Privacy Policy

Effective date: 10 November 2026

Draft template. This policy describes how the service currently works, but it is not legal advice. Fill in the highlighted details and have a qualified lawyer review it before you rely on it or run advertising.

1. Who we are

This website and the "Tina's Take" service (the "Service") are operated by [your full legal name or registered business name], [your business address], Singapore ("we", "us", "our"). We are the organisation responsible for the personal data described in this policy. Our contact for privacy matters is set out in section 17.

2. About this policy

This policy explains what personal data we collect when you use the Service, why we collect it, who we share it with, how long we keep it and what choices and rights you have. We handle personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). Where the law of another place, such as the EU or UK General Data Protection Regulation ("GDPR"), applies to you, we also describe the rights that law gives you. By uploading a chat or otherwise using the Service you acknowledge this policy. Where the law requires your consent, we ask for it separately, for example with a tick-box.

3. Personal data we collect

(a) Chat content you upload

You may upload an exported chat file from WhatsApp, Telegram, Instagram, Messenger or a similar app. A chat file normally contains the names (or phone numbers) of the participants, the times messages were sent, and the text of the messages. It may contain personal data about you and about other people, and it may include sensitive information. We read only the text, names and times that the Service needs. We do not ask for photos, voice notes, videos or other media, and we do not use any media that may be present in a ZIP file.

(b) Names and background you enter

Before your report is created you may change the names of the people in the chat, and you may add a short description of the relationship or group. The names and description you enter are used in your report and are sent to the AI service described below, in the same way as the chat. We do not save the description after your report has been created. Please do not put sensitive details in it unless you are comfortable with that.

(c) Your report

The Service generates a report from your chat. The report contains statistics (such as message counts, reply times and active hours) and written commentary generated by an AI model, which may quote short extracts of your messages.

(d) Email address

We ask for your email address before we create your report. We use it to send you your report preview and a link to your report, to answer your questions and handle refunds, and to recognise repeat use. We keep it together with a record of the report (see (f) below) until you ask us to delete it. If you also tick the separate marketing box, we may use your email address to send you news and offers about Tina's Take, as described in section 12. If you do not tick that box, we will not use your email address for marketing.

(e) Payment information

Payments are processed by Stripe. We never see or store your full card number. We receive confirmation that a payment succeeded, the report it relates to, and similar transaction details.

(f) Usage records

For each report we create we keep a small record: the date, your email address and marketing choice, the number of messages and which app the chat came from, how much AI processing the report used (in tokens) and its estimated cost, and whether the report was paid for. The record contains no message text. We use these records to run the Service, to monitor costs and performance, to prevent abuse and to prepare accounts.

(g) Technical information

Like most websites, our servers and hosting providers process technical data such as your IP address, browser type and the pages requested, mainly to deliver the Service, to keep it secure and to limit abuse. We use your IP address in temporary memory to apply rate limits. We do not create user accounts.

4. How we use personal data

We use personal data only for the following purposes:

1. to read your chat and create, display and, where you ask, email your report;
2. to process your payment and unlock the paid parts of your report;
3. to operate, secure and improve the Service, including preventing fraud, abuse and excessive use;
4. to answer your questions and handle requests, complaints and refunds;
5. to keep records of usage, costs and payments so we can run, fund and secure the Service;
6. to send you news and offers, only if you have chosen to receive them;
7. to comply with our legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal data. We do not use the content of your chat to build advertising profiles, and we do not use it to train our own models.

5. Our basis for using personal data

Under the PDPA we rely on your consent (given when you upload a chat and confirm the consent box) and, for limited purposes such as security and legal compliance, on the exceptions the PDPA allows. If the GDPR applies to you, our legal bases are: performance of a contract with you (creating your report and processing your payment); your consent (the AI processing of your chat content and marketing emails); our legitimate interests in keeping the Service secure and preventing abuse; and compliance with legal obligations. You may withdraw consent at any time, as described in section 14.

6. Chats that include other people

A chat usually contains messages written by other people. By uploading a chat you confirm that you are entitled to upload it and to have it analysed, and that doing so does not breach the rights of anyone else or the terms of the app it came from. Please do not upload a chat if you are not comfortable with your report quoting extracts of it. We do not contact the other participants. If you are a participant in someone else's chat and you want to ask about a report, contact us (section 17) with the link to the report, if you have it.

7. Who receives personal data

We share personal data only with service providers who help us run the Service, and only as needed for that purpose:

• Anthropic, PBC (the Claude AI service). The text, names and times from your chat, and the statistics we calculate, are sent to Anthropic's API so that its models can write your report. Anthropic handles that data under its own terms and privacy policy.
• Stripe processes payments under its own privacy policy.
• Our hosting provider stores the Service's data and delivers the website to you.
• Our email provider delivers emails you ask us to send, if that feature is switched on.

We may also disclose personal data where the law requires it, to respond to a valid request from a public authority, or to protect our rights, safety or property. If our business is ever sold or reorganised, personal data may be transferred to the new owner, who must continue to protect it in line with this policy.

8. Transfers outside Singapore

Some of our service providers, including the AI, payment and email providers, process data in other countries, such as the United States. Where we transfer personal data outside Singapore, we take steps to make sure it receives a standard of protection comparable to the PDPA, for example by using providers that are bound by contractual and legal data protection obligations. If the GDPR applies to you, transfers outside the EEA or UK rely on appropriate safeguards where required.

9. How long we keep personal data

• Your chat file: we do not save the uploaded file. While you are choosing names, the parsed chat is held only in the server's temporary memory, for up to 30 minutes, and is discarded as soon as you start the analysis or the time runs out.
• Your report: deleted automatically about 24 hours after it is created, or about 7 days after you unlock it. You can delete it sooner with the "Delete this report now" button on the report page.
• Your email address and usage record: kept with the report record (without any message text) until you ask us to delete it. Deleting your report from the report page does not delete this record; to have it deleted, contact us (section 17).
• Payment records: kept by Stripe and by us for as long as tax, accounting and legal obligations require.
• Technical logs: kept by our hosting provider for a limited period under its own policies.

Technical backups, if any, are overwritten in the ordinary course. When we no longer need personal data for a legal or business purpose, we delete it or remove the means by which it can be associated with you.

10. Security

We use reasonable security arrangements to protect personal data, including encrypted connections (HTTPS), unguessable report links, automatic deletion and limited access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Anyone who has the link to your report can open it. Share the link only with people you trust. If you think your report link has been exposed, delete the report and contact us.

11. Cookies, local storage and advertising

The Service does not use advertising or tracking cookies at this time. It uses a service worker so that the site can be installed on your phone's home screen; the service worker does not store your chats or reports. If we later add analytics or advertising tools (for example, a Meta pixel), we will update this policy and ask for your consent where the law requires it. Our advertisements on third-party platforms are governed by those platforms' own privacy policies.

12. Marketing communications

If you tick the marketing box when giving your email address, you agree that we may email you news, updates and offers about Tina's Take. Every marketing email will include a way to unsubscribe, and you can also withdraw consent at any time by writing to us. Withdrawing consent does not affect the report you have already received or any service emails about a purchase.

13. AI-generated content

Reports are produced automatically by an AI model. They are for entertainment and general reflection only. They may be inaccurate, exaggerated or miss context, and they are not professional, psychological, medical, legal or relationship advice. No decision about you is made solely by automated means that has legal or similarly significant effects on you.

14. Your rights and choices

Subject to applicable law, you may ask us to: tell you what personal data we hold about you and how it has been used; correct personal data that is inaccurate; delete personal data; withdraw your consent to our collection, use or disclosure of it; and, where the GDPR applies, restrict or object to certain processing, receive a copy of your data in a portable format, and lodge a complaint with your local data protection authority. Withdrawing consent may mean we can no longer provide some or all of the Service to you. We will respond to requests within a reasonable time (for PDPA access and correction requests, generally within 30 days), and we may need to verify your identity first. Because reports are stored under a private link rather than an account, we may need you to send us that link so we can find your report.

15. Children

The Service is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used the Service, please contact us and we will delete the data.

16. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. If we make a material change to how we use personal data, we will give you notice on the website and, where required, ask for your consent again.

17. Contact us

For questions, requests or complaints about personal data, contact our data protection contact at [your privacy email address]. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (pdpc.gov.sg) or, if you are in the EEA or UK, your local data protection authority.

Tina's Take is built by a former programmer at NASA 🚀

Back to Tina's Take