checkout and payment identifiers, never full card details.
• Technical logs: minimal server logs used to debug and secure the Service.

2. How we use it

We use your data to operate the Service: authenticate you, generate and deliver your screenshots, process payments, and communicate about your account.

3. Subprocessors

Running the Service means handing some data to trusted infrastructure providers. Each is bound by their own privacy commitments and processes data solely to deliver their service to us:

• Supabase: authentication, database, and private storage for uploads and renders.
• Stripe:payment processing. Card data is entered directly into Stripe's checkout and never touches our servers.
• Anthropic:writing and translating your screenshot text, and suggesting backgrounds. The free AI draft on the New project form sends smaller copies of your screenshots and the description you give, to write starting headlines and supporting lines. In unlocked projects, translation, Rewrite with AI and Write the whole set send the text on your screenshots (headlines, supporting lines and other text layers) and, when you give them, your app's name and description, and AI background suggestions send your project's colors and an optional mood. In unlocked projects, Design with AI sends your request and a description of your screenshots' layout: the text on them, where each text layer and the phone sit, and their fonts, sizes and colors. These tools never send your screenshots. Projects made with our earlier generator send their uploads and project details to write their headlines and subheads. If you use Check layout's AI review, rendered screenshots are sent for that review. See AI processing for how Anthropic handles this data.
• OpenAI:AI background images in unlocked projects. We send your written prompt and your project's colors. Your screenshots and the text on them are never sent to OpenAI. See AI processing.
• Resend:transactional email (“your shots are ready”, password resets). Only your email address and the message content are shared.

We do not sell your data or share it with advertisers.

3a. AI processing

AI features run only when you use them. We send each provider only what the feature needs, as listed above, and use the result in your project. If a request fails, we may send the same data to the same provider once more.

• What we keep:the AI result you apply becomes part of your project (for example a translated headline, or a generated background image you apply, saved with your project's other images). A generated image you don't apply isn't stored by us. To enforce usage limits we keep a record of each AI request (which project and feature, when, and its size and cost details), not your prompt, text, colors or images. Other results you get during a session stay in your browser until you leave the project, so you can switch between them; we don't store them.
• OpenAI(AI background images): under OpenAI's API data controls, data sent to its API is not used to train or improve OpenAI's models unless a customer explicitly opts in. OpenAI keeps abuse-monitoring logs, which may include prompts and responses, for up to 30 days, unless longer retention is required by law or reasonably necessary to protect its services or others from harm.
• Anthropic:under Anthropic's commercial terms, inputs and outputs from its API are not used to train its models by default. Anthropic deletes API inputs and outputs from its backend within 30 days, unless they are flagged for a Usage Policy violation (then kept for up to 2 years) or longer retention is required by law.

4. Storage and data retention

Raw uploads and rendered output live in private Supabase Storage buckets scoped to your user id. Concrete retention periods:

• Project files (uploads + renders): retained while the project exists. Deleting a project removes the associated files immediately; they are purged from backups within 30 days.
• Account data: retained while your account is active. On deletion request, we remove your account and all associated projects within 30 days.
• Payment records: Stripe checkout and payment identifiers are retained for up to 7 years to meet tax and accounting obligations. These records do not contain card numbers.
• Server logs: minimal debug and security logs are retained for up to 90 days, then automatically purged.

5. Cookies

Essential storage keeps you signed in and remembers your preferences. Optional site analytics are off until you choose “Allow site analytics” in the footer. We honor Do Not Track and Global Privacy Control. You can decline later from the same control. Public page analytics include only approved page paths and a small allowlist of campaign labels, with query strings, project content, and private pages excluded. Studio activity uses separate allowlisted events; payment records support server-side purchase measurement. PostHog and Vercel process analytics when enabled. We disable session recording and automatic interaction capture. No advertising trackers are used.

Strictly functional storage in your browser:

• Guest and local drafts:projects you make without saving them to an account, including the screenshots you add, are kept in this browser's storage (IndexedDB). They reach us only when you save a project to your account or use a feature that sends data, as described above. Clearing this site's data in your browser removes them.
• Opening a homepage project in Studio:a note in this tab's session storage tells Studio which project to open. It ends when the tab closes.
• appliftoff-home-restore cookie: set when you take a homepage collection into Studio, so the homepage can return you to it when you come back. It holds only the collection's id (or “-”), no screenshot, words or account details. It lasts at most 30 minutes and is cleared once the homepage has used it.

6. Your rights

You can request access to or deletion of your data at any time by emailing privacy@appliftoff.com. We respond within 30 days.

7. Children

The Service is not directed to children under 13.

8. Changes

We'll post any material changes to this policy here and, if you have an account, email you before they take effect.

9. Contact

Questions? Email privacy@appliftoff.com.