Privacy Policy

Effective date: 29 July 2026

Your privacy matters to us. This policy explains what data we collect, why we collect it, and what happens to it when you use InkCraft.

1. What We Collect

Information you provide

Account data: email address and display name when you create an account.
Purchases: subscription and credit purchase records (processed via Apple App Store / Google Play — we do not store full payment card details).

Information collected automatically

Usage analytics: anonymous events (pages visited, features used, session length) collected via Plausible Analytics, a privacy-focused tool that does not use cookies and does not track individuals across sites.
Device metadata: app version, OS version, device model, and locale stored in your user profile to help us improve compatibility.
Crash reports: anonymous crash logs to diagnose and fix bugs.

Information you upload

Photos for the try-on: when you upload a photo to preview a tattoo placement, the image is processed transiently — it is sent to our server solely to render the placement preview and is not persisted server-side after the session ends. We do not store, share, or use your photos for any other purpose.
EXIF metadata: EXIF location data is stripped from your photo client-side before upload so your location is never transmitted to our servers.

2. How We Use Your Data

Data	Purpose
Account data	Authenticate you and sync your saved designs across devices
Usage analytics	Understand which features are used so we can improve them
Device metadata	Diagnose compatibility issues, personalise language and region defaults
Try-on photos	Render the tattoo placement preview — nothing else
Purchase records	Activate subscriptions, credit packs, and manage billing

We do not sell your data. We do not use your photos or designs to train AI models.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data on the following bases:

Contract: to provide the Service you signed up for.
Legitimate interests: to operate and improve the Service, detect abuse, maintain security, and measure aggregate usage with our cookieless, privacy-preserving analytics (Plausible), which does not track or identify individuals.

4. Photo Processing in Detail

When you use the web or app try-on:

Your photo is loaded and displayed locally in your browser or device.
EXIF metadata (including GPS location) is stripped before any data leaves your device.
The photo is transmitted over an encrypted HTTPS connection to our processing server.
Our server renders the tattoo placement and returns the preview image.
The uploaded photo is deleted from server memory at the end of the request. It is not written to persistent storage, logged, or retained in any form.

This is the same posture described in our Terms of Service §5.

5. Data Sharing

We share data with:

Firebase / Google Cloud — authentication and Firestore database for account data.
Cloudflare — CDN and serverless compute for the try-on pipeline.
Apple / Google — purchase validation via their respective platforms.
Plausible Analytics — anonymous aggregated analytics (no personal data shared).

We do not share your data with Pinterest. Our Pinterest integration involves our own company account only — see §6.

All sub-processors are bound by contracts prohibiting them from using your data for their own purposes.

6. Pinterest Integration

InkCraft uses the Pinterest API to publish our own marketing content — tattoo preview imagery and design inspiration — to our own company Pinterest account, @InkCraftApp.

This integration does not involve your data in any way. InkCraft users do not connect Pinterest accounts to InkCraft. We do not request, receive, access, or store any Pinterest account, profile, board, Pin, or other Pinterest data belonging to you or to any other Pinterest user. Nothing about you is sent to Pinterest.

InkCraft is not endorsed by, sponsored by, certified by, or affiliated with Pinterest. "Pinterest" and the Pinterest logo are trademarks of Pinterest, Inc. Our use of Pinterest is governed by Pinterest's Terms of Service and Privacy Policy.

What the integration does

Authenticating as our own Pinterest account, we call the Pinterest API to list our own boards and to create Pins on them. That is the entire scope of the integration.

What we store

We do not store information accessed through the Pinterest API. We call the API each time we need it, in line with Pinterest's Developer Guidelines. The only value we retain is the OAuth access and refresh token for our own account, kept securely and used solely to publish to that account.

We do not copy, archive, cache, or index Pins, boards, images, profiles, or any other content or data obtained from Pinterest.

Disconnecting

When we disconnect our account — from within our own tooling, or by revoking access in Pinterest's settings — the access and refresh tokens are deleted immediately. Since no other Pinterest-derived data is retained, nothing else remains to delete.

What we never do

We do not sell, rent, resell, license, sublicense, redistribute, or otherwise transfer Pinterest content or Pinterest-derived data to any third party. We do not use it for advertising or ad targeting, we do not combine it with data from other sources to build profiles, and we do not use it to train AI models.

Questions about this integration: hello@inkcraftapp.com.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and associated data.
Export your data in a portable format.
Object to processing based on legitimate interests.

To exercise any of these rights, email hello@inkcraftapp.com. We will respond within 30 days.

8. Data Retention

Account data: retained while your account is active. Deleted within 30 days of account deletion.
Usage analytics: aggregated and anonymised; individual events are not retained beyond 24 months.
Try-on photos: not retained (see §4).
Pinterest data: none retained. We store no information accessed through the Pinterest API; only our own account's OAuth token, deleted immediately on disconnect (see §6).
Purchase records: retained for 7 years to meet accounting obligations.

9. Security

We use TLS for all data in transit. Firebase security rules restrict access to your data to your own account. Our server infrastructure is access-controlled and audited periodically.

10. Children

The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy. If changes are material, we will notify you via in-app notice or email at least 14 days before they take effect.

12. Contact

Data protection questions: hello@inkcraftapp.com