Privacy Policy

Last updated: 31 July 2026

This Privacy Policy explains how TUNINQ (“TUNINQ”, “we”, “us”, or “our”) collects, uses, and protects your information when you use the TUNINQ mobile application (the “App”) — an app that generates modified versions of photos of your car (paint, wheels, body kits, and stance). By using the App, you agree to this Policy.

1. Who we are

The App is operated by GRBZ Studio (“we”, the data controller). If you have any questions about this Policy or your data, contact us at support@tuninq.app.

2. Information we collect

Information you provide

• Account information: your email address, first and last name, and a securely hashed password. If you sign in with Google or Apple, we receive a unique account identifier and your email address from that provider (we never receive your social account password).
• Photos you upload: the car photo (and any optional reference image) you choose to modify. See Section 4 for how these are handled.
• Communications: if you contact us for support, the content of your message.

Information collected automatically

• Purchase records: when you buy token packs, the store (Apple App Store or Google Play) processes the payment. We and our provider RevenueCat receive a record of the transaction (product purchased, transaction identifier, your app account ID). We never receive your full card or payment details.
• Device identifier: a device identifier that we store only in a hashed form, used solely to prevent abuse of the one-time welcome token bonus.
• Push notification token: if you enable notifications, a push token so we can deliver notifications to your device.
• Technical/log data: standard server and security logs such as IP address, request timestamps, and error diagnostics, used to operate and secure the service.

We do not collect precise location data, and we do not use advertising trackers.

3. How we use your information

• To provide the core service — generating modified car images from the photos you submit.
• To create and manage your account and authenticate you.
• To process purchases and maintain your token balance.
• To send transactional emails (email verification, password reset) and, if enabled, push notifications.
• To provide customer support and respond to your requests.
• To protect the service against fraud and abuse, and to comply with legal obligations.

Our legal bases for processing (where GDPR/KVKK applies) are: performance of our contract with you (providing the App), your consent (e.g. push notifications), our legitimate interests (security and abuse prevention), and compliance with legal obligations.

4. Your photos and image processing

When you generate an image, the photo you upload is sent over an encrypted connection to our server and then to Google Cloud, which performs the image processing.

• The photo you upload is processed in memory to fulfil your request and is not stored on our servers.
• The generated image is returned to your device and saved locally there (in the App’s on-device gallery and, if you choose, your device photo library). We do not keep a copy of the generated image on our servers.
• Google processes the image as our service provider to perform the generation. Please review Google Cloud’s privacy notice.

5. Third-party service providers

We share data with the following providers only as needed to run the App:

These providers act as our processors and are permitted to use the data only to provide their service to us. We do not sell your personal data.

6. Where your data is processed

Our servers are located in Germany (European Union). Some providers (e.g. Google, Apple, RevenueCat, Cloudflare) may process data in other countries. Where data is transferred outside your region, we rely on appropriate safeguards such as the providers’ standard contractual clauses.

7. Data retention

• Account data is kept while your account is active.
• Uploaded photos are not retained on our servers after your request is processed.
• Generated images are stored on your device and remain under your control.
• Purchase and log data is retained as required for accounting, security, and legal obligations.

8. Your rights

Depending on where you live (including under the EU GDPR and Turkey’s KVKK), you have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact support@tuninq.app.

Deleting your account

You can delete your account and associated personal data at any time directly in the App: Profile → Delete Account. This permanently removes your account.

9. Security

We protect your data with encryption in transit (HTTPS/TLS), hashed passwords, restricted access, and standard security controls. No method of transmission or storage is 100% secure, but we work to protect your information.

10. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated Policy.

12. Contact

Questions or requests about this Policy or your data: support@tuninq.app.