Privacy Policy

1. Who We Are

Dotsed is an iPhone application operated and made available by Keller Services FZCO, a company incorporated in the United Arab Emirates ("Keller", "we", "us", or "our").

For purposes of applicable privacy and data protection laws, Keller Services FZCO is the controller of personal data processed through the App.

Keller Services FZCO

Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates

Email: privacy@dots.inc

2. Sign in with Apple and Local-First Storage

To use Dotsed, you need to sign in with Apple.

Dotsed is designed as a local-first app: your projects, reference images, notes, checklist progress, voice notes, and related content may be stored locally on your device. When you are signed in, your content is also synchronized with our cloud systems so that you can access and restore your projects.

Certain on-device features, including local speech transcription where supported by your device, may be processed locally. Cloud synchronization and cloud-based AI features require an account and an internet connection.

3. Information We Collect

If you create an account — with Sign in with Apple — we handle:

Account details — your email address and, if you provide them, a name and avatar.

Your prep content — projects and their body placements, reference images and your reactions to them, voice notes and their transcriptions, written notes, and checklist answers, synced so you don't lose them.

Optional gender — asked once, only to curate your inspiration feed. You can choose "prefer not to say" and change or remove it at any time.

Basic diagnostics and event-based analytics — crash reports and limited usage analytics, such as taps, screen transitions, feature usage events, device type, operating system version, app version, and similar technical information that help us understand how the Service is used, identify errors, and improve its functionality.

4. Legal Bases for Processing

Where applicable under privacy and data protection laws, we process personal data on one or more of the following legal bases:

• performance of our agreement with you;
• your consent;
• compliance with legal obligations;
• our legitimate interests in operating, maintaining, securing, supporting, and improving the App and related services.

5. Voice Notes and AI Features

Voice notes are processed in different ways depending on how you use the Service. Where supported, voice transcription may be performed locally on your device using Apple technologies.

We do not use your voice recordings for biometric identification, authentication, or recognition.

When cloud transcription is used, raw audio is uploaded solely to generate a text transcript. After successful transcription, the raw audio file is deleted from our active cloud systems and remains stored only locally on your device for local playback, unless you delete it. If transcription fails, the audio file may be temporarily retained in our cloud systems for up to 24 hours for retry purposes and is then deleted.

Keller does not use your content to train its own AI models.

When cloud transcription is used, raw audio is uploaded solely to generate a text transcript. Once transcription is completed, raw audio is deleted from our active systems, subject to short-lived encrypted backups and security logs.

When we use third-party AI providers, your content is processed in accordance with our agreements with those providers and their applicable policies.

You are solely responsible for reviewing and evaluating any AI-generated output before relying on it or sharing it with third parties.

Keller currently uses third-party AI providers, including OpenAI and Krea, for certain AI-powered features.

Speech transcription may use Whisper.

Text processing may use GPT-4o-mini.

Concept image generation may use Krea or OpenAI image models.

Our AI providers and models may change from time to time as the Service evolves.

6. Device Permissions

Dotsed asks for permissions only when a feature needs them:

Microphone — only to record your voice notes. Never in the background.

Camera and photo library — only to add reference images or a photo of a finished tattoo.

Share extension — when you share an image from Safari, Photos, Instagram, or Pinterest into Dotsed, only that image is received.

7. Images and Reference Materials

Images uploaded to the App may include photographs, reference materials, artwork, tattoos, screenshots, or other visual content and may contain personal information.

Such content is processed solely for providing App functionality and is not publicly displayed by Keller.

Keller does not submit your uploaded images to AI providers for image analysis or image generation.

8. Sharing You Control

When you export a Tattoo Project Brief, the PDF is generated for you to share with whomever you choose — typically your tattoo artist. Once you share it outside the app, its further handling is between you and the recipient.

PDF files are generated locally on your device and are not stored by Keller.

9. Third-Party Links and External Services

The App may contain links, references, or access points to third-party websites, platforms, applications, services, or content, including services operated by our affiliates.

If you choose to access or use any third-party or affiliated service, your information may be processed by that service in accordance with its own privacy policy and terms.

This Privacy Policy applies only to Dotsed and does not apply to third-party or affiliated services that are not operated as part of the App.

10. Service Providers

We use a limited number of trusted third-party service providers to operate, maintain, secure, and improve the Service. Depending on the features you use, these providers may process personal data on our behalf and only to the extent necessary to provide the Service.

Our current service providers include:

Our service providers and technologies may change from time to time as the Service evolves.

Where applicable, the processing of your information by these providers is also subject to their respective privacy policies and terms. We encourage you to review those policies to better understand how your information may be handled by such providers.

• Supabase — cloud hosting, database, storage, authentication, and synchronization services;
• OpenAI — speech transcription and certain AI-powered text features, including summaries, recommendations, prompt generation, and other language processing;
• Krea — AI-powered concept image generation;
• Apple — Sign in with Apple, app distribution, and device-level services;
• Amplitude — limited event-based product analytics that help us understand how users interact with the Service and improve its functionality.

11. Analytics

We use Amplitude for limited event-based product analytics to better understand how users interact with the Service and to improve its functionality.

Amplitude may process technical and usage information, such as taps, screen transitions, feature usage events, device type, operating system version, app version, approximate region, timestamps, and similar diagnostic or usage data.

We use this information to analyze app performance, identify errors, understand feature usage, and improve the user experience.

12. International Data Transfers

Your information may be transferred to, accessed from, stored in, and processed in countries other than your country of residence, including the United Arab Emirates, the United States, Australia, the European Union, and other jurisdictions where we or our service providers operate.

Where required by applicable law, we implement appropriate safeguards designed to protect personal information during such transfers.

13. Security

We implement commercially reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure.

14. Data Retention and Deletion. Backups

Local data stays on your device until you delete it or the app. Synced data is kept while your account is active. You can delete individual projects, voice notes, or references at any time, and you can delete your account from the Profile screen or by writing to support@dots.inc.

Deleted content may remain in secure backup systems and provider-side logs for a limited period before being permanently removed or overwritten as part of our ordinary backup, logging, security, and disaster recovery procedures.

Event-based analytics data may be retained by our analytics provider for a limited period in accordance with our settings and the provider’s applicable retention practices. Where possible, we configure analytics to avoid collecting the contents of your projects, reference images, voice notes, transcripts, AI-generated concept images, and PDF briefs.

15. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, export, or erase your personal data, and to object to or restrict certain processing. We will respond to such requests in accordance with applicable law.

16. Children and Age Restriction

Dotsed is about preparing for tattoos and is not directed to children. You must be at least eighteen (18) years old to use the App.

17. What We Never Do

Nothing in Dotsed is public. There are no public profiles, no social feed of your content, and no advertising. We do not sell your personal information, and we do not share your prep content with anyone — the only person who can share a project is you, by exporting its PDF brief.

18. Changes to This Policy

If we change this policy in a meaningful way, we will let you know in the app before the change takes effect. The date at the top always reflects the current version.

19. Contact Us

For anything privacy-related, just drop us a line at support@dots.inc.