Privacy Policy

This Privacy Policy describes how Tinh LLC ("Tinh," "we," "us," or "our") handles information in connection with the Tinh application ("the App") and the tinh.io website ("the Website"). Tinh LLC is a Delaware limited liability company.

1. Data the App Stores on Your Device

Tinh stores all of the following data exclusively on your device using local SQLite storage via SwiftData. None of this data is transmitted to our servers or any third party:

• Journal entries -- the text you write and all structured data extracted from it (categories, events, meals, exercises, supplements, etc.)
• Extracted health data -- nutrition information, exercise records, sleep patterns, and other health-related data parsed from your entries
• Correction history -- edits you make to improve how Tinh categorizes your entries
• Correlation and analysis results -- patterns, trends, and insights computed from your data
• App preferences and settings -- your configuration choices and personal dictionary

Your data is encrypted on device via macOS/iOS Keychain integration.

2. On-Device Processing

All data processing in Tinh happens locally on your device. This includes:

• Natural language processing -- the NLP models that extract structured data from your journal entries run entirely on-device
• Machine learning -- categorization, prediction, and pattern recognition models execute locally
• Correlation analysis -- all statistical analysis and trend detection is computed on your device
• Speech recognition -- voice dictation is processed on-device via Apple Speech Recognition

No journal content, extracted data, or analysis results are ever sent to external servers for processing.

3. Optional Device Permissions

Tinh may request the following permissions, each of which is optional and requires your explicit consent:

Apple HealthKit (opt-in)

If you grant permission, Tinh can read the following data from Apple Health for on-device correlation analysis:

• Steps, active energy burned
• Resting heart rate, heart rate variability
• Sleep analysis
• Workout records

This access is read-only. Tinh does not write data to HealthKit. HealthKit data is processed and stored locally and is never transmitted to our servers or any third party. This data is used solely to enrich the correlations and insights generated on your device.

Microphone (opt-in)

If you grant permission, you can dictate journal entries using voice input. Audio is processed on-device via Apple Speech Recognition. No audio recordings are stored or transmitted.

Location (opt-in, coarse only)

If you grant permission, Tinh uses your approximate location solely to fetch weather data for on-device correlation analysis. Location data is sent to our weather proxy at api.tinh.io, which forwards the request to the Open-Meteo weather API and returns the result. This proxy exists to avoid exposing your IP address to third-party weather services.

We do not log, store, or retain location data on our servers. The weather proxy processes the request in real time and does not persist any user data. Weather results are cached by geographic area (not by user) to reduce redundant API calls.

4. Subscriptions and Payments

Tinh subscriptions are managed entirely through Apple's App Store using StoreKit 2. We do not process, collect, or store any payment information, credit card numbers, or billing details. All subscription management, billing, and receipts are handled by Apple and are subject to Apple's terms and privacy policy.

5. Data We Do Not Collect from the App

To be explicit about what we do not do:

• We do not collect analytics or telemetry from the App
• We do not use crash reporting services
• We do not collect advertising identifiers
• We do not track users across apps or websites
• We do not require account creation -- the App works entirely offline
• We do not have social features or data sharing between users
• We do not sell, rent, or share any user data with third parties

6. TestFlight Beta

If you are using Tinh through Apple TestFlight, Apple may collect crash logs and usage data as part of their beta testing infrastructure. This is governed by Apple's privacy policy and TestFlight terms. Tinh itself does not collect any additional data during the beta period.

7. Website Data Collection

The tinh.io website is separate from the App and collects limited data:

Website Analytics

We use Plausible Analytics, a privacy-focused analytics service. Plausible does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and PECR. Analytics data is aggregated and cannot be used to identify individual visitors.

Beta Signup Form

If you sign up for the Tinh beta program through our website, we collect:

• Your name
• Your email address
• Your primary goal for using Tinh
• A description of your goals
• Your operating system

This information is stored in our database (hosted on Supabase) and is used solely for managing the beta program: reviewing applications, sending beta invitations, and distributing updates. We do not share this information with third parties. You can request deletion of your beta signup data by emailing info@tinh.io.

8. Data Retention and Deletion

Since App data is stored locally on your device, you have full control over it at all times:

• Export: You can export your data at any time from Settings
• Delete: You can delete all your data from within the App using the "Delete All My Data" option in Settings
• Uninstall: Removing the App deletes all locally stored data

For beta signup data stored on our servers, you can request deletion by contacting us at info@tinh.io. We will process deletion requests within 30 days.

9. Data Security

Your App data is protected by your device's built-in security features:

• On-device encryption via macOS/iOS Keychain integration
• Your device passcode and biometric authentication
• FileVault / Data Protection encryption (if enabled)
• Optional app lock within Tinh for additional privacy

For website data, we use industry-standard security measures including encrypted connections (HTTPS), secure database hosting, and access controls.

10. Children's Privacy

Tinh is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information through the website, please contact us at info@tinh.io and we will delete it promptly.

11. Your Privacy Rights

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Not be discriminated against for exercising your privacy rights

Since the App stores data locally on your device, we do not have access to your App data. For website data (beta signups), you can exercise these rights by emailing info@tinh.io.

European Economic Area and UK Residents (GDPR)

If you are located in the EEA or UK, you have similar rights regarding your personal data, including the right to access, rectify, erase, restrict processing, and data portability. The App's local-only architecture means your data is under your sole control. For any website data, contact us at info@tinh.io.

International Users

Tinh LLC is based in the United States. Website data (beta signups) is processed in the United States. By using the website and submitting information, you consent to the transfer and processing of your information in the United States. App data remains on your device regardless of your location.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will provide notice through the App or Website. Continued use of the App or Website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or Tinh's privacy practices:

Tinh LLC
Email: info@tinh.io
Website: tinh.io

Effective date: April 3, 2026