Privacy Policy
Last updated: April 27, 2026
Tinkan ("we", "us") makes a small mobile app and website that help people collect photos from a specific place and time. This policy describes what we collect, why, and what we do with it.
What we collect
- Phone number. Used to sign you in and to identify your account. We send a one-time code by SMS through our SMS provider (Twilio).
- Display name. Optional. Shown to other people you invite to or join an event with.
- Photos and videos you choose to send. When you tap Send on a photo, we upload it to the event you sent it to. Photos you do not send never leave your device.
- Event location and time window. When you create an event, we store the pin location and time range so other guests can find matching photos in their camera rolls.
- Push tokens. If you allow notifications, we store an Expo push token so we can notify you when someone joins or sends photos to your event.
- Basic technical logs. Standard request logs (IP, timestamp, endpoint) used for security and abuse prevention. We do not use third-party analytics or advertising SDKs.
What we do not collect
- We do not read or upload photos from your camera roll except the ones you tap Send on. The location/time matching happens on your device.
- We do not have a social graph, follower list, or public profile.
- We do not sell or share your data with advertisers.
Who we share data with
- Twilio — sends the SMS code at sign-in.
- Cloudflare — hosts the API and stores uploaded media.
- Neon — hosts our Postgres database.
- Expo / Apple / Google — delivers push notifications when you opt in.
Each provider only receives the data needed to do its job. We do not share data with any other third party.
Retention and deletion
Photos stay on Tinkan for as long as the event they belong to exists. You can delete your account and all associated data at any time by emailing jon@t3ch.net from the address you signed up with, or by including the phone number on your account.
Your rights
You can request access to, correction of, or deletion of any personal data we hold about you. Email jon@t3ch.net and we will respond within 30 days.
Children
Tinkan is not directed to children under 13 and we do not knowingly collect data from them. If you believe a child has signed up, contact us and we will delete the account.
Changes
If we make material changes to this policy we will update the date at the top and, where appropriate, notify users in the app.
Contact
Tinkan is built by Jonathan Rhoades. Reach us at jon@t3ch.net.