Privacy Policy
Tiger Koi LLC, a New York limited liability company in the United States, runs tigerkoi.com and its apps (Meet, Music and Memory). This policy explains what we store when you use them, why, and what you can do about it. We keep it short because we keep the data short: we store what the apps need to work and nothing for advertising.
What we store
Your account. Your name, email address, a hashed version of your password (we never see or store the password itself), which apps you have asked for or been given, and the date you joined. We also keep sign-in sessions (a random token, when it was created and last used, and the browser it came from) so you stay signed in across Tiger Koi apps.
Meet. Meetings you create or join, who took part, text chat sent during a meeting, and recordings. A recording is made only when a participant presses Record; everyone in the meeting sees a recording indicator while it runs. Recordings are stored on our server and can be seen by the people who were in that meeting and by an administrator.
Music. Sheet music you upload, or ask Music to fetch from a link, is processed on our server to recognise the notes. The file itself is deleted as soon as processing ends. The recognised result is kept for one day so you can collect it. A copy of the recognised notes, filed under a fingerprint of the file rather than the file, is kept for up to 30 days so the same file does not have to be processed twice. Your library, edits and settings live in your browser's storage on your device; we do not keep a copy of your library.
Memory. The texts, places, memories and notes you enter are stored on our server under your account so you can open them from any device. Nobody else can see them except an administrator doing maintenance.
Logs. Our servers keep short technical logs (time, page requested, result, and your account ID or email if signed in) to keep the service working and to spot abuse. Logs never contain passwords, session tokens or message content. They are deleted after 30 days.
What we do not do
- No advertising, no ad networks.
- No analytics or tracking scripts from third parties. We do not use cookies for anything except keeping you signed in.
- We never sell, rent or share your data for marketing.
Services we rely on
A few companies help us run Tiger Koi. Each receives only what its job needs.
| Service | Used for | What it sees |
|---|---|---|
| Cloudflare | Network delivery and protection against abuse | Your IP address and the requests your browser makes to tigerkoi.com |
| Resend | Sending our emails (confirmation, approvals, password resets) | Your email address and the contents of those emails |
| LiveKit | Real-time audio and video in Meet | The media streams and connection details during a meeting; it does not keep recordings |
Our own servers are located in the United States.
How long we keep things
- Accounts that never confirm their email are deleted after 48 hours.
- Sign-in sessions end after 30 days, or 7 days without use.
- Meet recordings and chat stay until a participant who may delete them, or an administrator, deletes them, or until the account is deleted.
- Music uploads are deleted when processing ends; results after one day; recognised notes after 30 days.
- Memory data stays until you delete it or your account is deleted.
- Logs are deleted after 30 days.
- Backups of our server may hold deleted data for up to 30 days.
Your choices
You can change your name and password, and sign out of every device, in Settings. To see a copy of your data, correct it, or delete your account and everything stored under it, email [email protected] from your account address. We answer within 30 days. Deleting your account removes your Meet recordings and chat, your Memory data and your account details; recordings made by other participants of a shared meeting remain theirs.
Children
Tiger Koi is not for children under 13, and we do not knowingly collect data from them. If you are under 18, a parent or guardian must agree to our Terms of Use for you. If you believe a child under 13 has an account, contact us and we will delete it.
Security
Connections are encrypted (HTTPS). Passwords are stored as salted hashes. Session tokens are stored hashed. Access to the server is limited to the people who run it. No system is perfectly secure; if we learn of a breach affecting your data we will tell you by email.
Changes
If this policy changes in a way that matters, we will email account holders before it takes effect. The current version is always at tigerkoi.com/privacy.
Contact
Tiger Koi LLC · [email protected]