Legal

Privacy policy

Last updated: 18 October 2026

01Who we are

InkAge is developed and run by Sóti Viktória, who is the data controller.

Write to viktoriasoti@yahoo.com or use the contact page – we answer within 30 days, usually much sooner.

InkAge is for adults: you must be 18 or older to create an account.

02What we collect

  • Account: your name, e-mail address and profile picture as Google or Apple share them when you sign in, and a random user ID.
  • Photos and designs: the body photo and the tattoo design you upload, and the previews made from them.
  • Your answers and settings: onboarding answers (for example preferred style and placement), language, folders, notes on a preview.
  • Usage and limits: when you created previews and how many, referral bonuses, to apply the free daily limit and prevent abuse; a one-way hash of the IP address and a random device ID for the same reason.
  • Notifications: if you turn them on, a push token for your device and the reminders you scheduled (for example healing reminders).
  • Reports and messages: reports you send about a picture (with a small copy of the picture), feedback, contact messages and newsletter sign-ups.
  • Usage statistics: simple, anonymous in-app events (for example “preview created”), only if you accept them in the cookie notice. No advertising trackers, no advertising ID.

03Why we use it

To run the app you asked for (making, saving and sharing previews – performance of a contract), to keep it safe and fair (abuse prevention, safety filters, answering reports – legitimate interest), and, only with your consent, for usage statistics, notifications and the newsletter. We never sell your data and never use your photos for advertising.

04Photos, designs and AI

Your photo and design are sent to our AI providers (Google Gemini, and OpenAI as a backup) only to check the photo and create your preview. They may keep it for a limited time for abuse monitoring under their own terms; they do not use it to identify you. Photos showing nudity or a minor are rejected automatically.

Your previews are stored in your private account storage so you can see them on every device. Only you can open them, unless you share one.

05Sharing

When you create a vote link, we copy the chosen images to a public link. Anyone with the link can see those images and vote; no name or account is shown. If you post to Explore, the images appear there after review. Closing the link or deleting the preview removes them.

06Who processes data for us

These providers process data only on our behalf and under data processing terms:

  • Supabase – database, sign-in and file storage (EU region)
  • Vercel – hosting of the website and the app
  • Google (Gemini API) and OpenAI – AI image checks and previews
  • Google (Firebase Cloud Messaging) and Apple (APNs) – push notifications
  • Resend – sending e-mails (welcome, newsletter, vote notifications)
  • Google and Apple – sign-in with your Google account or Apple ID

Some of them are based in the United States; transfers rely on the EU–US Data Privacy Framework or the EU standard contractual clauses.

07How long we keep it

  • Previews and photos: until you delete them. Deleted previews stay in Recently deleted until you empty it or restore them; deleting your account removes them all at once.
  • Account: until you delete it. After deletion we keep only a closed record with a random ID (no name, e-mail, photo or preview) and the dates of past previews, so the free limit cannot be abused with the same sign-in.
  • Reports: the reason for up to 12 months; the picture copy and your note are removed when your account is deleted.
  • Messages and newsletter: as long as needed to answer you, or until you unsubscribe.

08Your rights

You can download your data, and delete your account and every saved preview yourself at any time in the app (Profile → Delete account), or ask us on the account deletion page. You can also ask for access, correction, restriction or objection, and withdraw consent at any time. Under the GDPR you may complain to your local data protection authority (in Hungary: NAIH, naih.hu).

09Storage on your device

We use one cookie and local storage only to keep you signed in and remember your language, answers and settings. See the cookie notice for details.