Privacy Policy

This Privacy Policy explains how Tinfoil ("Tinfoil", "the app", "we", "us") handles information when you use the Tinfoil iOS application. Tinfoil is a satirical entertainment app that uses AI to generate fictional, humorous "conspiracy theories" about everyday topics.

1. What Tinfoil is

Tinfoil generates parody content for laughs. Every theory is fictional and every share card is permanently stamped "SATIRE". Nothing produced by the app is a factual claim.

2. Information we process

a. Theory generation requests

When you tap to generate, the app sends the topic you chose, the paranoia level, and — if you use the "Custom" topic — the text you typed, to our backend (a Cloudflare Worker), which forwards it to our AI provider (Groq) to produce the theories. These requests are not tied to your name or account. Please do not enter personal or sensitive information in the custom topic field.

b. Theories you save

Theories saved to your History and Favorites are stored only on your device. We do not upload or back them up. Clearing history in Settings removes them.

c. Photos

If you add a photo to a share card, it is processed entirely on your device. The finished card image is created locally and shared through the standard iOS share sheet. We do not upload, store, or have access to your photos or camera.

d. Push notifications — Firebase Cloud Messaging

If you allow notifications, Firebase Cloud Messaging assigns your installation a push token so we can deliver reminders and updates. You can turn notifications off at any time in iOS Settings.

e. Analytics — Firebase Analytics

We use Firebase Analytics to understand how the app is used (for example, screens opened and features tapped) and to improve it. This includes app and device information such as device model, operating system version, language, and approximate region derived from IP — not precise location.

f. Attribution & advertising measurement — AppsFlyer

We use AppsFlyer to measure which marketing campaign or channel led to your install and to understand in-app activity for marketing purposes. AppsFlyer processes device identifiers, install and session events, and similar technical data. If you grant tracking permission (see Section 3), this may include the Apple Advertising Identifier (IDFA).

g. Diagnostics

We may receive aggregated crash and performance data to keep the app stable.

3. App Tracking Transparency

iOS asks for your permission before the app can track you across other apps and websites. If you deny, AppsFlyer will not use the IDFA and tracking is limited accordingly. Tinfoil works exactly the same whether you allow or deny tracking — no feature is gated behind it. You can change this any time in iOS Settings → Privacy & Security → Tracking.

4. Third-party services

The services below process data on our behalf. Their own policies apply:

• Google Firebase (Cloud Messaging, Analytics) — firebase.google.com/support/privacy
• AppsFlyer (attribution) — appsflyer.com/legal
• Groq (AI text generation) — groq.com/privacy-policy
• Cloudflare (backend proxy & hosting) — cloudflare.com/privacypolicy

5. How we use information

• To generate and deliver theories you request.
• To send notifications you have opted into.
• To understand usage and improve the app.
• To measure the effectiveness of our marketing.
• To keep the app secure and stable.

We do not sell your personal information.

6. Data retention

Data held on your device remains until you clear history or delete the app. Analytics and attribution data held by our providers is retained according to their standard retention periods.

7. Children

Tinfoil is intended for a general audience aged 13 and older and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Your choices

• Notifications — turn off in iOS Settings.
• Tracking — deny or revoke in iOS Settings.
• Saved theories — clear them in the app's Settings.
• Requests — contact us at the email below to ask a question or request deletion of data associated with your device.

9. Security

Requests to our backend are sent over encrypted connections (HTTPS). No method of transmission or storage is completely secure, but we take reasonable measures to protect the limited data we process.

10. International users

Our providers may process data on servers located outside your country. By using Tinfoil you understand your information may be transferred to and processed in those locations.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Continued use of the app after a change means you accept the updated policy.

12. Contact

Questions about privacy or this policy? Email us at elliotb@cloudrhythm.net.

Satire