Privacy Policy

Tinkt · Effective 28 October 2026 · 한국어

Tinkt is a quiet app. Each day you paint one colour. This page explains, in plain words, what happens to your data. The short version: your paintings stay with you.

Who we are

Tinkt is made by Uiseong Kim, an individual developer in Namyangju-si, Gyeonggi-do, South Korea. In this policy, "we" and "us" mean Uiseong Kim. You can reach us at hello@tinkt.app.

We don't collect your paintings

Your colours and your calendar of painted days are never sent to us. We cannot see them. (If you turn on usage sharing, we can see when the app is used, never which colour. See below.)

Where your paintings live

Your paintings are stored on your iPhone.

If you are signed in to iCloud, they are also stored in your own private iCloud database, run by Apple (CloudKit). This keeps them in sync and backed up. Only you can read that database. We have no access to it and cannot see your colours or dates. Apple's handling of iCloud data is covered by Apple's Privacy Policy.

The app works fully without iCloud. Your paintings then stay only on your iPhone.

Export

Export creates a CSV file with three columns: date, color and palette_slot. It opens the iOS share sheet, and you choose where it goes. The app uploads nothing.

Erase all paintings

In Settings, hold "Erase all paintings" to confirm. This deletes your paintings from your iPhone and from your iCloud database.

Usage data (optional, off by default)

To learn which parts of the app are used, the app can send a small amount of usage data. This is off unless you turn it on. We ask once during onboarding, and you can change it any time in Settings → "Share usage data".

The service we use is Amplitude, Inc., based in the United States. Amplitude processes the data on our behalf.

What is sent, only when sharing is on

The events

EventExtra detail sent
app_openednone
day_paintedwhere you painted from (source), and whether it was a palette or a mixed colour (kind) — not the colour itself
scale_viewedwhich view you looked at (scale)
onboarding_step_completedwhich step (step)
reminder_enabledon or off (on)
setting_changedthe name of the setting only, never its value
still_water_openedwhich mode (mode)
export_usednone
duo_posturewhich posture (posture)

Never sent

Your colours, palette slots, the advertising identifier (IDFA), Apple's device identifiers, your name, your email, or your location.

What the timing shows

Every event carries the time it happened. So if sharing is on, we can tell when the app was used, for example that a day was painted at a certain moment. We can never tell which colour, or which earlier day was painted.

Your IP address

The app does not include your IP address in the data. Like any server, Amplitude can see the network address a request comes from. Because the app never sends an IP address with the data, Amplitude doesn't record it with your events or work out your location from it. We checked this in our own Amplitude project: the location fields stay empty.

Because sharing is off by default and only turned on by you, the legal basis for this processing under the GDPR is your consent. You can withdraw it at any time by turning sharing off.

Other features

Daily reminder

The optional reminder is a local notification scheduled on your iPhone. There is no push server, and nothing is sent anywhere.

App lock

The optional lock uses Face ID, Touch ID or your iPhone passcode through Apple's LocalAuthentication. Your biometric data never leaves Apple's secure hardware. The app never sees it; it only learns "yes" or "no".

Purchase check

The app reads, on your iPhone, which version you first bought (through Apple's StoreKit). This lets us honour early buyers. Nothing about your purchase is sent to us.

How long data is kept

Your rights

Depending on where you live (for example under the EU/UK GDPR, Korea's Personal Information Protection Act, or California's CCPA), you have the right to access your data, correct it, delete it, object to or limit its use, and withdraw consent. You also have the right not to be treated differently for using these rights.

In practice:

If you are in the EU or UK, you may also complain to your local data protection authority.

International transfer

If you turn on usage data, it is processed by Amplitude in the United States. Amplitude handles it under its own data protection terms with us.

Children

Tinkt is not directed at children under 14 (under 13 in the United States). In any case, the app does not collect personal information from anyone.

Security

Paintings are protected by your iPhone's security and, if you use it, by Apple's iCloud. Usage data travels over an encrypted connection (HTTPS). We keep the data we receive to the small set listed above.

Changes

If this policy changes, we will update this page and the date at the top. If a change is significant, we will also mention it in the app's update notes.

Contact

Uiseong Kim · Namyangju-si, Gyeonggi-do, South Korea
hello@tinkt.app