Privacy Policy

Tint Cam ("we", "our", or "the app") is a photo editor — filters, frames, text, effects, and an optional AI tab. Almost everything in Tint Cam runs entirely on your device with no server involved at all. The one exception is the AI tab (Effects, Style, Retouch, Vibe, Headshot, Chat, Critique, and Restore) — the only place in the app where your photo is sent to a server, and only when you actively choose to use it. The Look Market also talks to our server to list and download looks, but it never sends your photo. This policy explains exactly what is processed, where, and why.

Tint Cam only ever sees the one photo you choose to import, at the moment you choose it — it never scans or lists your photo library. The camera, cropping, filters, adjustments, frames, text, doodles, one-tap effects, and the features below all run entirely on your device. Your photo is never uploaded or copied to a server for any of this.

• Person segmentation— powers Background Swap's subject cutout, so you can drop in a new color, gradient, or photo backdrop behind the subject.
• Face contour detection — powers Beauty's skin-smoothing mask. Tint Cam does notdo face recognition or identification: it never builds a profile that matches "this is the same person" across different photos, and no face-identifying data is stored anywhere.
• Body pose and hair detection — powers the Body tools, Hair color and the camera's pose guide, so the edit lands on the right part of the photo.
• Scene recognition— your phone's built-in on-device image classifier (Apple Vision on iOS, Google ML Kit on Android) labels what's in the photo — sky, plants, food, a room, a night scene — so the "For this photo" tab can sort looks that suit it. The labels are used right then to order the looks and are not stored or sent anywhere.

Saved presets and unfinished-edit drafts are stored in a local database on your device only — never uploaded anywhere.

The Look Market lists extra looks you can download into your filter tray. Browsing and downloading fetch look recipes (slider settings) and cover pictures from our server — your photo is never sent. "Try on your photo" renders the look on your device.

• When you download or remove a look, the app sends that look's ID with a random device ID the app generates for this purpose (not your name, email, or Apple/Google account). Our server keeps that list so download counts stay right and, on iOS, your downloaded looks come back after a reinstall.
• Liking or reporting a look uses the same anonymous app-installation ID as AI credits, plus device attestation (below) to prevent abuse. A report's reason is stored with it.

The AI tab is different, and Tint Cam tells you so the first time you open it, before anything is sent anywhere. If you choose to generate a result there, the photo you're editing (resized down, not the original file) is uploaded to our server and forwarded to Google Cloud's Gemini API to produce your result — a new edited photo for Effects/Style/Retouch/Vibe/Headshot/ Chat/Restore, or a structured written evaluation (score, comments, tips) for Critique, with no new photo produced. Any text you type into that tab (a custom style description, a chat message) is sent along with it to fulfill that specific request.

• This only ever happens for a photo you are actively editing, when you tap Generate.
• Our server does not store your photo — it is used only to relay your request to Google and your result back to you, then discarded.
• We use Google Cloud Vertex AI's paid API tier, under which Google does not use your content to train its models. See Google Cloud's Service Terms and Google's Privacy Policy for how Google itself handles data sent to its APIs.
• A result the AI tab produces is sent straight back to your device — we don't keep a copy.

Separately from the photo itself, our server keeps a lightweight usage log for each AI tab request, tied to an anonymous app-installation ID (not your name, email, or Apple/Google account) — the same ID RevenueCat already uses to track your AI credit balance. This log records:

• Which AI feature you used, which model handled it, and whether it succeeded
• The credit cost and any refund, for keeping your balance correct
• For a request with typed text (Style's custom description, Chat), the first 200 characters of that text — never your photo, and never used for anything beyond debugging and abuse prevention

This log is never sold, never used for advertising, and is only ever looked at to answer questions like "did this request succeed" or to investigate abuse of the AI credit system.

• Your name, email address, or any personal identity
• Copies of your photos — including AI tab photos, which are relayed and discarded, never stored
• Face-identifying data of any kind
• Your location
• Any data for advertising or tracking purposes

Tint Cam uses a minimal set of third-party services. None of them ever receive your photo unless you actively use the AI tab, in which case only Google (below) does:

• Google Cloud (Gemini API / Vertex AI) — processes the photo and any typed text you submit in the AI tab, to generate your result. See Google's Privacy Policy.
• RevenueCat — manages the one-time Tint Pro purchase, AI credit pack purchases, and your AI credit balance, all keyed to an anonymous app-installation ID. See RevenueCat's Privacy Policy.
• Apple App Attest / Google Play Integrity— before an AI tab request, or a Look Market like or report, is processed, your device proves to Apple or Google that it's running a genuine, unmodified copy of Tint Cam (standard anti-abuse device attestation). This confirms your device is legitimate; it does not identify you personally.
• Sentry (optional) — crash and error reporting, used only to fix bugs. Crash reports never include your photo or any photo-derived content. See Sentry's Privacy Policy.

Saved presets, edit history, and unfinished drafts are stored exclusively on your device using local storage and are never uploaded anywhere — uninstalling the app removes all of it, permanently. The AI usage log described above (metadata only, never your photo) lives on our server for as long as needed for credit accuracy, debugging, and abuse prevention, and the Look Market keeps the list of looks each random device ID downloaded; contact us (below) if you'd like either deleted.

Tint Cam asks for photo library access only when you actively choose to import a photo — not as a standing, upfront permission. You can revoke this access at any time from your device's system settings (iOS: Settings → Tint Cam → Photos; Android: Settings → Apps → Tint Cam → Permissions). Tint Cam will simply be unable to import a new photo until access is granted again — nothing about edits you've already made changes on our end.

Tint Cam is not directed at children under 13. We do not knowingly collect any information from children.

Tint Cam collects no personal data tied to your real-world identity, so there is no account or profile to access, correct, or delete. If you'd like the anonymous AI usage log described above deleted (e.g. after uninstalling), contact us and we'll remove it.

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the new policy.

Questions? Contact us at support@tuanhoang.dev.