Tinkershelf privacy policy

Last updated October 22, 2026

This policy covers the Tinkershelf apps for Android and iOS, published by Namana Labs, LLC ("Namana Labs," "we"). If you have a question about it, email connor@namana.io.

The short version

• Tinkershelf has no user accounts.
• We don't collect analytics, crash reports, or usage data, and there are no ads or trackers.
• Namana Labs does not run a server that receives your data. Your library lives on your device.
• The apps you add are run by other people. When you open or connect to one, you talk to that app's server directly, under that app's own policies.

What stays on your device

Tinkershelf stores the following only on your phone:

• Your library: the addresses, names, and icons of the apps you add, which ones you pinned, and which you opened recently.
• Catalog subscriptions and their cached app lists.
• Which apps you have approved for connection.
• Your device name, if you set one.
• Your device's private key. It is created on the device and held by the Android Keystore or the iOS Secure Enclave. It never leaves your phone, and Tinkershelf cannot export it.

On Android, Tinkershelf opts out of cloud backup, so this data is not copied to your Google account.

What leaves your device, and where it goes

Tinkershelf only sends data to servers you choose, in these cases:

• Adding and opening apps. Tinkershelf loads the app, its manifest, and its icons from the address you added. That server sees an ordinary web request, including your IP address.
• Connecting to an app. When you approve a connection, the app's server receives your device's public credential: a public key, an identifier derived from that key, and your device name if you set one. It uses this to recognize your device when you sign in later.
• Desktop sign-in. When you scan a desktop sign-in code and approve it, your device sends a signed approval to that app's server.
• Catalogs. Tinkershelf downloads each catalog you subscribe to from the address you gave it, when you refresh and when you open the app after more than an hour.
• Sharing and export. If you share your public credential or export your library, the file goes wherever you send it. Library exports contain app addresses, names, icons, and pins. They never contain your private key or your connection approvals.

Namana Labs does not operate these servers and does not receive copies of these requests. Each app you add is responsible for what it does with the data it receives.

Camera

Tinkershelf asks for camera access only to scan QR codes. The camera feed is processed on your device. Tinkershelf does not save or upload images.

Deleting your data

Remove an app from your library by long-pressing it. This also clears its connection approval. Uninstalling Tinkershelf deletes everything it stored on your device, including the private key. Because Namana Labs holds none of your data, there is nothing for us to delete on our side. To remove the record an app's server keeps of your device, contact whoever runs that app.

Children

Tinkershelf is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes, we will update it here and change the date at the top. If Tinkershelf ever starts collecting data, this page will say so before the update that does it ships.

Contact

Namana Labs, LLC, Austin, Texas
connor@namana.io