Privacy Policy

We collect the minimum information needed to provide a high-quality tattoo discovery experience: an account so you can save what you love, the content you publish or save, and limited diagnostic data so we can keep the app running. We do not sell your personal information, and we do not track you across other companies’ apps or websites for advertising.

You can request a copy of your data or delete your account from inside the app at any time. If you have any questions, write to privacy@mink.app.

Mink (“Mink,” “we,” “us,” “our”) is the controller of your personal information processed via the Services. You can reach our privacy team at privacy@mink.app.

The categories below mirror Apple’s App Privacy “Data Types” framework so they map directly onto our App Store privacy nutrition label.

We do not collect: precise GPS location, contacts, health/fitness data, financial information, or sensitive personal information. Mink does not use your data for third-party advertising and does not implement the App Tracking Transparency “tracking” behavior as defined by Apple.

• Provide the Services: authenticate you, show you a personalized feed, store your collections, deliver search results, and let artists publish work.
• Image search: reference photos you upload are processed by a vision model to extract descriptive tags (style, motif, technique). These tags are matched against publicly published tattoo metadata in our gallery.
• Communicate with you: send essential service emails (account, security, important updates) and, with your consent, occasional product updates.
• Improve the product: understand how features are used, fix bugs, prevent abuse and improve recommendations.
• Comply with the law: meet our legal, tax and regulatory obligations and respond to lawful requests.

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases:

• Contract — to create and operate your account and provide the Services.
• Legitimate interests — to keep the Services secure, prevent abuse, debug and improve the product, and to send essential service messages. You may object to processing based on legitimate interests at any time.
• Consent — for non-essential cookies, optional analytics and marketing emails. You can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation — when we need to comply with applicable laws.

We share personal information only with service providers (“processors”) who help us run the Services and only to the extent necessary to do so. Current categories include:

• Cloud & database (Supabase) — authentication, user profiles, tattoos, bookmarks and collections storage.
• Hosting / CDN for the mink.app website and image delivery.
• Email delivery for transactional and waitlist messages.
• Crash & performance tooling for debugging.
• Vision AI provider for describing reference photos you submit to image search.

We may also share information (i) to comply with valid legal process, (ii) to enforce our Terms or protect the rights, property or safety of Mink, our users or others, and (iii) in the context of a merger, acquisition or sale of assets — in which case we will notify you in advance.

We do not sell your personal information and we do not share it with third parties for cross-context behavioral advertising.

Per Apple’s App Store Review Guidelines (§5.1.2), “ tracking” refers to linking user or device data collected from our app with user or device data collected from other companies’ apps, websites or offline properties for targeted advertising or measurement purposes, or sharing user or device data with data brokers. Mink does not engage in tracking. For this reason we do not present an App Tracking Transparency prompt.

If we ever introduce a feature that constitutes tracking, we will update this policy and present the system ATT permission prompt before any such tracking begins.

We keep your personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete your profile, your collections and your published content within 30 days, except where we are required to retain certain data for legal, security or fraud-prevention purposes (e.g. abuse logs, financial records). Aggregated and de-identified data may be retained for longer.

Depending on where you live, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information (also offered in-app, in compliance with App Store Guideline §5.1.1(v)).
• Restriction / Objection — ask us to restrict or object to processing based on legitimate interests.
• Portability — receive a copy of your data in a structured, machine-readable format.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint — with your local data protection authority. We’d appreciate the chance to address your concern first.

You can exercise any of these rights by emailing privacy@mink.app or by using the in-app account deletion flow. We will respond within the timeframes required by applicable law.

In the past 12 months, Mink has collected the categories of personal information described above (Identifiers, Customer Records, Internet / network activity, Inferences, and Audio/Visual content uploaded by users). We have not sold or shared personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA.

California residents have the right to (i) know what personal information we collect, use and disclose; (ii) request deletion of personal information; (iii) request correction of inaccurate personal information; (iv) opt out of any future sale or sharing of personal information; and (v) not be discriminated against for exercising these rights. To exercise your rights, contact privacy@mink.app. We will verify your request using the email associated with your account.

Mink is not directed to children under 13 (or under the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at privacy@mink.app and we will delete it.

Where personal information is transferred outside your country (including outside the EEA, the UK or Switzerland), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or other recognized transfer mechanisms.

We use industry-standard administrative, technical and physical safeguards to protect personal information, including encryption in transit (HTTPS), encryption at rest for our database, and strict access controls. No method of transmission or storage is 100% secure, however; if you discover a vulnerability, please contact security@mink.app.

We may update this Privacy Policy from time to time. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify you in-app or by email. The version published on this page is always the current one.

For any questions about this Privacy Policy or our data practices, contact:

Mink — Privacy Team
Email: privacy@mink.app