Privacy Policy
Effective November 4, 2026
This policy explains what Tinku's Treetop ("the app", "we") collects, why, and the choices you have. We keep it short because we try to collect little.
What we collect
When you create an account, you give us:
- Your email address and a password (stored only as a secure hash, never in plain text).
- Your name and the animal you pick as your avatar. Both are visible to other people in the app.
- Your age, how you heard about the app, your favorite food, and your religious affiliation. These are answers you give during setup. They are private: other people in the app cannot see them.
As you use the app, we store:
- The messages, photos, videos and emoji reactions you send and receive, and when.
- If you report someone, the report you send, including the reason, any details you add, and the message you reported.
- The list of people you have blocked.
On your device the app keeps your sign-in session and which conversations you have read. This stays on your phone.
If we add push notifications, we will also store a device token that Apple gives the app so we can notify your phone about new messages.
How we use it
- To run the app: sign you in, show you in the directory, and deliver your messages and photos.
- To email you sign-in and password-reset codes.
- To keep people safe: review reports and act on abuse.
We do not sell your information, show ads, or track you across other apps and websites. We do not use analytics or advertising tools in the app.
Who can see what
- Everyone with an account can see your name and animal, and can message you.
- Only the people in a conversation can see its messages and photos.
- Only you (and us, as the operator) can see your private setup answers and your email address.
Messages are protected in transit and by access rules on the server, but they are not end-to-end encrypted. As the operator of the service we can technically access stored data, and we only do so to keep the service running, to review reports, or when the law requires it.
Services we use
We use these providers to run the app. They process data on our behalf:
- Supabase stores accounts, messages and photos (hosted in the United States).
- Resend delivers the emails that contain your sign-in and reset codes.
- Apple provides Sign in with Apple and push notifications, if and when you use them.
Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time in the app under Settings → Account → Delete Account. This permanently deletes your profile, your private answers, your photos and videos, your messages and your reactions. Because a conversation involves two people, deleting your account also removes those conversations for the people you chatted with. Reports you filed are deleted with your account. Reports about you may be kept so we can protect other people.
If you cannot use the app, email support@tinkustreetop.app from the address on your account and we will delete it for you.
Your choices
- Edit your name and animal in Settings.
- Block or report anyone from inside a conversation, and unblock people in Settings.
- Ask for a copy of your data or a correction by emailing us. Depending on where you live, you may have further rights, such as access, correction or deletion, and we will honor them.
Children
The app is for people aged 13 and over. We do not knowingly collect information from anyone younger. If you believe a child has signed up, tell us and we will delete the account.
Changes
If we change this policy in a meaningful way, we will update the date above and, for big changes, tell you in the app.
Contact
Questions or requests: support@tinkustreetop.app