Privacy Policy

Updated: December 16, 2025

We at Tiiny AI Inc (together with our affiliates, "Tiiny", "Tiiny AI", "we", or "us") respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, "Services").

This Privacy Policy does not apply to the content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.

1. Data Stored Locally

To protect user privacy and data security, the following types of data generated during the use of Tiiny are stored only on the user's local devices (including the Tiiny device and your PC). Such data will not be uploaded, synchronized to any server, or accessed, collected, or analyzed by us:

• Device Password: To ensure device security, a device password must be set during device activation. The password is stored only on your Tiiny device. When connecting to a new computer, identity verification is performed through the Tiiny client by validating this password.
• Authorization Code: An authorization code generated from the encrypted device password is used to verify a computer device, allowing you to avoid repeatedly entering the password on the same computer. This authorization code is stored locally on your computer. Only if you choose to bind an email address for password recovery will we generate a recovery key to reset the device password. This recovery key is associated with your account and stored on our servers.
• User Input Content: To safeguard your data, we do not collect the specific content ("Content") you input while using our services, including prompts and any uploaded materials (such as files or images). All conversation content is stored only on your local device. Please note that, in order to enable online search functionality, summaries generated by the large language model based on your prompts and uploaded content may be used to perform searches via search engines. Such search queries may be recorded by the search engine, but they are not uploaded or synchronized to our servers.
• Memory: To better understand your preferences and usage habits, the application may summarize and extract high-level information from large language model conversations, such as your commonly used language, writing style preferences, or areas of interest. All such information is stored locally on your Tiiny device, is not connected to the internet, and is not uploaded or shared. You may view this memory content at any time after connecting to Tiiny.
• Large Language Models: Any large language models downloaded from the Model Store are stored entirely on your Tiiny device. Model downloads do not consume storage space on your PC.
• Model Cache and Inference Data: To ensure proper model operation, the application may generate temporary caches, acceleration files, and intermediate data during model inference. All such data is stored only on your local devices, is not uploaded to any server, and is not accessed, collected, or analyzed by us.

2. Personal Data We Collect

We collect personal data relating to you ("Personal Data") as described below:

Personal Data You Provide to Us

We collect Personal Data that you provide when you activate an account to use our services or communicate with us, including:

• Account Information: When you activate an account, we collect information associated with your account, including your username and profile image. If you choose to bind an email address for password recovery purposes, we will collect the email address you provide (collectively, "Account Information").
• Communication Information: If you communicate with us via email or through our official pages on social media platforms, we may collect Personal Data such as your name, contact details, and the content of the messages you send ("Communication Information").
• Other Information You Provide: We collect any other information you may choose to provide to us, such as when you participate in our events or surveys, or when you provide information to verify your identity or age (collectively, "Other Information You Provide").

Personal Data We Obtain from Your Use of the Services

When you access, use, or interact with our services, we collect certain information related to your access, usage, or interactions ("Technical Information"), including:

• Log Data: We collect information that your device automatically sends when you use our services. Log data may include your Internet Protocol (IP) address, device information, the date and time of requests, and how you interact with our services.
• Usage Data: We collect information about how you use our services, such as the features you use, the duration of your sessions, and the actions you perform (e.g., clicking specific buttons or changing settings), as well as your time zone, country or region, access dates and times, user agent and version, device type, and network connection information. For the avoidance of doubt, Usage Data does not include the content of your files, prompts, or the specific substance of your conversations, which remain stored locally on your device.
• Device Information: We collect information about the device you use to access our services, such as the device name, operating system, device identifiers, and the Tiiny device you use. The information collected may vary depending on the type of device and its settings.
• Location Information: We may determine your device's approximate location based on information such as IP address in order to optimize your user experience, for example by providing more relevant or localized responses through coarse location data.

Information We Collect from Other Sources

The personal information we collect from you may be combined with personal information we obtain from trusted partners, such as the following sources:

• Public Sources: Public records, social media platforms, and other publicly available information sources.
• Service Providers: Third parties that provide services on our behalf or assist us in operating this service or business.
• Third-Party Login / Linked Services: Services you use to log in to or link your account with this service, such as Google and Apple. This includes instances where you use this service through, or instruct us to use, a third-party account. Such data may include your username on that third-party service and other related information, which we may obtain based on your account settings on that third-party service.
• At Your Direction: If you consent to or direct us to interact with third parties, we may receive only the information necessary to perform the actions you have requested, and such information must be consistent with the permissions you have granted. This includes data provided to us through connectors you have enabled. A "connector" is a pre-built integration module that allows our AI tools or systems to connect to external data sources, applications, or services you designate. Our connectors process data exclusively from user-approved data sources, operate entirely in accordance with your instructions, and do not store any such data. We access only the categories of data you have approved and comply with the applicable policies of the relevant providers. For example, if you connect to Google services, we will comply with the Google API Services User Data Policy, including its restricted use requirements.

3. How We Use Personal Data

We may use Personal Data for the following purposes:

• To provide, analyze, and maintain our services, such as ranking models based on popularity or usage metrics;
• To improve and develop our services and conduct related research, including developing new product features;
• To communicate with you, including sending you information related to our services and activities, such as updates, changes, or improvements to our services;
• To prevent fraud, illegal activities, or misuse of our services, and to protect the security of our systems and services;
• To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, Tiiny, or third parties.

We may also aggregate or de-identify Personal Data so that it can no longer be used to identify you. We may use such aggregated or de-identified information for the purposes described above, such as analyzing how our services are used, improving our services and adding new features, and conducting related research. We will maintain and use such information in de-identified form and will not attempt to re-identify it, except as required by applicable law.

Where required by applicable law, we will only process Personal Data where we have a valid legal basis to do so, such as to perform a contract with you, to comply with legal obligations, to pursue our legitimate interests in operating, securing, and improving the Services, or with your consent where applicable.

4. Disclosure of Personal Data

We may disclose your Personal Data under the following circumstances:

• Vendors and Service Providers: To support our business operations and to provide specific services and features, we may disclose Personal Data to vendors and service providers, including hosting service providers, customer support providers, cloud service providers, content delivery service providers, support and security monitoring service providers, email communication software providers, web analytics service providers, payment and transaction processors, and other information technology service providers. These parties are authorized to access, process, or store Personal Data only as necessary to perform services on our behalf and in accordance with our instructions.
• Corporate Transactions: If we are involved in a strategic transaction, reorganization, bankruptcy, receivership, or transfer of services to another provider (collectively, a "Transaction"), your Personal Data may be disclosed to counterparties and other parties assisting with the Transaction during the due diligence process and may be transferred as part of the Transaction, together with other assets, to a successor or affiliate.
• Government Authorities or Other Third Parties: We may disclose your Personal Data (including information related to your interactions with our services) to government authorities, industry peers, or other third parties as required by applicable law or when we believe in good faith that such disclosure is necessary to: (1) comply with legal obligations; (2) protect or defend our rights or property; (3) address or investigate potential violations of our terms, policies, or applicable law; (4) detect, prevent, or address fraud or other illegal activities; (5) protect the safety, security, and integrity of our products, employees, users, or the public; or (6) mitigate legal liability.
• Affiliates: We may disclose Personal Data to our affiliates, meaning entities that control, are controlled by, or are under common control with Tiiny. Our affiliates may use such Personal Data in accordance with this Privacy Policy.
• Other Users and Third Parties with Whom You Interact or Share Information: Certain features may allow you to interact with or share information with other users or third parties. For example, you may share access to Tiiny with other users via a local area network. Any information you share with third parties is subject to their own terms and privacy policies. You should ensure that you understand such terms and policies before sharing information with any third party.

5. Retention

We retain your Personal Data (such as your username, profile image, and email address) only for as long as necessary to provide our services to you, or for other legitimate business purposes, such as resolving disputes, ensuring security, or complying with legal obligations. Once these purposes are satisfied, we will delete or anonymize your Personal Data.

The length of time for which we retain Personal Data depends on a number of factors, including:

• The purposes for which we process the data (for example, whether the data is required to continue providing services to you);
• The amount, nature, and sensitivity of information;
• The potential risk of harm resulting from unauthorized use or disclosure of the information; and
• Any applicable legal or regulatory requirements with which we must comply.

6. Your Rights

Depending on your place of residence, you may have certain statutory rights with respect to your Personal Data. These rights may include:

• The right to access your Personal Data and information about how it is processed;
• The right to request deletion of your Personal Data from our records;
• The right to update or correct your Personal Data;
• The right to transfer your Personal Data to a third party (data portability);
• The right to restrict how we process your Personal Data;
• The right to object to our processing of your Personal Data; and
• The right to lodge a complaint with the data protection authority in your jurisdiction.

You may exercise some of these rights through your Tiiny account. If you are unable to exercise a particular right through your account, please submit a request by contacting us at support@tiiny.ai.

Accuracy Disclaimer

Large language model-based services generate responses by first processing user inputs and then predicting the most likely subsequent tokens. The models we provide are open-source models, and their outputs depend on the capabilities and limitations of the models themselves. We do not guarantee the accuracy, completeness, or factual correctness of model outputs. In certain circumstances, the most likely predicted output may not represent an accurate statement of fact. Accordingly, you should not rely on model-generated content as a source of factual truth.

International Data Transfers

To fulfill the purposes described in this Privacy Policy, Tiiny may process your Personal Data on servers located in multiple jurisdictions, including facilities and servers in the United States. While data protection laws vary by country, we will protect your Personal Data in accordance with the safeguards described in this Privacy Policy, regardless of where it is processed, and will transfer Personal Data only pursuant to lawful and valid data transfer mechanisms.

7. Children

Our services are not directed to, and are not intended for use by, children under the age of 13. We do not knowingly collect Personal Data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Data to Tiiny through our services, please contact us at support@tiiny.ai. We will investigate all such notifications and, where appropriate, promptly delete the relevant Personal Data from our systems.

Users under the age of 18 must obtain permission from their parent or legal guardian before using our services.

8. Security

We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or via electronic communications is completely secure or error-free. Accordingly, you should exercise caution when deciding what information to provide for our services.

In addition, we are not responsible for the circumvention of any privacy settings or security measures contained within our services or on third-party websites.

9. Additional U.S. State Disclosures

Some U.S. state privacy laws require specific disclosures. The following information provides additional context about the categories of Personal Data we collect and how we use and disclose that information. You can read more about the Personal Data we collect and where we collect it from in "Personal Data We Collect" above, how we use Personal Data in "How We Use Personal Data" above, and how we retain Personal Data in "Security" and "Retention" above.

Depending on your place of residence, and subject to applicable exceptions, you may have the following privacy-related rights with respect to your Personal Data:

• The right to know information about how we process your Personal Data, including the right to access your Personal Data (generally provided in a portable format);
• The right to request deletion of your Personal Data;
• The right to correct inaccuracies in your Personal Data; and
• The right to be free from discrimination for exercising any of your privacy-related rights.

We do not "sell" Personal Data or "share" Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for "targeted advertising" purposes (as those terms are defined under state privacy laws). We also do not process sensitive Personal Data for the purpose of inferring characteristics about consumers.

Exercising Your Rights

You can exercise privacy rights described in this section by submitting a request to support@tiiny.ai.

Verification

In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.

Authorized Agents

You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to support@tiiny.ai.

Appeals

Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to support@tiiny.ai.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.

11. How to Contact Us

If you have any questions or concerns that are not addressed in this Privacy Policy, please contact us at support@tiiny.ai.

Tiiny AI Inc | support@tiiny.ai