Privacy Policy

Tinge (“we”, “our”) is a mood weather diary for iPhone, iPad and Android, made by TIT B.V. It is local-first by design: your entries live on your device and — if you use iCloud on iPhone or iPad, or Android’s backup on Android — in your own account. We do not run a server, and we never see your data.

All taps, notes, photos, and day names are stored in Tinge’s local database on your device — on iPhone and iPad in Apple’s SwiftData framework, on Android in the app’s own private database. Nothing is sent to us, because there is no “us” to send it to — Tinge does not contact any service we control. The Android app does not even have Android’s permission to use the internet, so it cannot contact any server at all.

On iPhone and iPad, if you are signed in to iCloud, Tinge mirrors the local store to your private CloudKit database so other devices you own can read it. To keep everything strictly local, turn off iCloud Sync in Settings → Data (it takes effect once you quit and reopen Tinge), or sign out of iCloud in iOS Settings. Apple, not us, holds the iCloud copy — see Apple’s privacy policy.

On Android, if backup is on for your phone, Android includes Tinge’s diary — your taps, day names, notes and settings, but not your photos — in your Google backup, encrypted with your phone’s screen lock, so a new phone can restore it. Moving straight to a new phone (a device-to-device transfer) copies everything, photos included. Google, not us, holds the backup — see Google’s privacy policy. To keep everything strictly on your phone, turn off backup in Android’s settings.

On iPhone and iPad, if you grant permission, Tinge saves each tap as a State of Mind moment in Apple Health. This is write-only: Tinge never reads any of your Health data. Health data is stored and protected by iOS; you can revoke access at any time in the Health app or iOS Settings. Clearing all data in Tinge also deletes the State of Mind moments Tinge saved there. The Android app does not connect to any health service.

On iPhones and iPads with Apple Intelligence, Monthly recap in Settings writes a few lines about your last 30 days at the top of the Wall. It is written on your device by Apple’s on-device model from which feelings you logged on which days — never your notes or photos — and nothing is sent anywhere. The Android app has no recap.

On iPhone and iPad, turn on Require Face ID in Settings → Privacy to lock your diary with Face ID, Touch ID, or your passcode; authentication is performed entirely by iOS. On Android, turn on Require screen lock in Settings → Privacy to lock it with your fingerprint, face or screen lock; Android performs the check. Either way, Tinge never sees or stores your biometric data.

When you attach a photo to a tap, it is resized and stored as a JPEG on your device. On iPhone and iPad it is resized to roughly 1600 points and kept inside the same local store, and it is not uploaded anywhere except — if you have iCloud sync on — to your own iCloud account. On Android it is resized to roughly 1600 pixels and kept beside the diary, it is not uploaded anywhere, and Android’s cloud backup leaves it out.

• No usage telemetry and no crash-reporting service.
• No advertising or tracking SDKs, and no third-party network calls.
• No account, no sign-up, no email address — we collect nothing.
• We do not sell, share, or transfer any data to third parties.
• On Android, Google Play’s in-app review library can ask Google Play to show its rating dialog; Tinge never learns whether or what you rated.

On iPhone and iPad, Settings → Data → Clear all data wipes the local store, resets your custom labels, and deletes the State of Mind moments Tinge saved to Apple Health; if iCloud sync is on, the deletion propagates to your other devices. On Android, Settings → Data → Clear all data wipes the diary on your phone — every tap, day name, note and photo — and resets your custom labels; the copy in Android’s backup is replaced at the phone’s next backup.

Tinge is not directed at children under 13 and does not knowingly collect data from anyone — it has no way to.

We may update this privacy policy from time to time. Any changes will be reflected in the “Last updated” date at the top of this page.