Privacy Policy - Tipote

Version: 1.0 — Last updated: 19 August 2026

1. In short

Tipote runs entirely on your device.

• No account, no sign-up, no password.
• Your dog photos, your cards and your boards stay inside the app, on your iPhone.
• We operate no server that stores your content, and we have no way to access it.
• The only data that leaves your device is anonymous usage analytics, plus the photo you deliberately send to online recognition if you turn that option on.

The rest of this document describes that in detail.

2. Data Controller

• Legal name: Static Bloom
• Legal form: Micro-entreprise (sole proprietorship, France)
• Address: 200 rue de la Croix Nivert, 75015, Paris, France
• Privacy contact: hello@staticbloom.io

3. Data We Process

3.1 Data stored on your device, and only there

Tipote keeps the following in the app’s private storage:

• The photos you take or import (dogs, board backdrops, profile picture)
• A visual fingerprint computed from those photos, used to recognise a dog you have already met
• Per-observation details: selected breed, suggested breed, confidence score, photo quality, the name you gave the dog, date, favourite flag
• Your boards (layout, paper, backdrop, placed stickers)
• The first name you type on first launch, if you type one
• Your preferences: display language, visual settings, whether online recognition is enabled, onboarding progress

None of this is uploaded, backed up by us, or accessible to us. It is included in your iCloud or iTunes device backup if you have device backup enabled; in that case the encryption and retention are governed by Apple and your Apple Account, not by us.

3.2 Breed recognition

By default, breed identification runs offline, using a model bundled inside the app. No photo leaves the device.

The “Online recognition” setting, off by default and switchable in the app’s settings, sends the photo to our analysis service to obtain a breed suggestion. In that case:

• The photo is transmitted over an encrypted connection (HTTPS), analysed, and the answer returned.
• It is not linked to any account or personal identifier.
• It is not retained beyond the processing of the request.
• You can turn the setting off at any time; the app then works fully locally again.

3.3 One-time purchase

Tipote is unlocked by a one-time purchase on the App Store. The transaction is handled by Apple. We do not receive your name, your email or your payment details: the app only checks, with Apple and on the device, whether the purchase was made. Apple additionally provides us with aggregated sales reports, which cannot identify you.

3.4 Usage analytics

To understand what works in the app, Tipote may send anonymous events to PostHog:

• Usage events: screens viewed, onboarding steps, key actions (an observation saved, a board created, the purchase screen shown)
• Technical properties: device model, iOS version, app version, language, approximate country

These events are not linked to any account or person — the app has no account. They contain no first name, no photos, no dog names and no advertising identifier. We do not use the IDFA, we perform no tracking across apps or websites, and we show no ads.

3.5 What Tipote does not collect

• No email address, name or phone number
• No location data (the app never requests access to your location)
• No health data
• No contacts, calendar or microphone access
• No reading of your photo library: you pick images through Apple’s own picker, and the app only ever sees those

4. Purposes and Legal Bases

5. Recipients and Processors

• Apple: app distribution, in-app purchase processing, aggregated sales reports.
• PostHog: anonymous usage measurement, on the provider’s European infrastructure.
• Our breed recognition service: only if you enabled online recognition, and only for the duration of the analysis.

We sell no data, share none for advertising purposes, and work with no ad network or data broker.

6. International Transfers

Our processing is configured to stay within the European Union wherever the provider allows it. Where a transfer outside the EU/EEA occurs (notably via Apple), it relies on the mechanisms provided by the GDPR, in particular the European Commission’s Standard Contractual Clauses.

7. Retention

• On-device data: kept until you delete it in the app, or until Tipote is uninstalled. Uninstalling erases photos, observations, boards and preferences.
• Anonymous analytics events: kept for a maximum of 12 months.
• Photo sent to online recognition: not retained after the response.
• Accounting records relating to sales (held by Apple and by us in aggregated form): the applicable statutory retention period.

8. Deleting Your Data

Since there is no account, there is nothing to delete on a server.

• Delete an individual observation or board from within the app.
• Uninstall Tipote to erase all local data at once.
• If you use iCloud backup, remember to delete the corresponding backup in iOS settings as well.

9. Your Rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent where processing relies on it.

Two honest clarifications:

1. For app data, these rights are exercised directly on your device: you are the only one with access, and we hold no copy.
2. For analytics events, we hold no identifier that could link an event to a person. In practice we are therefore unable to locate “your” events in order to disclose or delete them individually. You may, however, object to this usage measurement by writing to us, and we will confirm how to proceed.

For any request: hello@staticbloom.io. You may also lodge a complaint with the competent supervisory authority — in France, the CNIL (www.cnil.fr).

10. United States Privacy Rights

10.1 California residents (CCPA/CPRA)

If you reside in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, grants you additional rights: the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to non-discrimination.

Categories of personal information collected (last 12 months):

Categories sold or shared: none. We do not sell personal information and do not share it for cross-context behavioural advertising. We perform no advertising tracking whatsoever.

Retention: see Section 7.

10.2 Other US state privacy laws

Residents of states with applicable consumer privacy legislation (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana) may have similar rights of access, deletion, correction and opt-out. To exercise them: hello@staticbloom.io.

11. Children and Family Use

Tipote is rated 4+ and suitable for family use: no account, no messaging, no user-generated content from other people, no advertising.

The app is not intended to be used independently by a child under 13 without the agreement and supervision of a parent or guardian. We do not knowingly collect identifying personal information from a child — we collect none from anyone. If you are a parent or guardian with a question about your child’s use of the app, write to us at hello@staticbloom.io.

12. Photos of Other People

Tipote is for photographing dogs. If a person appears in a photo, that photo stays on your device and falls under your personal use. It is your responsibility to respect the privacy and rights of the people and places you photograph, especially before sharing an image outside the app.

13. Security

App data lives in the application’s private container, protected by iOS and by your device passcode. Network exchanges (analytics, online recognition, purchase) are encrypted in transit. No method of transmission or storage is completely secure.

14. Changes

This policy may be updated. In the event of a material change, we will inform users by an appropriate means, in the app or on the website.

15. Contact

• Company: Static Bloom
• Email: hello@staticbloom.io
• Address: 200 rue de la Croix Nivert, 75015, Paris, France