Privacy Policy

1. Introduction

TinApps is a product of Weappify Limited ("we," "us," "our," or "Company"). We operate the TinApps platform (available at tinapps.net), which provides AI-powered chatbot services to businesses through messaging channels including WhatsApp, Facebook Messenger, Telegram, and website chat widgets (the "Service").

This Privacy Policy explains how we collect, use, store, and protect information when end users interact with chatbots powered by our platform, and when business clients use our admin dashboard.

2. Information We Collect

2.1 Messages & Conversations

When you interact with an AI chatbot powered by our Service — whether through WhatsApp, Facebook Messenger, Telegram, or a website chat widget — we collect and store:

• The messages you send and the AI-generated responses
• Your sender identifier (e.g., WhatsApp phone number, Messenger user ID, Telegram user ID)
• Message timestamps and metadata

2.2 Technical Data

We may automatically collect:

• Device information — browser type, operating system (for website widget interactions)
• IP address — used for rate limiting and abuse prevention

2.3 Business Client Data

If you are a business using our admin dashboard, we collect the email address and credentials you use to sign in, as well as the business configuration data you provide (including WhatsApp Business Account details, channel settings, and knowledge base content).

3. How We Use Your Information

• Provide the Service — deliver AI-generated responses to your messages via WhatsApp, Messenger, Telegram, or website chat
• Conversation context — retain recent message history to provide contextually relevant AI responses
• Improve quality — analyze usage patterns to improve response accuracy and service reliability
• Prevent abuse — rate limiting, message deduplication, and spam detection
• Support our clients — provide business clients with conversation history and analytics through the admin dashboard
• Comply with legal obligations

4. Data Sharing & Third-Party Services

We do not sell your personal data. Our Service integrates with the following third-party providers as necessary to operate:

• Meta Platforms (WhatsApp Business API & Messenger) — we receive and send messages through Meta's messaging platforms. Meta processes data according to its own privacy policies.
• Telegram Bot API — for businesses that enable the Telegram channel
• Google Cloud Platform / Firebase — cloud infrastructure, authentication, and database services. Data is stored in European data centers.
• Google Gemini — AI language model used to generate chatbot responses. Message content is sent to Google's API to produce replies.

Each third-party provider processes data according to their own privacy policies. We encourage you to review them.

5. Data Storage & Security

Your data is stored on Google Cloud Platform (Firebase / Firestore) in European data centers (multi-region Europe). We employ industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) for all communications
• Encryption at rest for stored data
• Access controls and authentication for admin access
• API secrets stored in Google Cloud Secret Manager
• Webhook signature verification for incoming messages

6. Data Retention

• Conversation data is retained for as long as the business client maintains an active account with us
• Message deduplication records are automatically deleted after 10 minutes
• Rate limit counters are periodically cleared
• Business clients may request deletion of all their data at any time
• End users may request deletion of their conversation data by contacting us or the business they interacted with

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Restrict processing — object to or limit certain processing
• Data portability — receive your data in a structured format
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

8. Children's Privacy

Our Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

9. International Data Transfers

Your data is primarily stored within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g., to AI model providers), we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Cookies and Tracking

Our website does not use tracking cookies or third-party analytics. The admin dashboard may use essential cookies or local storage for authentication and session management only.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have any privacy concerns, please contact us:

13. Legal Basis for Processing (GDPR)

We process personal data on the following legal bases:

• Legitimate interest — to provide and improve our AI chatbot services
• Contract performance — to deliver the services our business clients have engaged us to provide
• Legal obligation — to comply with applicable laws and regulations
• Consent — where you have explicitly consented to interact with a chatbot (e.g., initiating a WhatsApp conversation)