Tassy Privacy Policy

Who we are

Tassy is provided by Amber Jar Labs, LLC, a New York limited liability company (“we”, “us”). We decide how and why your information is used, so under laws such as the EU and UK General Data Protection Regulation (GDPR) we are the controller of your personal data.

Contact us at contact@amberjarlabs.com, or by post at Amber Jar Labs, LLC, 447 Broadway FL 2 PMB 3000, New York, NY 10013-2562, USA.

Who can use Tassy

Tassy is for people aged 13 and over. We don’t knowingly collect personal data from children under 13. If you think a child under 13 has given us information, write to us at contact@amberjarlabs.com and we’ll delete it. If you’re under 18, or under the age of digital consent where you live (for example 15 in Greece), use Tassy only with a parent’s or guardian’s permission.

What we collect

• Account details. Your email address, your name if you add one, and a user ID. You sign in with Google, with a link sent to your email address or, on iPhone, with Sign in with Apple, through Google Firebase Authentication. With Sign in with Apple, Apple shares your name (the first time only, if you allow it) and an email address, which can be a private relay address that Apple forwards to you.
• Reading settings. Your language, and the hand you hold your cup with. Both shape your readings.
• Phone language. Your phone’s language and region setting (for example ru_RU), which newer versions of the app record on your account. We use it to choose the language of the app and of our emails, and to help with support.
• Your AI permission. Before your first reading, the app asks your permission to send your photos (and, if personalized readings are on, your age range and form of address) to the AI providers named below. We keep your answer on your device and, if you’re signed in, on your account, with the version of the text you saw and the time.
• Optional profile details. Your birthdate, your phone number, and how you’d like Tassy to address you (feminine, masculine or neutral), only if you add them. You can leave them blank, change them or remove them at any time.
• Personalized readings (optional). Off unless you turn on “Personalize my readings” in your profile. When it’s on, we use your age range (for example “late twenties”, never your birthdate) and your form of address, so your reading can suit your stage of life and use the right grammatical forms in your language. We never use an age range for anyone under 18. Turn it off at any time, and later readings won’t use these details. Your birthdate itself and your phone number are never sent to AI providers.
• Cup photos. Up to four photos for each reading, taken with your camera or chosen from your gallery.
• Thumbprint photo. Only if you choose a thumbprint reading. We use it to create that reading, not to identify you.
• Your readings. The symbols found in your cup, the reading text, and your reading history.
• Country. When you sign in, we work out your country (only the country) from your IP address. We use it for prices and language defaults, and for overall statistics.
• Device details. A notification token, your device model and the app version, so we can tell you when a reading is ready.
• Purchases. For readings you buy through Google Play: the order ID, product, amount, currency and status. For readings you buy on iPhone through Apple’s App Store: the App Store transaction ID, product, price, currency, whether it was a test or a real purchase, and refund status, linked to your reading through a random identifier. Free-reading codes redeemed on iPhone are recorded the same way. Google or Apple handles the payment, and we never see your card details.
• Sharing. If you share from the app, we create a share link and record visits to it, including the visitor’s IP address, to count shares and give share rewards.
• Reading reports. If you report a reading, the reason you choose, any note you add (up to 1,000 characters), which reading it was, your platform and app version, and the status of our review.
• Emails we send you. A record of the service emails we send to your account (which email, its language, whether it was sent, and when).
• Messages. Whatever you send us by email.
• Technical logs. Our servers record IP addresses, requests and errors, which we use to keep Tassy secure and to fix problems.

Tassy doesn’t use advertising identifiers, advertising or analytics tools, or any location data beyond your country.

How we use it

• To create your readings, run your account and keep your reading history.
• To process purchases, unlock the readings you pay for, and keep the records tax law requires.
• To send the notifications you allow, such as “your reading is ready”.
• To send service emails to the address on your account: a short guide to taking good cup photos after you sign up, and again if your photos are turned down twice within a day (at most once a day). These emails contain no marketing.
• To review readings you report.
• To set prices and language by country, and to understand how Tassy is used overall, in totals.
• To keep Tassy secure, prevent abuse (including misuse of free codes and share rewards), and fix problems.
• To answer your messages.

We don’t sell your information, and we don’t use it for advertising.

How AI creates your readings

When you ask for a reading, we send your photos and the information needed for the reading, such as your language and, only if you’ve turned on personalized readings, your age range and form of address, to AI models through OpenRouter, a service that passes requests to model providers. We never send your name, email address, phone number or account ID. Today these are:

• Google (Gemini), which checks that a photo shows a coffee cup;
• Alibaba’s Qwen model, run by inference providers that OpenRouter selects, such as DeepInfra and Parasail, which finds the symbols in your cup;
• OpenAI (GPT-4o), which writes your reading.

Thumbprint readings use the same providers. We may change providers, and this page lists the current ones. AI providers receive your photos through private links that expire after 10 minutes. Readings are created automatically, for entertainment and reflection. They aren’t advice, and we make no decisions about you by automated means that have legal or similarly significant effects.

Who else handles your information

These service providers process information for us, only to run Tassy:

• Google Firebase: sign-in and notifications.
• Google Play: purchases and payments on Android.
• Apple: Sign in with Apple, App Store purchases and refund notices, and notifications to iPhones through Apple Push Notification service.
• DigitalOcean: hosting, our database and photo storage, in New York, USA.
• OpenRouter and the AI providers listed above: creating readings.
• Stripe: card payments, only if you use the card-payment option that is still in the app. We’re removing it.
• Fastmail: our email, including the service emails we send you.
• DigitalOcean’s content delivery network, run by Cloudflare: delivering our web pages, including the account deletion page.

We may also disclose information when the law requires it, or to protect someone’s safety.

Where your information is stored

We store your information in the United States, with DigitalOcean in New York. Our service providers may process it in the United States and other countries. If you live in the European Economic Area, the United Kingdom or another country with rules on international transfers, your information is transferred to the United States, and we rely on the transfer safeguards in our providers’ data protection terms.

How we protect it

Information travels encrypted between the app and our servers. Your photos are private: the app shows them through links that expire after 6 hours, and AI providers get links that expire after 10 minutes. Access to our systems is limited to the people who run Tassy, for running and supporting it. No system is perfectly secure, but we work to protect your information and fix problems quickly.

How long we keep it

• Your account, profile, photos and readings: until you delete your account.
• Purchase records: as long as tax and accounting law requires, usually up to 7 years. When you delete your account, we keep them without your name or email.
• Server logs: we’re setting up automatic deletion after 30 days. Until it’s running, they may be kept longer.
• AI request records, which include the instructions sent to the AI and links to your photos: we’re setting up automatic deletion after 90 days. Until it’s running, they may be kept longer.
• Your AI permission, phone language and the record of emails we sent you: until you delete your account.
• Reading reports: when you delete your account, we erase any note you wrote and remove the link to you; the reason and the outcome of our review stay in our moderation records.
• Emails: as long as we need them to help you.

After you delete your account, copies can remain in our database backups for up to 7 days.

Deleting your account

You can delete your account at any time in the app (Settings, then Delete Account), or as described on our account deletion page. Deleting removes your profile, photos, the content of your readings, notification tokens, share links, your AI permission record, your phone language, the record of emails we sent you, and your sign-in account. If you signed in with Apple, the app also asks Apple to revoke Tassy’s access. The notes in any reading reports are erased, as described above. We keep purchase records, without your name or email, as tax and accounting law requires.

Your rights and choices

Depending on where you live, you can ask us for access to your information or a copy of it, ask us to correct or delete it, restrict or object to how we use it, and withdraw any consent you gave (for example, by removing optional profile details). To make a request, write to contact@amberjarlabs.com from the email address on your account. We’ll answer within the time the law requires, for example one month under the GDPR.

If you’re in the European Economic Area or the United Kingdom, you can also complain to your data protection authority. We don’t sell your personal information or share it for cross-context behavioral advertising, as California law defines those terms.

Legal bases (EEA and UK)

Under the GDPR, we use your information:

• to provide Tassy to you under our terms: your account, readings, purchases and notifications;
• with your consent, for optional profile details and personalized readings. You give consent by adding a detail or turning the setting on, and you can withdraw it by removing the detail or turning the setting off;
• for our legitimate interests in keeping Tassy secure, preventing abuse and understanding overall use;
• to meet legal obligations, such as keeping tax records.

Cookies

The Tassy app doesn’t use cookies or advertising identifiers. Our web pages, including this one, are delivered through our hosting provider’s network, which sets one strictly necessary security cookie (__cf_bm) to tell people from automated traffic. It expires after about 30 minutes. We don’t use analytics or advertising cookies.

Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your information, we’ll take reasonable steps to tell you before it takes effect, for example in the app.

What changed on November 5, 2026: the policy now covers the iPhone app (Sign in with Apple and App Store purchases), the minimum age is 13, and it describes your AI permission, reading reports, your phone’s language and the service emails we send.

Contact

Questions or requests: contact@amberjarlabs.com. Post: Amber Jar Labs, LLC, 447 Broadway FL 2 PMB 3000, New York, NY 10013-2562, USA.