Privacy Notice

This notice describes Tint & Kin, operated by an individual developer as Tint&kin. Contact privacy@tintkin.com for privacy questions or requests. Tint & Kin accounts are separate from other products' accounts.

Local records and optional synchronisation

Daily colour and reading history, reflections, quiet-session records and preferences support your personal experience. Private records are stored locally with protection using device-managed keys. Uninstalling the app, losing the device or losing access to its keys can affect recovery.

Signing in or purchasing membership does not automatically upload your personal records. Synchronisation requires separate choices for reading history, reflections and quiet sessions; importing existing local history is also a separate choice. If enabled, the selected category can include dates, content and artwork references, reflection text, or quiet-session durations and times, together with revision information needed to reconcile devices. Turning synchronisation off does not erase an existing cloud copy.

Account and circle information

The authentication service processes your email address, password or verification information, and sessions to sign you in and secure account actions. Product services process account, device and session identifiers and access state. Adult self-confirmation does not collect a date of birth or identity document. Google sign-in is not enabled in the current release configuration.

Circles use profile names, chosen avatars, membership, invitations and permission state. Your selected colour and status are displayed according to circle permissions. Other members do not receive private reflections, quiet-session history or complete personal reading history through circle membership. Private member remarks are limited to their authorised viewer.

Purchases and sharing

Where available, Google Play handles store payments. The app uses a product-specific obscured account identifier and submits purchase tokens, product references and purchase state for entitlement verification and recovery. The current pre-release service does not offer real Google Play purchases.

External sharing is a deliberate action with a preview. Public artwork sharing excludes private reflections, quiet-session durations and private invitation tokens by default. The recipient or service you choose receives the shared content under its own practices. Private invitations are separate from public artwork links.

Providers and connections

Supabase provides authentication. Cloudflare provides application interfaces, database and object storage, website delivery and domain email services. Google Play provides purchase processing when enabled. These providers necessarily process connection information such as network addresses and service requests to deliver and protect their services. The current authentication test project is hosted in Singapore; provider infrastructure can process information across regions.

Our application does not include an advertising or behavioural analytics SDK. This does not mean that hosting, authentication or store providers process no operational information. We do not describe account-related identifiers as anonymous. Connections use HTTPS and account and circle permissions restrict access; these protections are not a guarantee of absolute security.

Retention and deletion

Account profiles and personal cloud records are kept while the relevant features are used, until you clear the corresponding product data or delete the account. Account deletion removes the sign-in identity, profile and associated private live-service data. Clearing product data keeps the login account and membership relationship. Requests may remain pending or retryable until processing is complete.

After account deletion, limited records remain: internal account and retired session identifiers, an irreversible keyed identity reference, deletion or clearing request references and verification hashes, completion state and times, reserved user numbers, and purchase-token hashes linked to the former internal account. They prevent old requests from restoring a deleted account, prevent previously assigned numbers or purchase credentials from being reused, and allow a deletion result to be verified. These retained product records do not contain your email address, password, private reflections or quiet-session history, and do not restore your deleted profile or membership. The encrypted purchase token itself is removed when account deletion completes. Clearing product data has a different scope and keeps the account and purchase relationship.

These minimum security records currently remain without automatic time-based expiry. We do not promise that they disappear after a fixed number of days. This retention does not authorise retaining deleted private content for advertising or reconstructing it. Supplier recovery copies and operational records follow separate service retention cycles; deleting live data does not instantly remove every historical recovery copy.

You may request access, correction or deletion through privacy@tintkin.com. The external request entry is https://tintkin.com/account-deletion. We need to confirm ownership before taking account action; do not email passwords, sign-in links or authentication codes. Account deletion does not cancel a store subscription. Offline device copies and content already sent to external recipients may remain outside the live service.

Choices and updates

You can manage circle visibility, change optional synchronisation choices and use the available clearing or deletion operations. Account features are intended for adults; report concerns through the privacy contact above. Updates identify their version and effective date. Optional processing choices remain separate from simply reading this notice.