Privacy Policy
This policy explains how Tattana (“Tattana”, “we”, “us”) collects and uses your personal data when you use our website, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Tattana is operated by Seyedali Mirmohammadi, a sole trader based in the United Kingdom, who is the data controller responsible for your personal data. If you have any questions about this policy or want to exercise your rights, contact us at ali98mim@gmail.com.
2. What data we collect
- Your quiz answers. The choices you make and the free-text you type (for example, a meaningful symbol, animal, or memory). Please avoid entering special-category information (such as health, religious, or other sensitive details) — if you do, you consent to us processing it to generate your designs.
- Your email address. Collected when you choose to unlock your designs, so we can verify it’s you (via a one-time code / magic link) and contact you about the beta.
- Usage and attribution data. Basic analytics about how you move through the app, plus advertising attribution identifiers passed in the link you arrived from (for example UTM parameters and a Meta/Facebook click identifier, fbclid), your referrer, approximate device/browser (user agent), and screen size. See section 7.
3. How and why we use it (legal bases)
- To generate your tattoo concepts from your answers — legal basis: performance of a service you requested and our legitimate interest in providing the product.
- To verify your email and unlock designs — legal basis: steps taken at your request and our legitimate interest in preventing abuse.
- To measure and improve the product and our ads — legal basis: legitimate interest in understanding what works. You can object to this at any time (see section 6).
- To email you about the beta — legal basis: consent, which you can withdraw at any time by replying to any email or contacting us.
4. Who we share it with
We do not sell your personal data. We share it only with the service providers (processors) that run the app on our behalf:
- Supabase — stores your email, quiz session, and analytics events, and handles email verification.
- Google (Gemini) — generates your follow-up questions and design concepts from your answers.
- Maginary — renders the design images from the generated prompts.
- Vercel — hosts the website and processes server logs.
- Meta (Facebook/Instagram) — if you reached us from one of our ads, Meta provides aggregated campaign reporting. We do not currently run a Meta tracking pixel on this site.
5. International transfers
Some of these providers are based outside the UK (for example in the United States). Where data is transferred outside the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement / Addendum, UK adequacy regulations, or equivalent contractual protections.
6. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data (“right to erasure”);
- restrict or object to our processing;
- request a copy of your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these, email ali98mim@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
7. Cookies and analytics
We keep tracking to a minimum. We use first-party analytics — measured by our own server, not a third-party ad pixel — to understand how people move through the quiz. We also read advertising attribution parameters (such as UTM tags and fbclid) from the link you arrived on so we can tell which campaign brought you here. Our email verification provider (Supabase) may set essential cookies / local storage needed to keep you signed in while you use the app. We do not use these for cross-site advertising.
8. How long we keep it
We keep your data only as long as needed for the purposes above and for this validation phase of the product. You can ask us to delete it at any time (see section 6).
9. Children
Tattana is intended for adults aged 18 or over and is not directed at children. Please do not use the service if you are under 18.
10. Changes to this policy
We may update this policy as the product evolves. The “last updated” date above shows the latest version.