This Privacy Policy (“Policy”) describes how Digital Coffee, LLC (“we,” “us,” or “our”) collects, uses, stores, and protects your information when you use the Tantrumify website, application, and services (collectively, the “Services”). This Policy supplements our Terms of Service.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please do not use the Services.

1. Information We Collect

1.1. Information You Provide

• Uploaded Photos: When you use the Services, you upload a photo (“Input”) that is processed by our AI pipeline to generate satirical content. We store uploaded photos in secure cloud storage (Vercel Blob) for the purpose of generating and displaying your article.
• Account Information: If you create an account using a third-party sign-in provider (such as Google or Apple), we receive and store your name, email address, and profile photo URL as provided by that service. We do not receive or store your password for these services.
• Email Address: If you subscribe to our newsletter, we collect and store your email address for the purpose of sending you updates about Tantrumify and related products.
• Payment Information: If you purchase a video generation, payment is processed entirely by Stripe. We do not receive, process, or store your credit card number, bank account details, or other financial account information. Stripe may share limited transaction data with us (such as a confirmation of payment and the last four digits of your card) for order fulfillment and support purposes.

1.2. Information Collected Automatically

• Usage Data: We may collect anonymized usage analytics to improve the Services, including pages visited, article view counts, and general usage patterns.
• Device & Browser Information: We may collect basic technical information such as browser type, operating system, and screen resolution for the purpose of improving compatibility and user experience.
• IP Address: We may collect your IP address for security, fraud prevention, and abuse detection purposes. For newsletter subscribers, we store a one-way hash of your IP address (not the IP address itself) alongside your subscription record.

1.3. Information from Third Parties

If you sign in using a third-party provider (Google or Apple), we receive basic profile information (name, email, profile photo) from that provider. We use this information solely to create and maintain your account. We do not access your contacts, calendar, or any other data from these providers.

1.4. Local Storage

We use your browser's local storage to maintain a reading history of articles you've viewed and to track which articles you created. This data is stored entirely on your device, is never transmitted to our servers, and can be cleared at any time through your browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Content Generation: Your uploaded photo is processed by Anthropic's Claude AI (for article generation) and, if purchased, by Kling AI via fal.ai (for video generation) to create your satirical content.
• Service Delivery: To display your generated article and video, process payments, and provide customer support.
• Account Management: To authenticate your identity, maintain your account, display your generation history, and apply your account preferences (such as default privacy settings).
• Communication: To send newsletter updates if you have subscribed, and to respond to support inquiries.
• Content Moderation: We may review uploaded photos and generated content to enforce our Terms of Service and Prohibited Use Policy. This includes detecting content that violates applicable law or our policies. We reserve the right to remove content and suspend or terminate access for users who violate these policies.
• Safety & Security: To detect and prevent fraud, abuse, unauthorized access, and violations of our Terms of Service.
• Improvement: To analyze anonymized usage patterns and improve the Services.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you upload a photo, create an account, or subscribe to our newsletter, you consent to the processing described in this Policy. You may withdraw consent at any time by contacting us or deleting your account.
• Contract Performance: Processing necessary to deliver the Services you have requested, including generating articles, processing payments, and fulfilling video orders.
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving the Services, preventing fraud, enforcing our Terms of Service, and ensuring the security of our platform. We balance these interests against your rights and freedoms.
• Legal Obligation: Processing required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. Third-Party Services & Data Sharing

4.1. Service Providers

We use the following third-party services to operate Tantrumify. Each service receives only the minimum data necessary to perform its function:

4.2. Legal Disclosures

We may disclose your personal data if required to do so by law, or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, court order, or legal process; (b) protect and defend the rights, property, or safety of Digital Coffee, LLC, our users, or the public; (c) detect, prevent, or address fraud, security issues, or technical problems; or (d) enforce our Terms of Service.

4.3. Business Transfers

If Digital Coffee, LLC is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred as part of that transaction. We will notify you (for example, via email or a notice on the Services) of any such change in ownership or control of your personal data.

4.4. No Sale of Personal Data

We do not sell your personal data. We do not share your information with third parties for advertising or marketing purposes. We do not engage in the “sale” or “sharing” of personal information as defined by the California Consumer Privacy Act (CCPA) or similar state privacy laws. Data is shared with third-party services only as described above and only as necessary to operate the Services.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Uploaded Photos & Generated Content: Photos, articles, and videos are retained indefinitely to allow ongoing access to your generated content. If you set your article to private, it will no longer appear on the public browse page but will remain accessible via its direct URL. You may request deletion of your content at any time by contacting us.
• Account Data: Your account information (name, email, profile photo URL) is retained for as long as your account remains active. You may request deletion of your account by contacting us, after which we will delete your account data within 30 days. Generated content associated with your account will be disassociated but not automatically deleted unless separately requested.
• Newsletter Subscriptions: Your email address is retained until you unsubscribe. To unsubscribe, contact us at support@tantrumify.com.
• Payment Records: Transaction records are retained as required by applicable tax and financial regulations (typically up to 7 years).
• Usage Data: Anonymized analytics data may be retained indefinitely for product improvement. Because this data is anonymized, it cannot be used to identify you.
• Security Logs: IP address hashes and abuse detection records may be retained for up to 12 months for security purposes.

6. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. These measures include:

• All data is transmitted over HTTPS (TLS encryption in transit).
• Payment processing is handled entirely by Stripe, a PCI-DSS Level 1 certified provider.
• Uploaded files are stored in access-controlled cloud storage with CDN distribution.
• Authentication is handled via secure, signed JWT tokens with industry-standard OAuth 2.0 flows.
• IP addresses for newsletter subscribers are stored as one-way hashes, not in plain text.
• Access to production systems and databases is restricted to authorized personnel.

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities as required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your personal data, including uploaded photos, generated content, and your account.
• Correction: Request correction of inaccurate personal data.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we restrict processing of your personal data in certain circumstances.
• Opt-Out: Unsubscribe from newsletter communications at any time.
• Visibility: Set your generated articles to private so they do not appear on the public browse page.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing performed before the withdrawal.
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, contact us at support@tantrumify.com. We will verify your identity before processing your request and respond within 30 days (or sooner if required by applicable law). If we need additional time, we will notify you of the extension and the reason for the delay.

8. US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with comprehensive privacy legislation, you may have additional rights under applicable law.

California (CCPA/CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the right to:

• Know what personal information we collect, use, disclose, and sell (if applicable).
• Request deletion of personal information we have collected.
• Opt out of the sale or sharing of personal information. As stated above, we do not sell or share your personal information.
• Non-discrimination for exercising your CCPA rights.
• Request correction of inaccurate personal information.
• Limit the use and disclosure of sensitive personal information.

Categories of personal information collected: Identifiers (name, email, IP address hash), Internet or network activity (usage data, browser information), and audiovisual information (uploaded photos). We do not collect sensitive personal information as defined by the CCPA, except to the extent that uploaded photos may contain such information at the user's discretion.

Other States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws may have similar rights, including the right to access, delete, correct, and opt out of targeted advertising (which we do not engage in). To exercise your rights under any state privacy law, contact us at support@tantrumify.com. You may also designate an authorized agent to make a request on your behalf.

9. Children's Privacy

The Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly.

Users between the ages of 13 and 18 must have parental or guardian consent before using the Services. Users must be at least 18 years old to make purchases.

10. Cookies & Tracking Technologies

Tantrumify uses minimal cookies and tracking technologies:

• Essential Cookies: Required for the basic functioning of the Services, such as Stripe payment session management and authentication session tokens.
• Local Storage: Used to store your reading history and created article identifiers locally on your device. This data is never sent to our servers.

We do not use advertising cookies, third-party tracking pixels, or behavioral profiling technologies.

Do Not Track: Some browsers offer a “Do Not Track” (DNT) signal. Because there is no accepted standard for how to respond to DNT signals, we do not currently respond to them. However, because we do not engage in cross-site tracking, advertising tracking, or behavioral profiling, our practices are consistent with the intent of DNT signals regardless.

11. Automated Processing & AI-Generated Content

Tantrumify uses artificial intelligence to process your uploaded photos and generate satirical content (articles and, if purchased, videos). This processing is automated and involves:

• Image Analysis: Your uploaded photo is analyzed by AI to identify visual elements (such as clothing, setting, and objects) used in generating a satirical article. This analysis does not involve biometric identification, facial recognition, or the collection, storage, or processing of biometric data as defined under the Illinois Biometric Information Privacy Act (BIPA) or similar laws. We do not create facial templates, faceprints, or any biometric identifiers from your photos.
• Content Generation: AI models generate article text and, if purchased, video content based on the analysis of your uploaded photo. All generated content is satirical and fictional in nature.
• Content Moderation: We may use automated tools to screen uploaded content for policy violations.

No automated processing performed by Tantrumify produces legal effects or similarly significant effects concerning you. The generated content is entertainment only and does not constitute a decision about you. If you believe generated content is harmful or inaccurate, you may contact us to request its removal.

12. International Data Transfers

Tantrumify is operated from the United States. If you access the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from the laws of your country. By using the Services, you consent to such transfers. We take reasonable steps to ensure your data is treated securely and in accordance with this Policy regardless of where it is processed.

13. Changes to This Policy

We may periodically update this Privacy Policy. We will notify you of any material changes by posting the updated Policy on this page and updating the “Last Updated” date. For significant changes that materially affect your rights, we will provide additional notice (such as via email to account holders or a prominent notice on the Services). Continued use of the Services after changes constitutes acceptance of the updated Policy.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, contact us: