Privacy Policy

1. Who we are

This Privacy Policy explains how [LEGAL ENTITY NAME] ("Inkly", "we", "us" or "our") handles personal information when you use the Inkly mobile app and this website (together, the "Service"). We are the controller of your personal information. You can reach us using the details in Section 13.

This policy should be read with our Terms of Service.

2. Information we collect

Account information

You sign in with Apple or Google through our authentication provider, Clerk. From your sign-in provider we receive and store:

• your name;
• your email address (if you sign in with Apple and choose "Hide My Email", this is an Apple relay address);
• your profile picture link; and
• a unique account identifier.

We refresh these details from your sign-in provider each time you create a preview. We do not receive or store your Apple or Google password.

Photos, designs and previews

When you create a preview, we collect:

• the photo of your body that you take or choose (your "Body Photo");
• the tattoo design image you take or choose (your "Design");
• the body placement you select, such as "Left Forearm"; and
• the preview image we generate (your "Preview").

Before uploading, the app re-encodes your images on your device and resizes them to at most 1536 pixels on the longest side. Re-encoding removes embedded photo metadata, such as the GPS location and camera details, so that information is not uploaded. Body Photos can show your skin, face or other features, and may reveal information such as scars, birthmarks or skin conditions. We only use them to create your Previews. We do not use them to identify you, and we do not analyze them for any other purpose.

Usage information

For each preview we store its status (pending, processing, done or failed), any error message, the time it was created, how long it took, and the image size and AI model settings used. We also keep a count of the previews you have created. We use this to show your History, enforce the daily preview limit and keep the Service working.

Diagnostics and crash data

The app uses Sentry to detect and fix crashes, errors and performance problems. Sentry collects:

• error and crash reports, including technical logs and the app screens you visited before the problem;
• performance data, such as how long screens take to load;
• device and app information, such as device model, operating system version and app version;
• your IP address; and
• session replays: video-like recordings of the app screens during your session. Replays are not masked, so they can include the text on screen (such as your name and email) and images on screen, including your Body Photos, Designs and Previews.

Our backend also keeps short technical logs of errors, such as when a preview fails to generate.

Information that stays on your device

• Sign-in session: Clerk stores your session token in your device's secure storage (the iOS Keychain or Android Keystore) so you stay signed in.
• Saved and shared previews: when you save or share a Preview, the app downloads a copy to its temporary cache on your device. Saved Previews are added to your photo library, and shared Previews go wherever you choose to send them. We do not control those copies.

Device permissions

The app asks for permissions only when you use the feature that needs them:

• Camera: to take a Body Photo or Design.
• Photos: to choose a Body Photo or Design. Only the photo you pick is used.
• Add to Photos: to save a Preview to your photo library. This is add-only access.

You can change these permissions at any time in your device settings.

3. What we don't collect

• We do not collect location from your device or from your photos' metadata. Sentry may estimate a general location, such as your country, from your IP address.
• We do not access your contacts or your photo library beyond the photos you pick.
• We do not use advertising identifiers, advertising SDKs or third-party analytics tools.
• We do not collect payment information. The Service is free.

4. How we use your information

If you are in the European Economic Area, the United Kingdom or another place with similar laws, we rely on the legal bases shown below.

We do not use your information for advertising, we do not sell it, and we do not use your photos to train AI models. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. The AI only generates the preview image you ask for.

5. Who we share it with

We share personal information only with the service providers that help us run Inkly. They process it on our behalf.

According to OpenAI's API data policy, OpenAI does not use data sent through its API to train its models by default, and may keep it for up to 30 days to monitor for abuse before deleting it.

We may also disclose information if the law requires it, to protect the rights, safety or property of our users, us or others, or as part of a merger, acquisition or sale of assets. In a sale, we would notify you before your information becomes subject to a different privacy policy.

6. How long we keep it

Deleting your account does not delete Sentry diagnostics already collected. They are removed when the Sentry retention period ends, or sooner if you ask us (see Section 7).

7. Your choices and rights

Controls in the app

• See your data: your History shows every preview we store, including its Body Photo and Design.
• Delete a preview: delete any Preview from its detail screen. This deletes the Preview and its images, as described in Section 6.
• Delete your account: go to Profile, then Delete Account. This permanently deletes your account information, all your previews, photos and designs, and your Clerk sign-in account. It cannot be undone.
• Permissions: turn camera and photo access on or off in your device settings.

There is currently no in-app setting to turn off crash reporting or session replay.

Your legal rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate information;
• delete your information;
• object to, or ask us to restrict, how we use it;
• receive your information in a portable format; and
• complain to your local data protection authority.

To make a request that the app's controls don't cover, such as getting a copy of your data or deleting your Sentry diagnostics, email us at [CONTACT EMAIL]. We may need to confirm your identity first, and we will respond within the time required by law. We will not treat you differently for using your rights.

Your name, email and profile picture come from your Apple or Google account. To change them, update them there. We pick up the change the next time you create a preview.

8. Security

We protect your information with these measures:

• all data travels between the app, our backend and our service providers over encrypted HTTPS connections;
• your sign-in session is kept in your device's secure storage;
• our backend only returns your previews and photos to your own signed-in account, and refuses to use an image that already belongs to another account; and
• photos and previews are delivered through long, hard-to-guess links that only the app receives.

No method of storing or sending data is completely secure, so we cannot guarantee absolute security.

9. International transfers

Our service providers process information in the countries listed in Section 5, including the United States. These countries may have different data protection laws from yours. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

10. Children

Inkly is not intended for anyone under [18], and we do not knowingly collect information from them. Our Terms also prohibit uploading photos of anyone under 18. If you believe a child has used Inkly or that a child's photo has been uploaded, contact us at [CONTACT EMAIL] and we will delete the related information.

11. This website

This website does not use cookies, analytics or tracking. It loads fonts from Google Fonts, so your browser sends your IP address to Google when you visit; see Google's Privacy Policy. Our hosting provider, [WEBSITE HOSTING PROVIDER], may keep standard server logs such as IP addresses and request times.

12. Changes to this policy

We will update this policy when our practices change, for example if we add new features or service providers. We will post the new version here and update the effective date above. If a change is material, we will give you reasonable notice [in the app or by email] before it takes effect.

13. Contact

For questions about this policy or your information, contact us at:

[LEGAL ENTITY NAME]
[POSTAL ADDRESS]
Email: [CONTACT EMAIL]