Privacy Policy

Who We Are

Codetik is operated from Portugal. For the purposes of the EU General Data Protection Regulation (GDPR), the operator of Codetik is the data controller. You can reach us at legal@codetik.dev.

What We Collect

• Account data: your email address, username, profile details, and date of birth (never saved, used only for age confirmation).
• Content: the tiks, code, and other material you create or publish.
• Usage and device data: how you interact with the app, device and app version, and similar technical information.
• IP address, used for rate limiting and security.

How We Use Your Data

• To operate, maintain, and improve the Codetik platform.
• To personalise your feed based on the tags and content you engage with.
• To send transactional emails such as account confirmation and password reset.
• To detect, investigate, and prevent abuse, spam, and security incidents.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

Third-Party Services

We rely on a small set of service providers (sub-processors) to run Codetik. They process data only on our behalf:

• Supabase and Google Cloud — database, authentication, storage, compute, and AI image generation.
• OpenRouter — routes AI model requests to third-party model providers, which process your prompts and tik code to generate responses.
• Apple, Google, and GitHub OAuth — optional sign-in.
• Resend — transactional email delivery.
• RevenueCat — subscription and payment processing.

Legal Basis (GDPR)

We process your data to provide the service you request (performance of a contract), for our legitimate interests in keeping Codetik secure and improving it, and, where required, on the basis of your consent. Where we rely on consent, you may withdraw it at any time.

Data Retention

We keep your account data for as long as your account is active. You can delete your account at any time from Settings → Danger → Delete accountin the app, or by emailing us — see Account Removal. Your account closes immediately and we remove your personal data within 30 days, except where we must keep it longer for legal or security reasons. Aggregated, anonymised data may be kept indefinitely.

Note that published tiks are openly licensed and may be forked by others. Copies and forks already made by other users are not deleted when you remove your tik or account. See the Terms of Service for details.

Your Rights

Under the GDPR you may request access to, correction of, export of, or deletion of your personal data, and you may object to or restrict certain processing. Deletion you can do yourself at any time from Settings in the app. For anything else, email legal@codetik.dev. You also have the right to lodge a complaint with your local data protection authority — for example, the CNPD in Portugal or the ICO in the United Kingdom.

International Transfers

Some of our providers process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Commission Standard Contractual Clauses.

International Users

Codetik is operated from the EU but is available to people in other countries, including the United Kingdom, the United States, and Canada. By using Codetik from outside the EU, you understand that your data is processed in the EU and in other countries where our providers operate. We apply the GDPR as our baseline standard for everyone, and local laws may give you additional rights. Contact us at legal@codetik.dev to exercise them.

Children

Codetik is not intended for children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete it. Our Child Safety Standards explain how to report content that sexualises or endangers minors.

Cookies and Local Storage

We use a session cookie or token to keep you signed in, and local storage on your device for preferences and cached content. We do not use advertising cookies or cross-site tracking for ads.

Changes to This Policy

We may update this policy from time to time. For material changes we will post an update here and, where appropriate, notify you by email. The effective date above always reflects the current version.