Privacy Policy
Effective 4 November 2026
The short version
- No ads, no tracking, no analytics. We don't sell or share your information for advertising, and Tiksky doesn't track you across other apps or websites.
- Apple Intelligence runs on your device. Ranking your feed, explaining posts, caption ideas and captions from speech all happen on your iPhone, iPad or Mac.
- Posts and Tikskys are public. Tiksky is built on the AT Protocol, an open network. What you post can be seen, copied and stored by anyone on that network, including Bluesky.
- You can delete your account in the app at any time: Settings › Account › Delete Account.
Who we are
Tiksky is an app by Demie AC (Demetria Althea Cohn), who also runs the tiksky.social server and this website. In this policy, “Tiksky”, “we” and “us” mean Demie AC. Questions and requests: d@tiksky.xyz.
This policy covers the Tiksky app for iPhone, iPad and Mac, the tiksky.social server (your account if you join tiksky.social), the Tiksky Push and moderation services, and tiksky.xyz.
How the open network works
Tiksky is a client for the AT Protocol, the open network that Bluesky also uses. Every account lives on a server called a PDS. If you join tiksky.social, your account lives on our server. If you sign in with an existing Bluesky account, it stays on your current provider's server, and that provider's privacy policy covers it; Tiksky just shows and posts to it.
Public network data, such as your handle, display name, profile photo, bio, posts, Tikskys, likes, reposts, follows and blocks, is broadcast to the whole network by design. Other services (for example Bluesky's relay and app servers, search engines, archivers and other apps) can read it, store it and show it. When you delete something, we delete it from tiksky.social and the network receives a deletion notice, but we can't force every independent service to erase copies.
What we collect, and why
| Information | Why | Where it's kept |
|---|---|---|
| Account details (tiksky.social accounts): email address, handle, password (stored hashed), date you joined, and your account's identifier (DID) | To run your account, sign you in, verify your email, reset your password and confirm account deletion | tiksky.social, on Railway servers in the United States |
| What you post: Tikskys (video, cover frame, captions, subtitles, alt text), Commons posts, photos, comments, profile, likes, follows and other public records | To publish them on the network, which is what Tiksky is for | tiksky.social; media in object storage (Railway Storage Buckets) in the United States; and, being public, on the wider network |
| Video processing | Videos you post are uploaded to and transcoded by Bluesky's video service, as in Bluesky's own app, so they play smoothly everywhere | Bluesky Social PBC |
| Direct messages | Messages use Bluesky's chat service | Bluesky Social PBC (not tiksky.social) |
| Push notification registration: an Apple device token, encrypted on your device so only Tiksky Push can read it, and the kinds of notifications you chose | To send the notifications you turned on (likes, replies, mentions, quotes, reposts, follows) | A record in your account and the Tiksky Push service on Railway; removed when you turn notifications off |
| Reports you file | To review content and accounts that break the rules | Bluesky's moderation service and, for tiksky.social content, our moderation records |
| Server logs: IP address, request times and errors | To keep the service secure and working | Railway, kept for a limited time |
| Support emails you send us | To answer you | Our email |
Moderation with DeepSeek
To protect people from scams, phishing and malware, new posts made on tiksky.social are checked automatically. The text of each new post (its caption, alt text and subtitles) is sent to DeepSeek's API, an AI service run by a company based in China, only to classify it against our rules. We don't send your email, your password, your video or photo files, or anything from your device. Posts that clearly break the rules can be removed, and others are kept in a review list so a person can check them. Only posts from tiksky.social accounts are checked this way.
On your device, not ours
These features run entirely on your device, using Apple's on-device models, and nothing from them is sent to us: the For You ranking, Your Algorithm dials and topic feeds, Ask Apple Intelligence, the tone check, caption and hashtag ideas, and captions made from speech. Apple Intelligence features follow Apple's own privacy commitments and availability.
Some app preferences (for example your algorithm settings) can sync between your devices through your iCloud account; Apple handles that sync, and we can't see it.
Permissions
- Camera and microphone: only in Tiksky Studio while you record, and when you take a profile photo.
- Photos: only the videos or photos you choose to add.
- Speech recognition: only when you ask for captions from speech, and it runs on your device.
- Notifications: only if you turn them on.
What we don't do
- We don't show ads or let advertisers target you.
- We don't sell or rent your personal information, or share it for cross-context behavioral advertising.
- We don't use third-party analytics or tracking SDKs in the app, and this website uses no cookies and no trackers.
- We don't use your posts to train AI models.
Who we share information with
Only the services needed to run Tiksky, and only for that purpose:
- Railway (United States) hosts tiksky.social, Tiksky Push, our moderation service, our outgoing email server and this website.
- Bluesky Social PBC runs the network services Tiksky uses: the relay and app servers that index public data, the video service, the chat service and the moderation service that receives reports.
- DeepSeek receives the text of new tiksky.social posts for moderation, as described above.
- Apple delivers push notifications (Apple Push Notification service), distributes the app and provides iCloud sync.
We may also disclose information if the law requires it, to protect people's safety, or to defend against fraud or abuse. If Tiksky is ever transferred to a new owner, this policy would continue to apply to your information, and we'd tell you first.
tiksky.social sends a few account emails: verification codes, password resets and account-deletion codes. They come from no-reply@tiksky.social through our own mail server. Because we run our own server, some providers put these emails in spam, so check your spam or junk folder if one doesn't arrive. We don't send marketing email.
How long we keep information
- Your account and posts stay on tiksky.social until you delete them or your account.
- When you delete your account, we delete your account, posts and media from tiksky.social. Copies held by other services on the network are outside our control (see above).
- Push registrations are deleted when you turn notifications off, sign out or delete your account.
- Moderation review records and server logs are kept only as long as needed for safety and security.
Your choices and rights
- Edit or delete posts, Tikskys and your profile in the app.
- Export your data in Settings, or move your account to another AT Protocol server.
- Delete your account in Settings › Account › Delete Account.
- Turn off notifications, camera, microphone, photos and speech access at any time in iOS or macOS Settings.
Depending on where you live (for example in the EU, UK or California), you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict some processing, and to complain to your data protection authority. Email d@tiksky.xyz and we'll respond within 30 days. We won't treat you differently for using these rights. Where the GDPR applies, we rely on our contract with you (to run your account), our legitimate interests (security and moderation) and your consent (notifications and device permissions).
International transfers
Our servers are in the United States, and DeepSeek may process post text in China. By using tiksky.social you understand your information is handled in those countries, which may have different data-protection laws from yours.
Security
We use encryption in transit (HTTPS) everywhere, store passwords hashed, encrypt push tokens so only Tiksky Push can read them, and limit access to our servers. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Children
Tiksky is for adults. You must be at least 18 to use Tiksky or join tiksky.social, and we don't knowingly collect information from children. If you believe a child has an account, email d@tiksky.xyz and we'll remove it.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app before they take effect.
Contact
Demie AC (Demetria Althea Cohn) · d@tiksky.xyz