Privacy Policy
Last updated: 16 August 2025
TK100X GmbH (“TK100X”, “we”, “us”) respects your privacy. This Privacy Policy explains what data we process, why, and your choices. If you have questions, contact office@tk100x.com.
1. Controller
TK100X GmbH is the data controller for the websites and apps we operate. For all privacy requests (including GDPR), email office@tk100x.com.
2. Data We Collect
- Information you provide: e.g., name, email, and message content when you contact us or create an account (if applicable).
- App/device data: device type, OS, app version, diagnostics, crash logs, and limited identifiers provided by the platform (e.g., anonymous installation identifiers).
- Purchase data: pseudonymous purchase receipts, product IDs, and subscription status from app stores via RevenueCat (no card data is processed by us).
- Usage data: aggregate or pseudonymous data about how features are used to improve stability and UX.
- User content used with AI features: images/prompts you choose to submit for generation. See Section 4 & 5.
3. Services & Tools We Use
- Google Firebase (Analytics, Crashlytics): helps us understand performance, stability, and crashes. Firebase provides privacy/security information and data processing terms for customers.
- RevenueCat: manages in-app purchases and subscriptions by validating receipts with the app stores and tracking entitlements. RevenueCat acts as our processor under GDPR.
Payments & refunds: All purchases/subscriptions are processed by the Apple App Store or Google Play. You can manage/cancel in your store account; refunds, if available, are handled by the platform (not TK100X).
4. AI Providers
To provide AI-powered features (such as transforming drawings into creatures or generating stories), we work with trusted AI providers, including:
- OpenAI (e.g., GPT models)
- Anthropic (Claude models)
- xAI (Grok models)
- Google (Gemini models)
When you use these features, the content you submit (such as text prompts or uploaded images) may be transmitted to these providers to generate outputs. We do not sell this content. It is used only to deliver the requested feature. Providers may process data outside the EU (e.g., in the US). Where required, transfers rely on safeguards such as Standard Contractual Clauses (SCCs).
Your responsibility: Do not submit sensitive personal data (e.g., health, financial, or identity information) when using AI features. AI outputs may be inaccurate or incomplete — you are responsible for reviewing and using them appropriately.
5. How We Use Data
- Provide, operate, and improve our apps and services.
- Generate requested AI outputs via our providers.
- Monitor performance, fix crashes, and protect against abuse.
- Respond to inquiries and support requests.
- Comply with legal obligations.
6. Legal Bases (GDPR)
- Contract (Art. 6(1)(b)) — to provide requested features and support.
- Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the app (e.g., Crashlytics, essential diagnostics).
- Consent (Art. 6(1)(a)) — where required (e.g., optional analytics). You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) — where we must comply with law.
7. Data Retention
We keep personal data only as long as necessary for the purposes above or as required by law. We then delete or anonymize it.
8. Sharing
We do not sell personal data. We share limited data with processors who help us operate the service (e.g., Firebase, RevenueCat, AI providers named above) under contracts that include confidentiality and data-protection obligations. We may disclose data if required by law or to protect rights and safety.
9. International Transfers
Where data is transferred outside your region (for example, to the United States), we rely on appropriate safeguards such as the EU Standard Contractual Clauses, where required by law.
10. Cookies, Analytics & Preferences
We avoid invasive tracking. If analytics are enabled, they are limited to what is necessary to improve stability and features. Where required, we ask for consent. You can change analytics preferences in-app (where available) or via your device settings.
11. Your Rights
Depending on your jurisdiction (e.g., EU/EEA), you may have rights to access, rectify, erase, restrict or object to processing of your data, and to data portability. To exercise your rights, email office@tk100x.com. You may also lodge a complaint with a supervisory authority.
12. Children
Our apps are family-friendly but are not intended to collect personal data from children without parental consent and supervision. If you believe we have collected personal data from a child, contact us and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. Updates will be posted here with a new “Last updated” date. Continued use after changes take effect means you accept the updated Policy.
14. Contact
TK100X GmbH
Email: office@tk100x.com