Privacy Policy
Effective date: September 28, 2026
Last updated: September 28, 2026
1. Who We Are
Tinvo operates the Tinvo app and is the controller of the personal information described in this policy. Contact us at Tinvo@gmail.com. Use of the app is also governed by our Terms of Service.
2. Scope
This policy covers the Tinvo iOS app, its account service and its support communications. Tinvo helps collectors record vintage biscuit tins and compare dated photographs for possible changes in condition. The webpage displaying this policy does not use cookies, analytics, tracking pixels or advertising scripts.
3. Information We Collect
We collect the following information only as needed for the purposes stated here. Permissions are requested through iOS when a feature needs them.
| Category and examples | Source | Purpose | Retention |
|---|---|---|---|
| Account: username, email address, password hash and account settings | You provide these when registering or signing in | Create and secure your account; keep your records available across sign-ins | Until account deletion, then up to 30 days in backup copies except required records |
| Collection records: tin brand, dimensions, maker or base markings, acquisition date, shelf position, lid fit, inspection notes and condition cards | You enter them; condition cards are produced at your request | Build a searchable tin catalog, dated condition timeline and inspection queue | Until you delete a record or close your account, then up to 30 days in backups |
| Camera and photo library content: selected photographs of a tin's lid, base, seams and interior | You take a photo or select one after granting iOS permission | Save tin records and compare the same area over time | Selected photos follow the collection-record period; unselected captures are discarded when the action ends |
| Microphone content: spoken notes you choose to record during a tin inspection | You record after granting iOS permission | Attach your own observations to a tin record | Saved notes follow the collection-record period; unsaved recordings are discarded when the action ends |
| Device and usage information: IP address, app version, device type, sign-in and error events | Collected automatically when the app contacts our service | Maintain security, troubleshoot faults and prevent abuse | Operational logs for up to 90 days |
| Purchase information: Apple transaction identifier, successful purchase receipt and coin balance | Apple sends a purchase confirmation; balance is calculated by Tinvo | Deliver one-time coin purchases and keep accurate balances | Balance until account deletion; transaction records up to 7 years where needed for legal or accounting duties |
| Advertising measurement: advertising identifier where available, ad interaction and app conversion events | Collected only after your iOS tracking authorization | Measure ads for Tinvo's tin-collecting tools | Measurement events for up to 90 days, or less if consent is withdrawn |
| Support correspondence: your email, message and information you send us | You contact us | Respond to questions and resolve issues | Up to 24 months after the last reply, unless a legal duty requires longer |
We do not ask for payment card numbers or your Apple ID password. We do not collect location history, contacts or biometric identifiers for Tinvo's tin catalog and inspection features.
4. Account Information
You create an account with a username, email address and password, then sign in with those credentials. We store the account profile and a protected password hash on our servers, together with your collection records, inspection history and coin balance. We use this information to authenticate you and restore your catalog when you sign in. We do not store your plain-text password.
You may remove individual tin records in the app. To close your account and request deletion of associated server data, use Delete Account in account settings or email Tinvo@gmail.com from your registered address. We verify the request and remove or de-identify the account and catalog, subject to the limited legal and backup periods in Section 10. Deleting the app alone does not close a server account.
5. How We Use Information and Legal Bases
- Performance of our agreement: register and sign you in, store your catalog, display condition timelines and inspection queues, deliver coin purchases and provide features you request.
- Your consent: access the camera, selected library photos or microphone through iOS permissions; send a chosen tin comparison to OpenRouter for AI processing; and, separately, measure ads through cross-app or cross-website tracking if you allow the iOS prompt. You may withdraw consent through app controls or iOS Settings. Withdrawal does not affect prior lawful processing.
- Legitimate interests: secure the service, investigate errors or misuse, and answer support messages, balanced against your privacy rights.
- Legal obligations: keep transaction or other records when applicable law requires them and respond to lawful requests.
6. AI Processing (OpenRouter)
If you request a condition comparison, Tinvo first tells you that OpenRouter will process the request and asks for your explicit consent before transmission. The request contains only the selected biscuit-tin photographs needed for comparison, such as the lid, base, seams or interior, and relevant notes such as the recorded condition, maker mark and inspection dates. You can keep your catalog without using AI.
OpenRouter and its selected model endpoint process the request only to return possible rust, dent and print-loss observations. Tinvo uses a route configured for no retention of request content after the response, and temporary request copies are deleted when processing ends. Tinvo does not separately store the transient AI request payload on its servers. This is distinct from the photographs, notes and condition cards you choose to keep in your server-stored catalog; those remain until you delete them or your account.
7. How We Share Information
These are the identified recipients that support Tinvo:
- Apple: distributes the app, processes one-time in-app purchases and sends Tinvo purchase confirmation. Apple's own terms and privacy practices govern its services.
- OpenRouter: processes the specific tin photographs and notes you choose to send for an AI comparison, only after your explicit consent as described above.
- Tinvo's account servers: store your profile, saved catalog, notes, inspection history and coin balance for the functions you use. They are operated for Tinvo, not a separate advertising service.
If you authorize ad measurement, limited measurement signals may go to the advertising partner that served Tinvo's ad, as described in Section 8. Otherwise, we disclose information only with your direction, when required by law, when necessary to protect rights or safety, or as part of a merger or acquisition subject to appropriate protections. We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising.
8. Tracking and Advertising
Tinvo asks for iOS App Tracking Transparency permission to measure ads for its tin-collecting tools. If you agree, Tinvo may link a device advertising identifier, ad interaction and limited app conversion events with activity across other companies' apps and websites, and send those measurement signals to the advertising partner that placed a Tinvo ad. This is for campaign measurement, not for building a tin-collecting profile or targeting ads. If you decline, we do not perform this cross-app or cross-website tracking.
You can change your choice at any time in iOS Settings > Privacy & Security > Tracking. Turning tracking off stops new measurement sharing associated with your device; you may also email us to request deletion of measurement data we still hold.
9. Payments
Tinvo offers one-time consumable coin purchases through Apple's in-app purchase system. Apple handles payment details and refund requests under App Store policies. Tinvo receives only a successful transaction receipt and the information needed to credit coins; it does not receive your card number or Apple ID password. The first seven AI condition assessments are free; after that, each assessment uses 28 coins.
10. Data Retention
Account details and saved tin photographs, notes, condition cards and inspection records remain while your account is active or until you remove them. After account deletion, active server records are removed or de-identified, and backup copies expire within 30 days unless a legal hold applies. Local cached records remain on your device until cleared in the app, account deletion removes them, or the app is uninstalled. AI request copies are deleted as soon as processing ends; they are not an additional stored archive.
Security and error logs are kept for up to 90 days. Advertising measurement events are kept for up to 90 days and are stopped when tracking consent is withdrawn. Support email is kept for up to 24 months after the last reply. Purchase transaction records may be kept for up to 7 years where a legal or accounting duty requires it. At the end of each period, we delete or de-identify the data unless a lawful exception requires retention.
11. International Transfers
Apple, OpenRouter and their service infrastructure may process data in the United States or other countries outside your own. Where personal data from the European Union or United Kingdom is transferred to a country without an applicable adequacy decision, Tinvo uses appropriate safeguards required by law, such as standard contractual clauses, and limits the information shared to what the service needs.
12. Your Rights
Rights available to users
Depending on your location, you may request access to, correction of, deletion of or a portable copy of your personal information. You may withdraw consent for optional AI processing and tracking at any time. You can edit or delete saved tin records in the app, and use Delete Account in account settings to request removal of server and local account data, subject to legal retention duties.
European Union and United Kingdom
You may also request restriction of processing, object to processing based on legitimate interests, and complain to your data-protection supervisory authority. We will tell you if a lawful exception prevents us from completing a request.
California and other U.S. states
Where state law applies, you may request to know, access, delete or correct your information, and opt out of a sale, sharing or targeted advertising. Tinvo does not sell information or share it for cross-context behavioral advertising, but you can still opt out of tracking in iOS Settings. We do not discriminate against you for exercising a privacy right. You may use an authorized agent where the law allows and may appeal a denied request by replying to our decision.
How to submit a request
Email Tinvo@gmail.com or use the relevant account control in the app. We may verify your identity or an agent's authority before acting. We aim to respond within 30 days, or within 45 days for California requests, subject to extensions permitted by law. You may contact us to appeal a denial or ask how to reach the relevant authority.
13. Security
We use encrypted connections for transmission, access controls for server-stored records, protected password hashes and data minimization to reduce risk. No internet or storage system is perfectly secure, so we cannot promise absolute security. Please use a strong password and tell us if you suspect unauthorized account access.
14. Children's Privacy
Tinvo is not directed to children under 13 and does not knowingly collect their personal information. If we learn that we have collected such information, we will delete it promptly. A parent or guardian may contact Tinvo@gmail.com about a concern.
15. Changes to This Policy
We may update this policy when Tinvo or applicable law changes. We will revise the Last updated date and give notice in the app before a material change takes effect. If a change requires new consent, we will ask for it before the related processing begins.
16. Contact
Operator and data controller: Tinvo. For questions or requests about this policy, email Tinvo@gmail.com with the subject [Tinvo] - Privacy Inquiry.