Privacy Policy
Last updated: September 22, 2026
Tattoo Ideas AI at tattoo-ideas.ai is operated by Core Matrix, LLC, a limited liability company formed in Delaware, United States ("we", "us" or "our"). This notice explains how we process information when you use the website and services.
1. Information we process
Google sign-in provides your name, email, profile image and account identifier; we do not receive your Google password. We process prompts, style and color settings, generated images, visibility choices, generation records and account identifiers. We also keep subscription identifiers, payment status and transaction records received from payment providers, technical logs (including IP addresses), usage analytics and support correspondence. Payment card details are entered with the payment provider and are not stored in our application database.
2. How we use information
We use information to authenticate accounts, generate and deliver designs, store and display works, manage access and subscriptions, provide support, diagnose errors, prevent abuse and meet applicable obligations. Where applicable law requires a legal basis, processing depends on providing the requested service, legitimate interests such as security, legal obligations or consent where required.
3. AI generation and public images
We send your prompt and design settings to the configured third-party AI generation service, which may include Right Codes / Right API and its upstream model providers. When generation is enabled, prompts are first sent to Creem for content-policy screening; a request identifier may accompany them. Do not include confidential information, identity documents, sensitive personal information or personal information you do not have permission to share. Provider processing is also subject to its own terms and privacy practices; we cannot promise that all providers have the same retention or training policies.
4. Gallery visibility
Designs marked public, together with their prompts and style information, can appear in Explore and public design pages and may be indexed by search engines. Legacy gallery works are public. Image files are delivered through a public Cloudflare R2 image domain. An unlisted work is excluded from the gallery, but anyone who has its direct image link can still access it. This service is not suitable for confidential images. Contact us to request removal of a work.
5. Providers and sharing
We use Railway for application hosting, Supabase for account and design records, Cloudflare for DNS and image storage/delivery, Google for sign-in and analytics, AI providers for generation, and payment providers for checkout and billing. They receive information necessary for those functions. The provider identified at checkout handles payments under its own privacy notice; historical billing records may remain with the previous provider. We may disclose information where legally required, to protect the service and users, or in connection with a business transfer subject to applicable requirements. We do not sell prompts or account information as a standalone data product.
6. Cookies and analytics
We use cookies and similar storage for authentication and service functionality. The website also uses Google Analytics to understand visits and usage, which may process identifiers and device information. You can manage cookies in your browser and use Google's analytics opt-out tools. Blocking necessary cookies can prevent sign-in. Analytics data is not necessarily anonymous.
7. Retention, security and international processing
We retain account and design information to provide the service and meet applicable legal, security and record-keeping needs. Contact us to request deletion; backups, legally required records and copies held by other people may not disappear immediately. We use access controls and encrypted connections, but no system is completely secure. Providers may process information outside your country. Where applicable law requires safeguards for international transfers, those requirements apply.
8. Your requests and choices
Depending on your location, you may have rights to access, correct, delete or receive a copy of your information, restrict or object to processing, withdraw consent where relied upon, and complain to a relevant supervisory authority. Contact us to make a request. We may verify your relationship to the account before acting. Applicable exceptions and retention requirements can limit a request.
9. Children and changes
The service is not intended for children under 18. Contact us if you believe a child has provided personal information. We may update this notice as the service changes and will show the revised date here.
10. Contact
For privacy requests, contact Core Matrix, LLC at support@tattoo-ideas.ai.