Privacy policy
Last updated: 7 November 2026
Tiff is a shared space for two people. This policy explains what we collect, why, who else is involved, how long we keep it and the choices you have. We've tried to keep it plain and specific.
The short version
- We collect what you put into Tiff and what we need to run it: your sign-in details, your name, your shared space, and the plans, photos, memories and other things you and your partner add.
- Your partner sees what you add to your shared space. Some things stay private until they're revealed: court sides, swipes, surprises, mystery dates and spark answers.
- There are no ads, no tracking, and no analytics or crash-reporting tools in the app. We don't sell your data.
- The AI judge in the Courtroom sends the text of a case to Anthropic (the company behind Claude) to get a verdict. Photos are never sent.
- You can download everything, leave a space, or delete your account in the app at any time.
1. Who we are
Tiff is run by Smart Build Technologies Ltd ("we", "us"), based in the United Kingdom. We are the controller of the personal data described in this policy, which means we decide how and why it's used.
If you have any questions, or want to use any of your rights, email us at support@tiffapp.co.
2. What we collect and why
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) we need a lawful basis for each use of your data. The main ones we rely on are:
- Contract: we need it to provide Tiff to you, the way you've asked us to.
- Legitimate interests: we have a genuine reason to use it (like keeping Tiff secure or controlling costs), and that doesn't override your rights. You can object to these uses (see Your rights).
- Legal obligation: where the law requires us to keep or share something.
Your account
When you sign in with Apple, we receive a unique Apple user identifier, an email address (Apple may give us a private relay address instead of your real one) and, if you choose to share it, your first name. If you sign in with a one-time code sent by email instead, we store the email address you enter. We also store the display name you choose (up to 40 characters).
To let us cut the link with your Apple ID when you delete your account, we keep a sign-in token from Apple. Only our servers can read it.
Contract
Why: to create your account, sign you in, and show your name to your partner.
Tiff Plus purchases
If you subscribe to Tiff Plus, we keep a record of your subscription against your account: which plan, when it renews or ends, whether it will renew, and whether it was a test purchase. We never see or store your card details: Apple takes the payment. Your partner sees only that you've got Plus and that you're the one paying.
Contract
Why: to give Plus to you and your partner, and to show the payer their plan.
Your shared space
Your space's name and anniversary (if you add them), who's in it and when they joined, and the space's home time zone and region. The time zone and region are read from your phone's settings when the space is made, not from location services. They decide when "today" ends, when reveals and reminders happen, and which built-in ideas you see.
Contract
Things you and your partner add
Everything you create in Tiff, for example:
- Plans and decisions: events (titles, dates, places you type, budgets, cover photos, whether it's a surprise), options (titles, links, prices, notes, photos), votes, lock-ins, reminders, questions, pros and cons, leanings, evidence and agreements.
- Play: wheels and spins, your own ideas, swipes, knockout picks, this-or-that answers, and mystery dates (with their hidden details and photos).
- Courtroom: cases, each side's text, appeals and verdicts (see The AI judge).
- Receipts: what you logged, captions, optional photos, reactions and challenges.
- Memories and Moments: memories (titles, dates, places, photos and favourite moments), little messages, countdowns, surprises, and spark answers and replies.
- Sharing: requests to share something outside Tiff, and your partner's answers.
- Links you send with "Add to Tiff": when you share a link from another app, we store the link (with common tracking codes removed) and the title your phone passes on. We don't visit or download the web page.
Photos are only the ones you pick or take. They're saved as new image files in the app before upload, and we don't use any location data stored in them. Before upload, photos are resized to a maximum of 2048 pixels on their longest side, which is still sharp enough to view, download or print.
Contract
Why: to store your shared space, keep it in sync between your two phones, and show it to you both.
What you write is up to you. It could include details about your health, your relationship or other sensitive things, and being in a couple can say something about your sex life or sexual orientation. Tiff doesn't ask for this kind of information and we only use it to run the features you choose to use.
Stats, recaps and Wrapped
We keep a simple log of real things you've done together (for example, a date that happened, a dinner settled, a memory saved). Stats, the monthly recap and the yearly Wrapped are worked out from this log using fixed rules. There are no relationship scores, and no AI is used for these.
Contract
Notifications
If you allow notifications, we store your phone's push token, the type of phone (iPhone), and your notification settings. Each notification waits in a short-lived queue on our servers with its title and text (which can include your partner's name and, for little messages, what they said) until it's sent.
Contract
You can turn categories off in Tiff, or turn notifications off completely in your iPhone's Settings.
Downloads ("Download everything")
When you ask for a download, we build zip files of your photos and a memory book and keep them for you to collect.
Contract
Keeping Tiff secure and working
- Invite codes and when they were used, and the times you try to join a space (to stop people guessing codes).
- Technical information our hosting provider records when your phone talks to our servers, such as IP address, time and the request made, and error codes from our server functions. We set our functions up not to record the content of cases, downloads or tokens.
- A cost record for each Courtroom hearing: random reference numbers, the AI model used, how many tokens it used, what it cost and the outcome. It contains no case text and no names. We use it to keep the AI's running costs under a monthly limit.
- A note of when the App Store's own "rate this app" pop-up was asked to appear, which moment triggered it and the app version, so we never ask too often.
Legitimate interests
Why: to protect your account and space, prevent abuse, keep costs under control and fix problems.
Crash and error reports
If Tiff crashes or something goes wrong, the app sends a crash and error report: what went wrong and where in the code, the name of the screen it happened on, the app version, and your iPhone model and iOS version. Our server functions report their own errors the same way. Reports are not linked to you: they carry no name, email or account id, and nothing you or your partner wrote or added. These crash and error reports are processed by Functional Software Inc. (Sentry) and stored in the EU.
Legitimate interests
Why: to find and fix crashes and errors.
When you contact us
If you email us (including through "Send feedback" in the app, which opens your own email app with the Tiff version number filled in), we'll have your email address and whatever you tell us.
Legitimate interests
Why: to answer you and improve Tiff.
Phone permissions
Tiff asks for access to your photos (to add them, and to save the cards and collages you make), your camera (to take a photo) and notifications. iOS may also mention the microphone because the photo picker can open the camera; Tiff doesn't record audio. Tiff doesn't use your location, contacts or microphone.
3. What we don't do
- No advertising, and no advertising or tracking identifiers. We don't track you across other apps or websites.
- No analytics or crash-reporting tools are built into the app.
- We don't sell your personal data or share it for marketing.
- We don't use your content to train AI.
4. Your partner
Tiff is built for two, so your partner is the main person who receives your data. When you add something to your shared space, your partner can see it, usually within seconds. That includes your display name and the things you create.
What stays private until it's revealed
- Court sides: your side of a case is hidden from your partner until you've both filed. Drafts are never shown.
- Swipes: your partner only sees the matches you both liked, never your individual swipes.
- Surprises and mystery dates: hidden from your partner until the reveal time. Notifications never give a surprise away.
- Spark answers: hidden until you've both answered.
Sharing outside Tiff
If something you want to share outside the app (a Wrapped slide, a collage, a verdict card or a memory) includes your partner's photos, words or cases, your partner has to approve it first. Things that only contain your own content can be shared straight away. Once something has been shared outside Tiff, we can't pull it back.
Downloads
Either of you can download everything you can see in Tiff, which includes things the other person added. Once downloaded, that copy is outside our control.
Adding information about your partner
When you write about your partner (in a case, for example), please be fair and only add what you're comfortable with them reading. We treat it as part of your shared space.
If you start using Tiff on your own and then join your partner's space, the plans, memories and ideas you'd added are moved into the shared space so you can both see them.
5. The AI judge (Courtroom)
The Courtroom is optional. When both of you have filed your sides of a case, our server asks Anthropic's Claude AI for a playful verdict. Anthropic acts as our service provider (a processor).
What is sent to Anthropic
- The case title, its number and its tone (fun or serious).
- Each of your display names and what each of you wrote, including any appeal.
- Notes and links added as evidence (the link address and its label).
- If the case came from something else in Tiff: the options being decided (titles, prices, notes) and who voted what; or a question's pros, cons and leanings with names; or a receipt's details, its caption, points and who objected.
- On an appeal, the court's earlier verdict.
What is never sent
Photos (the AI is only told that a photo exists), your email address, your account identifiers, or anything else in your space.
Safety check
Before anything is sent, an automatic check looks for signs of real harm, such as violence, threats, control, self-harm or abuse. If it finds any, nothing is sent to Anthropic and the court declines to rule, showing support information instead. The AI is also told to decline in these situations.
What we keep
The verdict (summaries, ruling, compromise, suggested agreement and who it sided with) is saved in your shared space, along with the model used, how many tokens it used and what it cost.
How Anthropic handles it
Under Anthropic's commercial terms, Anthropic does not use data sent through its API to train its models by default. It keeps API data only for a limited period set out in its terms, and may keep some data longer where needed for safety or legal reasons. We don't use your cases for anything other than giving you a verdict.
Not a decision about you
A verdict is a bit of fun. It has no legal or similar effect on you, you don't have to accept it, and you can appeal once. It isn't advice (see our Terms).
6. Who else is involved
We use a small number of service providers to run Tiff. They only process your data on our instructions and under contracts that protect it.
We may also share data if the law requires it, to protect someone's safety, or with a buyer if Tiff is ever sold or merged (they'd have to respect this policy).
7. International transfers
Your shared space is stored in the UK. Some of our providers (Expo and Anthropic, and Supabase for support and operations) are in the United States, so some data is transferred there. When that happens we rely on the safeguards UK law allows, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified. Sentry stores our crash and error reports in the EU. Email us if you'd like more detail.
8. How long we keep things
Deleted data can stay in our hosting provider's routine backups for a short time before it's overwritten.
9. Leaving, downloading and deleting
All of this is in the app under Us → Our space.
- Download everything gives you your photos as saved in Tiff and a memory book you can open on a computer. It includes everything you can see, and nothing that's still a surprise.
- Leave this space tells your partner and makes the space read-only for 30 days for both of you, so either of you can download first. Then it's deleted for good.
- Delete my account deletes your account and sign-in straight away, and asks Apple to revoke Tiff's access to your Apple ID. If your partner has joined, they keep read-only access to the shared space for 30 days, and then it's deleted. If you're on your own, everything is deleted straight away. This can't be undone. Deleting your account doesn't cancel a Tiff Plus subscription, because Apple manages it: cancel it in Settings → Apple ID → Subscriptions first.
You can also stop using your Apple ID with Tiff from your iPhone: Settings → your name → Sign-In & Security → Sign in with Apple. This stops you signing in but doesn't delete your Tiff data, so please use "Delete my account" for that.
10. Your rights
You have the right to:
- get a copy of your personal data (the in-app download covers most of it, or ask us);
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including anything we do based on legitimate interests;
- receive data you gave us in a format you can reuse (data portability); and
- withdraw any consent you've given, such as for notifications.
Email support@tiffapp.co. We'll reply within one month, and we may need to check it's really you. Some rights have limits: for example, content in a shared space also belongs to your partner, so we'll balance both of your rights.
If you're unhappy with how we've handled your data, please tell us first so we can try to fix it. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
11. Age limit
Tiff is for adults aged 18 and over. It isn't designed for anyone younger and we don't knowingly collect data from anyone under 18. If you think someone under 18 is using Tiff, email us and we'll delete their account.
12. Keeping it safe
Each couple can only reach their own space: the database checks this on every request. Photos are stored privately and shown through short-lived links. Data is encrypted in transit, and our hosting provider encrypts it at rest. Secret keys stay on our servers, never in the app. No system is perfectly secure, but if something goes wrong that affects you, we'll tell you and the ICO where the law requires.
13. Changes to this policy
If we change how we use your data, we'll update this page and the date at the top. If the change is significant, we'll also tell you in the app before it takes effect.
14. Contact us
Smart Build Technologies Ltd
Email: support@tiffapp.co
Web: tiffapp.co/support