Privacy Policy

Onyx Tattoo is a tattoo design and decision studio. It covers an idea, craft options, AI-assisted artwork, optional body try-on, and stencil export. The current version is a Free Beta. Features may change, narrow, or stop. Free Beta is not a permanent entitlement, and it is not a promise that the service will continue at the same scope.

The controller is the business named below. The business is an exempt dealer (עוסק פטור), registered with the Israel Tax Authority on 12 July 2026. It does not issue tax invoices and does not deduct input VAT. A national ID is not published in this document.

Business name:

SOULWARE STUDIO

Product name:

Onyx Tattoo

Send requests to the address below. Where you can, send them from the Google account email, so the request can be matched to the account.

support@soul-oracle.net

The name below is not ours, and it is not a contact channel.

onyxtattoo.studio

This policy and the terms are published at:

https://onyx-tattoo.com/privacy.html

https://onyx-tattoo.com/terms.html

We collect account details, content you provide to run studio features, on-device drafts and history, usage analytics and funnel events, optional crash reports when configured, problem reports you choose to send, and server wallet balances and ledger entries for the usage allowance.

Content you provide includes tattoo idea text, craft choices, lettering, refine instructions, reference images, optional body photos for try-on, and generated artwork. Giving data is voluntary. Without an account, signed-in studio features do not run. Without camera or photo access, try-on and image pickers do not run.

Usage analytics and funnel events are collected through the analytics service. The event payload does not include prompts, body photos, or email addresses. Crash reports are sent only if a collection identifier is configured for the reporting service. If none is configured, nothing is sent to that service. Refusing analytics does not, by itself, close the account.

We collect the Google account email, the display name, and the user identifier in the authentication service. The purpose is to identify the account, allow sign-in, and tie content and the wallet to the user.

The display name from your Google account may be stored with your user record so the app can show who is signed in. You can ask for correction under the access and correction section.

A body photo is sensitive user content. In-app consent is required before try-on. The image is sent to our server and to the AI provider only when you run try-on. A body photo is not included in an analytics payload. Drafts and history on the device let work continue on the device itself.

When in-app purchases are available, payment is processed by Apple or Google. We do not receive card numbers. RevenueCat receives the app user identifier, the product bought, purchase and renewal status, and store transaction identifiers, so the server can credit the wallet.

We use account data to operate sign-in and tie content and the wallet to you. We use content you provide to produce the result you asked for. We use analytics to understand use and find operational failures. We use crash and problem reports to diagnose issues. We use the server wallet to run the usage allowance. When you run generation or try-on, prompts and needed images are sent to the AI provider through our cloud functions to produce that result, and not for some other use.

Giving data is voluntary. There is no legal duty to provide it. Refusal has a practical consequence, depending on the kind of data. Without an account, signed-in studio features do not run. Without camera or photo access, try-on and image pickers do not run.

We do not sell personal data. There is no third-party ad network. There is no cross-app advertising tracking. We do not collect a government ID, contacts, precise location for ads, health data, or card numbers typed into the app. Data is passed to the service providers named in the next section only for the purposes described in this policy.

Authentication, Firestore, Storage, Cloud Functions, and usage analytics run at Google under Firebase. Data is passed there to operate the account, keep what is needed to run the service, and understand use.

Firebase

The AI provider receives prompts and necessary images only when you run generation or try-on, and only through our server cloud functions — never from the device directly. Data is passed there to produce the requested result.

Gemini

The crash-reporting service receives a report only if a collection identifier is configured. If none is configured, nothing is passed to that service.

Sentry

RevenueCat receives purchase records as described in the payments section, so the server can credit the wallet.

RevenueCat

Apple and Google process store payments when in-app purchases are available, and are involved in sign-in only to the extent that sign-in uses a Google account.

Data may be processed by Google and by the crash-reporting service outside Israel, including in the United States. The transfer is to these processors for the purposes listed in this policy. We do not claim that standard contractual clauses are signed. We do not promise a transfer mechanism to the European Economic Area, because we have not put one in place.

Account data is kept while the account exists. Images and jobs on the server are kept as needed to deliver the result and to operate the service. Local files stay until you delete them or remove the app. Analytics and problem reports are kept for a limited operations period. This document does not state a fixed number of days. A narrow security or wallet record may outlive deletion, without identity.

Data in transit is secured through the platform providers. This document does not state a certificate, a standard, or a security attestation.

The app is not directed at children under 16. We do not intend to collect data knowingly from a child under that age. If we learn that an account belongs to a child under that age, we will handle a deletion request under the deletion section.

Under section 13 of the Privacy Protection Law, there is a right to access personal data that is held. Under section 14 of that law, you may ask for correction of data that is not correct, complete, clear, or up to date. Send the request to the address below, from the Google account email.

support@soul-oracle.net

These rights are described under Israeli privacy law as applied to this service. Mandatory consumer protections in your place of residence are not taken away where that law provides them.

Sign-in uses a Google account through the authentication service. Apple and Google handle store payment and refunds under their rules when in-app purchases are available. You can revoke Google access from Google account settings, and camera or photo permissions in the operating-system settings. Revoking a permission stops later use of that permission. It does not, by itself, delete data already kept on the server.

You can delete your Onyx Tattoo account in either of these ways:

(1) In the app: open Settings, choose Delete account, re-authenticate with Google when asked, and confirm. The app calls our server function deleteAccount.

(2) By email: write to support@soul-oracle.net from the Google account email, for users who cannot use the app.

After the request is identified and processed, we delete generation jobs; designs and drafts; files in Storage under users/{uid}/; and the authentication account. The user document is marked deleted. Support tickets and funnel events are anonymized. Wallet ledger amounts may remain without identity. We also ask RevenueCat, our purchase-status provider, to delete the customer record linked to your account. If that request fails at the time of deletion, we keep only the account identifier so the request can be completed. See also Account deletion.

If the service changes, this policy will be updated. Before store billing is opened, if billing is added, this policy will be updated first. The governing text is the text at https://onyx-tattoo.com/privacy.html. This policy was last updated on 5 October 2026. Legal version: 2026-10-05.

Privacy requests go to the address below.

support@soul-oracle.net

Controller:

SOULWARE STUDIO