Privacy Policy
Last updated: October 1, 2026
What Inkly collects
- Account data: your email address and the name you give us.
- Your content: notes you write, photos of pages you scan, AI chat messages, and tasks. Stored so the app works — synced to your account and visible only to you.
- Usage metering: how many AI requests and scans you make each month, and their token counts, used to enforce plan limits.
- Subscription state: if you subscribe on the web, your Stripe customer and subscription ids, the status of the subscription, when the paid period you're in ends, and whether you've cancelled.
- Referrals: your invite code and, if you signed up with someone's code, who referred you.
What Inkly does NOT do
- No advertising, no ad tracking, no sale of personal data.
- No third-party analytics SDKs.
- Your notes are never used to train AI models.
AI processing
When you use Inkly AI, summaries, or scan digitization, the relevant note text or scan image is sent to an AI provider to generate the response. Today that content goes straight to Google, to be processed by a Gemini model. Inkly can also be set up to route it through OpenRouter, which passes it on to Google — in which case both companies handle it — or to send it to Z.ai (which runs its own GLM models). Those are the only companies your note and scan content is sent to for AI processing, and we'll update this page if that ever changes. Voice input takes a separate path, described below. This content is processed to serve your request and is subject to the provider's data policy. Because these providers operate globally, your content may be processed on servers located outside your country. We do not send your email, name, or account identifiers to the AI provider — only the note or scan content needed to answer your request.
Voice input
When you ask a question by voice in the iOS app, the app uses Apple's speech recognition to turn what you said into text. That recognizer is not restricted to on-device transcription, so assume the audio of your question is sent to Apple and handled under Apple's privacy policy. Only the resulting text is then sent on for AI processing, by the same route and to the same providers as a question you type. Typing your question instead uses no speech recognition and sends nothing to Apple. Answers read back aloud are spoken by your device's own built-in voice.
The email Inkly sends you — your account confirmation, the sign-in code for a new device, a password-recovery code, and the alert when your account is used on a device we haven't seen before — is delivered by Resend. To deliver a message Resend receives your email address and the contents of that message, which for the new-device alert includes a description of the device and the time it signed in. It does not receive your notes, scans, or chats. Resend handles what it receives under its own privacy policy. These are account and security messages; Inkly does not send marketing email.
Payments
Subscriptions bought on the web are billed through Stripe. Checkout is hosted by Stripe on its own pages, so card numbers never reach Inkly's servers and we never see or store them. We send Stripe your email address and your Inkly account id, so that it can create a customer record and so that a payment can be matched back to your account. Stripe holds the card, the billing details you give it, and your invoice history, and handles that data under its own privacy policy. On our side we keep only the Stripe customer and subscription ids, the status of the subscription, when the paid period you're in ends, and whether you've cancelled — enough to know which plan you're on and what to show you on the billing screen. Changing your card, downloading invoices and cancelling all happen on Stripe's own billing portal rather than inside Inkly. The iOS app does not sell subscriptions, so nothing is sent to Stripe from it.
Children's privacy
Inkly is intended for students aged 13 and older, and you confirm you are 13+ when you create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at the email below and we will delete it promptly. Where local law sets a higher age of digital consent, younger users should use Inkly only with the involvement and consent of a parent, teacher, or guardian.
Where data lives
Data is stored with Supabase (database, authentication, file storage) and served through Vercel. Email is delivered through Resend, and payments are handled by Stripe, as described above. All traffic is encrypted over HTTPS.
Deleting your data
You can permanently delete your account and all associated data at any time from Profile → Delete account inside the app. This removes your notes, scans, chats, and usage records immediately. Any live subscription is cancelled as part of that, and Stripe keeps its own record of the payments you already made.
One thing is kept on purpose: a one-way fingerprint of your email address (a scrambled code that cannot be turned back into the address). It lets us recognise an inbox that has already had a free trial or a referral reward, so deleting and re-creating an account cannot be used to claim them again. It is not linked to anything else you stored in Inkly.
Who runs Inkly
Inkly is operated by an independent developer (an individual, not a registered company) based in Mexico, who is the data controller for the information described above.
Contact
The fastest route is Profile → Help & support inside the app. By email: 10darkninja10@gmail.com.