Política de Privacidad
Privacy Policy
Last updated: May 25, 2026 Effective date: May 25, 2026
1. Who We Are
Tinta is an AI-powered personal color analysis service operated by:
HYRE Talent Sourcing and Matching GmbH (operating under the brand HyreApps / Tinta) Warnenweg 13 14052 Berlin, Germany
Commercial Register: Amtsgericht Charlottenburg (Berlin), HRB 43429 VAT: DE456128516 Managing Directors: Maximilian Willert, Luca Lallopizzi
Contact for privacy matters: Email: privacy@tinta.style General support: support@tinta.style
This Privacy Policy applies to the Tinta website at tinta.style, the Tinta web application at app.tinta.style, and the Tinta iOS mobile application (collectively, the "Service").
For the purposes of EU data protection law, HYRE Talent Sourcing and Matching GmbH is the data controller.
2. What Data We Collect
2.1 Photos and Images
When you use Tinta, you submit a photo (selfie) for AI color analysis. This photo is used solely to determine your personal color season. Photos may contain biometric information and information from which skin tone and other physical characteristics can be inferred.
Under the EU General Data Protection Regulation (GDPR), data revealing racial or ethnic origin is considered special category data (Article 9). Under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), such data is classified as sensitive personal data.
We process this data only with your explicit prior consent, which you grant during onboarding before submitting any photo.
2.2 Account Data
- Email address (if you register an account)
- Name or display name (optional)
- Preferred language and country
2.3 Subscription and Payment Data
- Subscription tier and billing cycle
- Payment processing is handled entirely by Stripe (stripe.com) or the relevant app store (Apple App Store / Google Play). We do not store your card number, bank details, or full payment credentials.
- Transaction history for your subscription (plan, amount, dates)
2.4 Usage and Analytics Data
- Features used within the app
- Color season result and palette accessed
- Session duration and frequency
- App version, device type, operating system
2.5 Technical Data
- IP address (used for fraud prevention and geographic compliance)
- Device identifiers
- Crash logs and error reports
2.6 Advertising and Attribution Identifiers
- On the web (tinta.style, app.tinta.style): Meta Pixel cookies and identifiers such as
_fbpandfbc, loaded only after you grant cookie consent. - On the iOS app: device identifiers including the Advertising Identifier (IDFA), only if you grant permission via the iOS App Tracking Transparency (ATT) prompt.
- A hashed version of your email address, used solely to match conversions back to ad campaigns.
See Section 4a for details.
2.7 Communications
- Messages you send to our support team
- Responses to optional feedback surveys
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Performing AI color analysis from your photo | Explicit consent — Art. 9(2)(a) |
| Providing and managing your subscription | Performance of contract — Art. 6(1)(b) |
| Processing payments and preventing fraud | Legitimate interest / legal obligation — Art. 6(1)(c)(f) |
| Improving the app and fixing bugs | Legitimate interest — Art. 6(1)(f) |
| Sending service communications (receipts, updates) | Performance of contract — Art. 6(1)(b) |
| Measuring advertising performance and reaching likely-interested users | Consent — Art. 6(1)(a) |
| Sending marketing messages | Consent — Art. 6(1)(a) (you may opt out at any time) |
| Complying with tax and accounting obligations | Legal obligation — Art. 6(1)(c) |
We do not sell your photos or color analysis results to third parties, and we do not use them to train our AI models without separate explicit consent.
4. Photo Processing and Retention
- Your photo is processed by our AI system to generate your color season result.
- Photos are not permanently stored on our servers beyond what is necessary to deliver your result within the same session, unless you explicitly choose to save your analysis to your profile.
- If you save your analysis, the associated photo or derived color data is retained in your profile until you delete it or close your account.
- Derived results (color season, palette) are stored as long as your account is active.
- You may delete your photo data and analysis results at any time from your account settings.
4a. Advertising, Analytics, and Tracking
Tinta uses advertising and analytics technologies to measure the performance of our campaigns on Facebook and Instagram and to reach users likely to benefit from Tinta.
Web (tinta.style, app.tinta.style)
We use the Meta Pixel to measure ad performance, attribute conversions, and build lookalike audiences. The Pixel sets cookies such as _fbp and fbc and is loaded only after you grant cookie consent. You can withdraw consent at any time via our cookie settings or your browser settings.
iOS App
The Tinta iOS app integrates the Meta (Facebook) SDK for the same purposes. Through this integration, the following may be shared with Meta:
- A device identifier (such as the IDFA), only if you grant permission via the iOS App Tracking Transparency prompt.
- App events (such as app install, app open, sign-up, trial start, subscription purchase).
- A hashed version of your email address, used solely to match conversions back to ad campaigns.
App Tracking Transparency (iOS): When you first open the Tinta iOS app, iOS will ask whether you allow Tinta to track your activity across other companies' apps and websites. If you choose "Ask App Not to Track," we will not share your IDFA or any other cross-app identifier with Meta or any advertising partner, and you will still be able to use Tinta normally. You can change this choice at any time in iOS Settings → Privacy & Security → Tracking.
We may integrate the TikTok SDK in the future for the same purposes; if and when we do, this policy will be updated.
You can learn more about how Meta processes this data in Meta's Privacy Policy.
5. Third-Party Service Providers
We share data with trusted third parties only to the extent necessary to operate the service:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA (EU SCCs apply) |
| Apple App Store | iOS in-app purchases, app distribution | USA |
| Google Play | In-app purchases, app distribution | USA |
| Mixpanel | Product analytics | USA (EU SCCs apply) |
| Meta Platforms, Inc. | Ad measurement and audience building (Meta Pixel + iOS SDK) | USA (EU SCCs apply) |
All third parties are bound by contractual obligations to protect your data and use it only as instructed. Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
We do not sell your personal information.
6. International Transfers
Tinta is operated from Germany (EU). If you access the service from Mexico or another country outside the EEA, your data may be transferred to and processed in Germany and potentially in the United States (for third-party services listed above). We ensure appropriate safeguards are in place for all international transfers.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Photos and analysis (saved to profile) | Until you delete them or close your account |
| Account information | Until account deletion + 30 days |
| Payment/invoice records | 10 years (German tax law obligation) |
| Support communications | 3 years |
| Analytics data (aggregated) | 24 months |
| Advertising cookies / Meta Pixel data | Up to 13 months, or until you withdraw consent |
8. Your Rights
Under GDPR (EU/EEA users)
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Correct inaccurate data
- Erasure ("right to be forgotten") — Request deletion of your data
- Restriction — Ask us to limit how we use your data
- Portability — Receive your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interest
- Withdraw consent — At any time, for processing based on consent (including photo/skin tone analysis and advertising tracking), without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, contact: privacy@tinta.style We will respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit www.datenschutz-berlin.de
Under LFPDPPP (Mexican users — Derechos ARCO)
Si eres usuario en México, tienes los siguientes derechos respecto a tus datos personales:
- Acceso — Conocer qué datos tenemos sobre ti
- Rectificación — Corregir datos incorrectos o desactualizados
- Cancelación — Solicitar la eliminación de tus datos
- Oposición — Oponerte al tratamiento de tus datos para fines específicos
Para ejercer tus derechos ARCO, escríbenos a: privacy@tinta.style Responderemos en un plazo máximo de 20 días hábiles.
La autoridad supervisora en México es el INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales): www.inai.org.mx
9. Sensitive Data (Datos Sensibles) — Notice for Mexican Users
De conformidad con la LFPDPPP, las fotografías que compartes con Tinta y los datos derivados de ellas (tono de piel, características físicas) constituyen datos personales sensibles. Su tratamiento requiere tu consentimiento expreso, el cual solicitamos antes de procesar cualquier imagen. Puedes retirar tu consentimiento en cualquier momento.
10. Children's Privacy
Tinta is not directed to children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Cookies and Tracking
Our website (tinta.style) and web app (app.tinta.style) use:
- Essential cookies necessary for the service to function (e.g., session management). These do not require consent.
- Analytics cookies (Mixpanel) used to understand how the service is used, loaded only with your consent.
- Advertising cookies set by the Meta Pixel (
_fbp,fbc, and related identifiers) to measure ad performance and build audiences for Facebook and Instagram campaigns. These are loaded only after you grant cookie consent.
You can withdraw your consent at any time via our cookie settings, your browser settings, or by adjusting your Meta ad preferences at facebook.com/adpreferences. On iOS, you can also disable cross-app tracking via Settings → Privacy & Security → Tracking (see Section 4a).
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes by email or via an in-app notice at least 30 days before changes take effect. Continued use of the service after the effective date constitutes acceptance.
13. Contact
For any privacy-related question, data subject request, or complaint:
HYRE Talent Sourcing and Matching GmbH Warnenweg 13, 14052 Berlin, Germany Email: privacy@tinta.style Phone: +49 15786831594