Privacy, plainly.
Last updated 8 October 2026. Questions: hello@tifflog.ai
What Tiff Log stores, what it can't read, and how to delete everything. Tiff Log is made and run by Bhookle Tech Private Limited, which is responsible for your data (the data fiduciary, or controller).
The short version
Everything you write (tiff names, both sides, your part, notes, codenames, rules, AI answers) is encrypted on your phone before it leaves it. We can't read it.
We never ask for real names. You use codenames for yourself and your people.
No ads. We don't sell or share your data, and we don't use it to train AI.
You can export or delete everything, any time, from the Me tab.
Tiff Log is its own product. Your Tiff Log data is never shared with, or used by, any other app or service from Bhookle Tech Private Limited.
What we store on our servers
Your email, only to send sign-in codes. It is never shown to anyone or attached to your tiffs.
Encrypted data: your profile and the written parts of each tiff, as ciphertext only your key can unlock.
Tiff details used for stats, not encrypted: the date, the topic you picked (for example "Chores"), spice level, the mood emojis, who started it, status and how you made up. These are tap-to-pick labels, never your words.
A key backup locked with your secret key. Without that key, we can't open it either.
AI usage counts per day (number of requests and cost), so the app stays free and fair.
Invite codes: your code and how many friends joined with it. Friends never see what you write.
Offline mode keeps everything on your phone only.
Learning, on your phone
Tiff Log learns what works for you (how you make up, which advice you 👍, which rules hold) by looking at your own tiffs on your phone. That learning stays in your encrypted data.
When you tap an AI feature, a short labels-only summary of that history (for example "talking it out worked before") can be included so the advice fits. Never your past words.
AI features
AI only runs when you tap for it: making sense of a rant, Ask Squad, Their POV, Bridge Out or Say sorry. The text needed for that one answer is sent to our server, processed in memory and not stored or logged by us, and answered by Anthropic's Claude API or, when available, an open-source model we run ourselves. Anthropic does not train its models on API data by default.
The help chat (Tiff Bot) answers from a built-in FAQ on your phone. Only if it can't, your question is sent to the AI the same way, together with the FAQ text. Keep tiff details out of help questions.
Private AI is coming soon: when it's on, your words won't go to Claude; only our own model or the on-device engine will be used. AI answers are saved on your phone, encrypted.
Services we use
Supabase (database and sign-in), hosted in Mumbai, India.
Resend, to email your sign-in codes.
Anthropic, for some AI answers, as described above.
Apple (App Store) and Google (Google Play) distribute the app; their own privacy policies cover what they collect when you download or update it. On the App Store it is listed under our founder's name, Arvindakshan Ravichandran, on behalf of Bhookle Tech Private Limited. Reminders (nudges) are scheduled on your phone; we don't run a push-notification server.
How long we keep it
As long as your account exists. When you delete everything, your account, tiffs, people, invite data and key backup are removed from our database right away, and from backups within 30 days.
Aggregate, non-identifying counts (like total AI requests per day) may be kept to run the service.
Your rights and controls
Export: a PDF of your tiffs, or your data as a file.
Delete everything: removes your account, tiffs, people, invite data and your encryption key. It can't be undone. No access to the app anymore? Ask at tifflog.ai/delete.
App lock: Face ID or passcode when you come back to the app.
You can also ask us to access, correct or erase your data, or raise a grievance. Our grievance officer is Arvind, the founder, at hello@tifflog.ai. We reply within 30 days.
Age
Tiff Log is for people 18 and older. We don't knowingly collect data from anyone younger; if you think we have, tell us and we'll delete it.
Changes
If this policy changes in a way that matters, we'll say so in the app before it applies to you.