Privacy Policy

Information we collect

We collect account email, display name, password hashes, recovery-code and reset-token hashes, account roles, preferences, and session identifiers. Depending on the features you use, we store artist profiles and business contact details, artist connections, requests, reference images, messages, proposals, appointments, project sessions, photos, tattoo records, payment-status and deposit records, and Collector’s Book entries. Support requests include the contact details, message, response, and any screenshot you choose to provide. In-app problem reports may also attach limited diagnostic context such as platform, app version/build when available, device/browser information, and the screen from which you opened support. Safety reports include the accounts involved, concern category, description, urgency, and relevant project identifier. A reporting participant may deliberately submit selected message snapshots and evidence files. Only submitted evidence is available in the Admin safety case; Admin does not offer unrestricted browsing of private conversations. Private moderation notes, decisions, contact restrictions, account enforcement, and administrative audit records support case handling. Aggregate operational analytics reuse existing records and do not create artist rankings or additional tracking.

Optional push notifications use a device or browser subscription identifier. Technical information may include IP address, device/browser information, request times, errors, and usage events processed by hosting and infrastructure providers. Membership records may include billing source, plan, subscription status, renewal or expiration dates, and provider identifiers. Apple membership records may include an app account token, product and transaction identifiers, and purchase environment. Web membership billing is processed by Stripe, which receives payment information under its own policies; we retain the customer/subscription identifiers and status needed to control Artist access. We do not receive your Apple account password or full payment-card number.

How we use information

We use information to create and secure accounts, deliver the features you request, connect artists and clients, maintain booking and payment-status records, process membership access, send operational notices and recovery emails when configured, prevent misuse, handle support and safety reports, and meet legal obligations. Optional artist announcements depend on your notification choices. We do not use your private project content as public promotional content without an explicit sharing action.

Where applicable law requires a legal basis, we rely on performing our service agreement, consent for optional permissions, legitimate interests in operating and protecting the service where permitted, and compliance with legal obligations.

Public and private content

Public artist pages, Finder listings, business locations, flash designs, and published portfolio content can be viewed and copied by visitors and indexed by search engines. Private requests, messages, reference images, and project photos are available to authorized project participants. They are not shared with unrelated artists. A participant can retain their own screenshots or copies; we cannot retrieve copies already held outside the app. Review sharing controls before publishing photos, especially images that identify a person.

Authorized operator support can review submitted reports and support requests. Access to other information may be necessary to investigate a specific issue, protect the service, or meet a lawful request. The app does not provide end-to-end encrypted messaging.

Providers and independent artists

Floot and its infrastructure providers process hosting, database, storage, operational logs, email where configured, and notifications. Apple processes App Store purchases under its own policies. Stripe processes web Artist Membership billing under its own policies. Square processes connected artist payments; Cash App, Zelle, and other outside payment services process transactions directly under their own terms. We store payment references and status needed for bookings, rather than acting as a bank or escrow service. Connected integrations may store encrypted access credentials and selected account identifiers needed to operate the connection.

Independent artists receive information you share with them and are responsible for their separate business, consent, health, tax, and service records. Map and address lookup providers may receive public business addresses or technical connection information when map features load. Information may be processed outside your state or country. We may disclose information when legally required or reasonably necessary to prevent harm, investigate misuse, or protect rights. We do not sell personal information or use private tattoo projects for targeted advertising.

Optional calendar connections

Apple Calendar sync uses Full Calendar Access after you choose to connect in the iPhone or iPad app. You select calendars for availability. Only busy start and end times, linked to your artist account and a device sync identifier, are uploaded; personal event titles, notes and attendees are not uploaded. Confirmed Shop Door appointments are added and updated in a dedicated device calendar. Apple or another configured calendar provider may sync that calendar under its own policies. Device storage holds your selected calendar identifiers and appointment sync identifiers. Apple sync refreshes while the app is open or returns to the foreground, covering the next 180 days; it is not continuous background monitoring. Disconnecting this device clears its imported busy times and stops its sync, but leaves existing appointments in Apple Calendar. Revoke access in iOS Settings to stop device access; disconnect in Shop Door to clear imported availability. Google connections similarly import selected calendar busy times and can copy appointment information to Google under your settings.

Device storage and choices

Essential session cookies keep you signed in. Local device storage may hold unfinished request drafts, selected booking context, and preferences. The hosted service may process operational and visitor analytics. You can clear browser data, sign out, manage notification preferences, and revoke photo or notification permissions in device settings; some features then stop working. Only upload photos and information you have the right to share. Do not submit unnecessary medical records or financial credentials.

Retention and account deletion

Active account and project information remains while needed to provide the service. Full account deletion removes both client and artist identities and connected shared projects from the active app, including the other participant’s view of those shared projects. Uploaded files enter an erasure process; public image caches can take up to a day to clear. Provider backups and operational logs may remain on their separate retention schedules and are not used to restore an account on request.

Safety cases linked to deleted accounts or deleted shared requests are removed from the active database, and their unreferenced evidence files enter the erasure process. Separate administrative audit records may remain for accountability. Support tickets are separate from account records and may remain to resolve requests, investigate abuse, or meet legal obligations. Request deletion of a support ticket through Support and provide its private reference. Payment providers and artists may retain independent records required by law. Records subject to a legal preservation obligation may be retained only for that purpose. Read the account deletion instructions, including the difference between removing an Artist workspace and deleting the whole account.

Your privacy requests

You may request access, correction, a copy, or deletion of your personal information through Support. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent, or complain to your local privacy regulator. We verify requests in a proportionate way to protect your account and respond as required by applicable law. Do not send a password, recovery code, or government ID through the support form unless a secure, necessary verification process has been separately agreed. We do not deny legally protected rights because you exercise them.

Children, security, and changes

The service is intended for adults aged 18 or older and is not directed to children. Contact Support if a child has submitted personal information. We use access controls and hashed passwords and recovery secrets, but no service can guarantee absolute security. We update this policy when practices change, show the effective date, and provide additional notice or obtain consent when required.