Security Policy

Last Updated: April 14, 2026

At Tinkki, operated by Plutus X, the safety and security of your data is our highest priority. We understand the trust you place in us when you upload photos of your children, and we have implemented robust measures to protect that data.

Data Encryption

• In Transit: All data transferred between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security).
• At Rest: Uploaded photos and generated images are stored in encrypted formats on our servers and those of our sub-processors.

Data Deletion

• Strict Retention Policy: We are committed to minimizing the data we store. All original photos you upload and the final generated images are permanently deleted from our active systems and storage within 30 days of your order's creation.

Access Control

• Principle of Least Privilege: Access to user data is strictly limited to authorized Plutus X personnel who require it for specific operational purposes, such as customer support.
• Secure Infrastructure: We partner with major, industry-leading cloud providers who maintain a high standard of physical and network security. You can see a full list on our Sub-processors page.

Payment Security

• PCI Compliance: We do not handle or store your credit card information directly. All payments are processed by Paddle.com, a certified PCI Level 1 Service Provider, which is the most stringent level of certification available in the payments industry.

Content Safety and Filtering

• Automated Filtering: We implement advanced content filtering systems to automatically detect and block inappropriate dream job requests including explicit content, violence, illegal activities, celebrity names, and other content unsuitable for children.
• Real-time Protection: Our filtering system operates in real-time during the order process to prevent inappropriate content from being processed or stored.
• Monitoring and Logging: All blocked requests are logged for security monitoring and system improvement. This data includes only the blocked content, IP address, and timestamp - no personal information is associated with these logs.
• Compliance: Our content filtering helps ensure compliance with child safety regulations and maintains the educational, inspirational nature of our service.

Our Commitment

We are continuously monitoring and updating our security practices to protect your data. If you have any questions or believe you have found a security vulnerability, please contact us immediately at legal@tinkki.com.