Privacy Policy — Suldor
Last updated: September 15, 2026
This Privacy Policy explains how Suldor (“the App,” “we,” “us”) handles information when you use the iOS application identified by Bundle ID com.suldor.iomp.
Suldor is a personal tattoo try-on studio. Most studio data stays on your device. When you generate a tattoo preview, selected images and text may be sent to a third-party AI image service as described below.
Contact for privacy questions: support@suldor.example (placeholder — replace with your support email before App Store submission).
1. Scope
This Policy applies to the Suldor iOS app. It does not cover third-party websites, Apple services, or other apps that we do not control.
2. Information we store on your device
Suldor stores the following categories of data locally on your iPhone (for example via UserDefaults, the app Keychain, and the app Documents directory). We do not operate a Suldor account server that syncs this data to our own cloud.
| Category | Examples |
|---|---|
| Account / session | Quick Login credentials generated on device, logged-in / logged-out flags |
| Profile | Display name, optional avatar image file |
| Virtual currency | Ink Drops balance, signup bonus flag, StoreKit transaction credit markers |
| Studio content | Tattoo preview history images and metadata, Creation notes text |
| Companion chat | Local Kai (AI Tattoo Consultant) message thread |
| Preferences | “Don’t show again” for the Kai intro sheet; whether ATT was already requested |
| AI credentials (device) | Agnes API key material may be stored in Keychain / local preferences for generation |
You can remove on-device studio data using Delete Account in Settings (see Section 9).
3. Information processed for tattoo generation (third-party AI)
When you tap Generate and an Agnes API key is configured, Suldor sends a generation request to Agnes AI (Agnes Image API, model such as agnes-image-2.1-flash) at Agnes’s API endpoint.
Exactly what may leave your device for generation:
- A JPEG encoding of the skin / body photo you attached on the Creation screen
- A JPEG encoding of the catalog tattoo design image used for the try-on
- A text prompt derived from the selected design’s generation prompt (and composition instructions describing a tattoo try-on)
What we do not intentionally send for generation: your Quick Login password, Ink Drops balance, purchase receipts, Kai chat history, or your display name.
Agnes processes the request to return a preview image. Agnes’s own terms and privacy practices apply to that processing. If no API key is configured, generation falls back to an on-device image composite and no images are uploaded for that attempt.
Temporary generated images may be downloaded from Agnes (or its storage CDN) to display and save your Result.
4. Facial data
4.1 What we collect
Suldor does not collect biometric faceprints, face templates, or Face ID / TrueDepth identity data.
You may optionally capture or select photographs that may depict a face or other body parts, including:
- A skin / placement photo used for tattoo try-on
- An avatar photo on Edit Profile
These are ordinary images chosen by you, not processed into biometric identifiers by Suldor.
4.2 Planned use
Photos that may include a face or body are used only to:
- Preview how a catalog tattoo design might look on your skin
- Display your studio avatar in Settings / Edit Profile
- When generation uses Agnes, transmit the skin photo (and design image) as described in Section 3
4.3 Sharing, disclosure, and where stored
- On device: avatar and result images are stored in the app’s sandbox (Documents / local files).
- Third-party AI: the skin photo may be sent to Agnes for try-on generation (Section 3).
- We do not sell facial or photo data. We do not use facial photos for advertising networks beyond Apple’s App Tracking Transparency prompt (Section 6).
4.4 Retention
Photos and related studio files remain on your device until you delete them in-app (for example removing an avatar, clearing history, or Delete Account) or remove the app.
Images sent to Agnes for a generation request are handled under Agnes’s retention practices; Suldor does not keep a separate server-side copy of those uploads.
4.5 Explanation of this chapter
This Section 4 is the explanation of Suldor’s collection, use, disclosure, sharing, and retention of facial-related photographic data for App Store Guideline 2.1 / 5.1.1 review purposes.
5. Permissions
Suldor requests system permissions only when you use related features:
| Permission | When / why |
|---|---|
| Camera | Capture a skin photo for try-on or an avatar |
| Photo Library (read) | Choose a skin photo or avatar from your library |
| Photo Library (add) | Save a finished preview when you tap Save to Photos |
| Microphone | Record voice notes on Creation or dictate into Kai |
| Speech Recognition | Convert those recordings to text on device via Apple Speech |
| App Tracking Transparency | Requested once on first Home (system dialog) |
| Notifications | Requested once after the ATT dialog returns on first Home; Push capability is enabled. The App does not implement custom notification content handlers beyond requesting authorization |
There is no in-app screen to re-manage these permissions; use iOS Settings if you need to change them.
6. Tracking and analytics
On first open of Home after login, Suldor may present Apple’s App Tracking Transparency prompt, then request notification authorization. Suldor does not embed a separate third-party analytics SDK beyond these system frameworks in the current build. If tracking is authorized, measurement may occur consistent with Apple’s ATT framework and Apple’s policies.
7. Purchases (Ink Drops)
Ink Drops are a consumable in-app currency sold through Apple In-App Purchase (StoreKit 2). Packs are listed in price-ascending order (six fixed tiers plus bonus tiers). Payment is processed by Apple. Suldor does not collect or store your credit card number. Apple’s privacy policy and purchase terms apply to payment processing. There is no Restore Purchases flow for these consumable packs.
8. Local companion (Kai)
Kai is an on-device tattoo consultant that replies from local seed text. Kai conversations are stored locally. Voice input for Kai uses Microphone and Speech Recognition as above. Kai chat content is not sent to Agnes for image generation.
9. Sign Out and Delete Account
- Sign Out ends the session on this device but keeps local credentials and studio data so you can Quick Login again.
- Delete Account permanently erases local login flags, Ink Drops balance and related flags, display name, avatar file, Kai messages, history images, generation preference keys, and related UserDefaults entries described in Section 2.
Deleting the iOS app also removes the app sandbox.
10. Children
Suldor is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided data, contact us and delete the app / use Delete Account on the device.
11. No sale of personal data
We do not sell your personal information.
12. International processing
If you use Agnes generation, image and prompt data may be processed on servers operated by Agnes or its infrastructure providers, which may be located outside your country.
13. Changes
We may update this Privacy Policy. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you accept the revised Policy.
14. Contact
Email: support@suldor.example
App: Suldor (com.suldor.iomp)
Also see our Terms of Service.