Legal
Privacy Policy
Overview
Tikyani Apps LLC ("Tikyani Apps", "we", "us") is a software company registered in New Jersey, United States, at 971 US Highway 202N, Ste N, Branchburg, NJ 08876. We build custom software for clients, run the infrastructure it lives on, and publish a small number of our own apps.
We handle personal data in three different roles, and the rules are not the same in each. This policy is organised that way:
- As a controller, for our own business. Enquiries, contracts, invoices, and visits to this website.
- As a processor, for our clients. Data inside systems we build or operate belongs to the client. They decide what is collected and why; we act on their written instructions.
- As a controller, for our own apps. WheyGPT and anything we publish later, where the user is our user.
The short version:
- We collect the minimum we need, in every one of those roles.
- We do not sell personal data, and we do not show ads.
- We never use client data, or our own users' data, to train machine learning models.
- Our website uses no analytics, no cookies, and no third-party scripts.
- You can delete your account and data yourself, from inside our apps, at any time.
Our website (tikyaniapps.com)
This website is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party scripts, and does not profile visitors.
The site is hosted by Vercel Inc. (United States). Like any hosting provider, Vercel receives the basic technical data your browser sends with every request: your IP address, browser type, and the page requested. It keeps that briefly in server logs used to deliver the site and protect it from abuse. We do not use this data to identify you.
Enquiries, clients, and contracts
If you email us or become a client, we hold the ordinary records a business has to hold: your name, work email, phone number, company, what you asked about, the messages between us, and the contracts and invoices that follow. We are the controller for that data.
We use it to answer you, to deliver the work, to bill for it, and to keep the records tax and company law require. We do not sell it, rent it, or add you to a marketing list you did not ask for. If you decide not to work with us, tell us and we will delete the enquiry, except for anything we are legally required to retain.
Data inside the systems we build and operate
When we build or run software for a client, the personal data inside it belongs to that client. They are the controller: they decide what is collected, why, and for how long. We are a processor, and we act on their documented instructions.
In that role:
- We do not decide the purpose. If you are a customer, employee, or supplier of one of our clients and you want to see, correct, or delete your data, contact that company. If you contact us instead, we will pass it on and help them answer.
- The data stays in accounts the client owns, in the region they choose. We operate those accounts; we do not hold them.
- Access is per person, logged, and revocable. We reach production only when the work requires it, and the client can remove that access at any time without our help.
- We do not use client data to train models, and the model providers we call on a client's behalf are configured not to retain it.
- Sub-processors are the client's to approve. Hosting, database, email, and model providers are named in the agreement before anything is built on them.
- It goes back or gets destroyed at the end. On termination we hand over credentials and data and remove our own copies, other than backups that expire on their normal schedule.
We will sign a data processing agreement, and we will complete a security questionnaire. Ask at hello@tikyaniapps.com.
Our own apps
The rest of this policy covers apps we publish ourselves, where the user is our user and we are the controller. Each app gets its own section, because each one collects different things. A new app gets its section here before it launches.
WheyGPT
WheyGPT is a camera-first protein tracker for iOS, and it keeps its own privacy policy because it handles categories of data nothing else here touches: meal photos, food logs, and optional health details.
Read it at wheygpt.tikyaniapps.com/privacy (opens in a new tab). That policy covers what the app collects, how meal photos are processed, how to delete your account and data from inside the app, and who processes what.
Tikyani Apps LLC is the controller for WheyGPT, and the rights, retention, and contact sections below apply to it as well.
Third-party processors
We use a small number of service providers to run our products. They process data on our instructions, for the purposes listed here, and have no right to use it for their own advertising.
| Provider | What it does for us |
|---|---|
| Supabase | Database, authentication, and server functions for our apps (hosted in the United States). |
| OpenRouter, Inc. | Routes AI requests to the model provider that answers them, for example OpenAI or Meta models, and returns the result. |
| Apple | App distribution, subscription billing, Sign in with Apple, and opt-in crash reporting. |
| Vercel | Hosts this website and keeps short-lived request logs. |
Our services are operated from the United States. If you use them from outside the US, your data is processed in the US.
How long we keep data
For our own business records: enquiries that do not become work are deleted on request or within twelve months, whichever comes first. Contracts, invoices, and the correspondence attached to them are kept for seven years, because tax and company law require it.
For data inside client systems: the client sets the retention schedule and we implement it. On termination we return or destroy our copies, other than backups that expire on their normal cycle.
For our own apps: account and profile data lasts as long as the account, and deleting the account deletes it. Anything app-specific, including how meal photos are handled, is in the WheyGPT privacy policy (opens in a new tab).
Why we are allowed to process this data
Where laws such as the EU and UK GDPR apply, our legal bases are: performing our contract with you (running the app you signed up for), legitimate interests (keeping the service secure and preventing abuse), and consent for optional data, in particular health details like GLP-1 medication status, and the leaderboard. You can withdraw consent at any time by removing the data in the app, opting out, or deleting your account.
Your rights
Depending on where you live, including the EU/EEA, the UK, and a number of US states, you may have the right to:
- get a copy of the personal data we hold about you,
- correct data that is wrong,
- delete your data,
- object to or restrict certain processing, and
- complain to your local data protection authority.
If your data sits inside a system we operate for a client rather than in one of our own products, the client is the controller and the request belongs with them. Send it to us anyway if you are not sure and we will route it and help them answer.
To exercise any of these, email hello@tikyaniapps.com from the address on your account so we can verify it is you. We answer every request, and we will never treat you differently for making one.
Children's privacy
Our apps and website are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email hello@tikyaniapps.com and we will delete it.
Security
Data moves between your device and our servers over encrypted connections (TLS). Database access is restricted row by row, so an account can only reach its own data. API keys for our AI provider are held server-side and never ship inside the app. Payment card data never touches our systems, because Apple handles billing entirely.
Changes to this policy
When we change this policy, we update it here and change the effective date at the top. If a change meaningfully affects how we handle your data, we will say so in the app or by email before it takes effect.
Contact
Tikyani Apps LLC
971 US Highway 202N, Ste N
Branchburg, NJ 08876, United States
hello@tikyaniapps.com