Data controller

Who uses HealedProof

HealedProof is designed for tattoo artists who create and manage projects in the iPhone app, and tattoo clients who receive a private link to upload a healed-tattoo photograph and record whether it may be published.

Clients do not need to install the app or create a HealedProof account.

Data we process

• Artist account details, authentication identifiers and studio name.
• Project information such as client reference, tattoo motif, placement and dates.
• Fresh and healed tattoo photographs, which may contain identifying details.
• Client contact information used for an upload request.
• Consent choices, timestamps and relevant project identifiers.
• Voluntary messages, notes, technical security data and support communications.

We do not use tattoo photographs for facial recognition, biometric identification, advertising profiles or training generative AI models.

Why we process data

• To provide accounts and secure project access.
• To create and manage fresh-and-healed tattoo projects.
• To generate private, time-limited client upload links.
• To receive photographs and record publication choices.
• To create requested social-media exports.
• To provide support, prevent abuse and comply with legal obligations.

Legal bases

Where the GDPR applies, processing may rely on performance of a contract, consent, legitimate interests such as security and service reliability, or compliance with legal obligations.

Consent to upload and consent to publish are separate choices. Refusing publication does not prevent a private upload to the artist.

Artist responsibilities

Artists are responsible for having an appropriate basis for entering client information, sending an upload request and using photographs outside HealedProof. HealedProof does not grant permission to publish an image.

Service providers

• Supabase, Inc. for authentication, database services, file storage and server-side functions. Project location: West EU (Ireland).
• Apple Inc. for App Store distribution and iPhone platform services.
• Supabase email infrastructure for initial account and service messages.
• Hostinger for the public website and client upload interface.

This list will be updated if analytics, crash reporting, payments or other providers are introduced.

International transfers

Where required, international transfers use recognised safeguards such as adequacy decisions or the European Commission’s Standard Contractual Clauses. The production database is located in West EU (Ireland); provider sub-processors may operate elsewhere under suitable safeguards.

Retention

• Unused or expired upload links: 30 days after expiry.
• Project photographs: until the project or account is deleted, or a valid deletion request applies.
• Consent records: as reasonably necessary to document publication choices and resolve disputes.
• Security logs: up to 30 days, unless an investigation requires longer.
• Support communications: up to 24 months.
• Encrypted backups: up to 30 days before being overwritten.

Publication and withdrawal

A client may withdraw publication permission for future use through the upload confirmation instructions or by contacting hello@bodyoflines.com. We will stop future use under that consent and assess reasonable removal requests. Artists remain responsible for material exported from HealedProof.

Security

Safeguards include access-controlled storage, encrypted network connections, expiring upload tokens, restricted database rules, account authentication and deletion controls. No online service can guarantee absolute security.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, objection or portability, withdraw consent for future processing, and complain to a competent data-protection authority.

Use Manage Your Data or email hello@bodyoflines.com. Identity and project details may need to be verified.

Children

HealedProof is a professional tattoo-workflow service and is not directed to children. Artists must follow the laws and consent requirements applicable to tattoo services and photographs involving minors.

Changes to this policy

The policy may be updated when HealedProof, its providers or applicable requirements change. The current version and update date will remain published here.

Contact

Kiriena Borochova / Body Of Lines
Julius Jung-Gasse 20, 2440 Gramatneusiedl, Austria
hello@bodyoflines.com