The Tiles app for iPhone is your Tiles account on your phone. In it you ask Tiles to make or change an app, open your apps, add and edit rows in their databases, add keys for outside services, share apps, delete them, leave notes and bring code from GitHub. The app talks only to Tiles (app.ai-tiles.com). Your apps open in Safari, outside the Tiles app. Your Tiles account itself is covered by the Tiles privacy policy.
Signing in
You sign in inside the app, in one of four ways:
- A code Tiles emails you. Your address goes to Tiles, which emails you a 6-digit code.
- Your email and a password. The password goes to Tiles, which keeps only a scrambled form of it (a hash) it can check a password against but can’t turn back into the password. You choose a password only after typing a code Tiles emailed you, so nobody can set one for an address they don’t read.
- Sign in with Apple. Apple asks you on its own screen, then gives Tiles your name (the first time) and an email address, which can be one of Apple’s private relay addresses that forward to you.
- Google. Google’s own sign-in opens in a secure browser sheet. Google gives Tiles your name and email address.
What you type goes to Tiles (or to Apple or Google, on their screens) and nowhere else.
Tiles then gives the app its own sign-in keys. They stay in the iOS Keychain and go only to Tiles. Your Tiles account lists this sign-in, and you can remove it there.
On your phone
- The app’s sign-in keys, in the iOS Keychain.
- A copy of what the app last showed you (your apps, chats, names and whether each app is running) and your name and email, so it shows up at once.
- The apps and people you hid or blocked, with their names, so they stay hidden until you show them again.
Signing out deletes the first two. What you hid stays, so a person you blocked stays blocked when you sign back in. Deleting your account deletes it too. Apps you open run in Safari, so what they save stays in Safari; the Tiles app can’t see it.
What you do in the app
Everything below is saved in Tiles, with your account, and nowhere else unless this page says so.
- Rows. Rows you add or edit in Data are saved in that app’s database, where the app reads them.
- Keys. A key you add in More, then Keys, goes straight to Tiles, which keeps it sealed. It never goes into the chat, to Tiles’ AI builder or to Anthropic. Tiles uses it only to make your apps’ calls to that service.
- Sharing. When you share an app, the email address you type goes to Tiles, which emails that person an invitation. They can open the app only once they accept it. If you turn on the app’s link instead, anyone you send it to can join once they sign in to Tiles; you choose whether the link lets them use your database and keys, and turning the link off stops new people joining.
- Your name. The name you give goes to Tiles, with your account. When you open an app, Tiles tells that app your name and email, so it knows who you are without asking. The app’s owner can see them.
- Deleting an app. It stops running and leaves your list and the lists of everyone you shared it with.
- Your tile. If you make a tile, a computer in the cloud for your coding agents, in a browser (not in this app), Tiles starts it on Google Cloud (Compute Engine) and keeps its name, size and whether it’s on. What you and your coding agents put on it stays on it. Switching it off keeps it; deleting it, or your account, deletes it.
- Code from GitHub. You connect GitHub on GitHub’s own page and pick the repositories Tiles may read. Tiles reads only those, and copies the code you choose to make your app.
- Notes. A note is saved with the app: the text, your name and email, when you wrote it, and whether it’s done and who marked it. People who can open the app see its notes, and so do AI tools working on it. That’s what notes are for.
The chat
When you write in Chat, your words go to Tiles, and Tiles sends them to Claude, the AI from Anthropic that makes your apps, with what it needs to build: the app’s code, the build’s output, and what the app answers when Tiles tries it, which can include the app’s own data. The app asks you once, before your first message.
You can pick apps, databases and keys to go with a message. When you pick a database, rows from it can go to Anthropic with your message. When you ask about your data, Tiles reads rows from your apps’ databases to answer or draw a chart, and those rows go to Anthropic too, as do notes people left on the app it works on. When you pick a key, the key itself never does.
Before your app goes online, Tiles tries it on E2B’s computers, with test data and no keys; that copy is deleted once Tiles stops using it. Your chats are kept with your Tiles account, and deleting your account deletes them.
If you press the microphone to say a message instead of typing it, the recording goes to Tiles, and Tiles sends it to OpenAI, which turns it into text. OpenAI gets the recording and nothing else. Tiles keeps neither the recording nor the words: the text appears in your message box, and goes into the chat only if you send it. The app asks once, before the first recording, and iOS asks for the microphone the first time.
Notifications
The app asks once, after you sign in, whether you want notifications, and iOS asks only if you say yes. If you allow them, the app gives Tiles a code from Apple that lets Tiles reach this phone. Your apps, and apps shared with you, can then send you a short message, such as “A new expense was added”; Tiles passes it to Apple, which shows it on your phone. Only an app you own or accepted can reach you, and you can mute any app (More, then Notifications) or turn notifications off in iOS Settings. Signing out or deleting your account removes the code from Tiles. Tiles never sends advertising.
Reporting and blocking
Report, on an app or a note someone else shared or on a reply in Chat, sends Tiles what you’re reporting (the app’s name, who shared it, the note or the reply), anything you add, and your account. Tiles keeps the report and reads every one within 24 hours. Hide and Block only change what this phone shows; the person you blocked isn’t told.
Camera, microphone, photos and location
The Tiles app itself uses only the microphone, and only while you record a message, as above. It doesn’t use the camera, your photos, your location or your contacts. An app you open runs in Safari, and if it asks for any of them, iOS asks you first. What you share goes to that app, which keeps it on Tiles like the rest of its data. The Tiles app keeps none of it.
Who gets what
Tiles shares data from this app only with these companies, and only for what is named. The services your own apps call with your keys get what those apps send them, as you set them up.
- Anthropic: what you write in Chat, what Tiles reads while it builds, notes people leave on your apps, and rows from your apps’ databases when you pick one or ask about your data, as above. Never a key.
- OpenAI: a recording, when you press the microphone. Nothing else.
- E2B: a copy of your app’s code and test data, while Tiles tries it. Never a key.
- Apple: a notification you allowed (the app’s name and its message) and the code for this phone, so Apple can deliver it; and, when you choose Sign in with Apple, the sign-in itself.
- Google: the sign-in itself, when you choose Continue with Google.
- GitHub: the connection you make there, so Tiles can read the repositories you picked.
- Google Cloud (United States): where Tiles runs and keeps everything on this page, and where your tile runs.
- Resend: delivering emails you asked for, such as a sign-in code or an invitation: the address, the subject and the text.
- Vercel: hosting these pages on ai-tiles.com.
Each of these companies gives your data the same or equal protection as this policy. Nothing about you is sold or rented.
What the app never does
No analytics, no advertising, no tracking across apps or websites, no crash reports sent anywhere, and no code from other companies that collects data.
These pages
The Tiles for iPhone pages on ai-tiles.com set no cookies. Tiles counts page views, which links and buttons are pressed and where else on the page you press, how far down you go, how long the page was in use, the size of your screen and how long the page took to load, with its own service: a random number that lasts for your browser tab, never linked to your account, kept up to 90 days and seen only by Tiles staff. It skips you if your browser sends Do Not Track or Global Privacy Control. Vercel, which hosts the site, keeps the usual request logs.
Removing your data
- Sign out (More in the app) ends the app’s sign-in and deletes its keys and copies from your phone.
- Delete account (More, then Account and privacy) deletes your Tiles account for good: your apps and their data, your keys, your tile, your chats, your password, and your name and email. Every sign-in ends, on every device, and if you used Sign in with Apple, Tiles tells Apple to end its link to your Apple ID. Notes you wrote on other people’s apps stay with those apps, under “Deleted account”. Tiles keeps the record of what was done in its audit log, which it keeps for security.
- To delete a note you wrote, swipe it left or press and hold it.
- To have anything else removed, email lucas@ai-tiles.com.
Children
The Tiles app isn’t directed at children.
Questions
If this page changes, so does the date above. For anything else, email lucas@ai-tiles.com.