InkFlow Privacy Policy

Effective: October 2, 2026

InkFlow is an AI-assisted tattoo design app. This policy explains what we process, why we process it, who receives it, and how you can delete it. The data controller is Neo Guo ("we", "us"), contactable through our support team.

1. Information We Process

Account and authentication data

We use Firebase Authentication to create an anonymous account by default and to support Sign in with Apple or Google. We process your Firebase user ID, authentication provider, and the account identifiers supplied by that provider. We do not receive your Apple or Google password.

Text prompts and generated designs

When you request a design, the text or edit instruction you submit is sent through our Firebase-hosted backend to AI providers. The generated images and related task metadata may be stored in Firebase Cloud Storage and Firestore so that your designs can be displayed, edited, restored to history, and deleted with your account. Current AI processing providers include Google Gemini and Replicate.

Body-preview photos

Photos you choose for the body-preview feature are processed only on your device. They are not uploaded to our servers or to an AI provider. The preview is saved to your device photo library only when you explicitly tap Save. Device-level photo permission is controlled by iOS or Android settings.

Purchases and subscriptions

Apple or Google processes payment details. RevenueCat receives a customer identifier linked to your Firebase user ID, your entitlement and subscription status, and store transaction information so we can unlock Pro features. We do not receive or store your full payment-card number.

Usage, device, and diagnostic data

We process quota usage, app/device type, app version, language, coarse technical logs, and a randomly generated device identifier. The device identifier is converted to a one-way hash for quota and abuse-prevention records. We also use Firebase Analytics to understand feature usage and app performance; analytics events may be associated with your Firebase user ID. Prompt text is not sent to analytics.

Advertising data

Free users may see ads supplied by Google AdMob. Depending on your consent and device settings, AdMob may process advertising identifiers (such as IDFA on iOS or the Android advertising ID), IP address, approximate location, ad interactions, and consent status to deliver and measure ads. On iOS we request App Tracking Transparency permission before using the advertising identifier for personalized advertising.

2. Why We Use Information

• Provide accounts, generate and edit designs, display history, and operate the body preview.
• Verify subscriptions, maintain accurate generation credits, prevent abuse, and provide customer support.
• Measure app performance and feature use, fix errors, and improve InkFlow.
• Show contextual or personalized ads, measure their performance, and honor your privacy choices.
• Comply with law, enforce our Terms, and protect users and the service.

3. Sharing and Service Providers

We share data only as needed for the service. Our current providers include Google Firebase/Google Cloud (authentication, backend, Storage, Analytics, and Gemini), Replicate (AI processing), RevenueCat (subscription management), and Google AdMob (advertising). These providers process data under their own terms and privacy policies. We may also disclose data if required by law, to protect rights and safety, or as part of a merger or sale. We do not sell personal information.

4. Retention and Account Deletion

We keep account records and generated outputs while your account is active and as reasonably needed to provide the service. You can delete your InkFlow account in the app: open Account, tap Delete Account, and confirm. This deletes the Firebase account and the InkFlow server records we associate with it, including quota/entitlement records, AI job records, reward records, and generated design files, and requests deletion of the related RevenueCat customer record. Some records may remain temporarily in encrypted backups or be retained where law, fraud prevention, or store transaction rules require it. Deleting the app does not delete your account. If you cannot use the in-app option, email us from the address associated with your account and we will verify and process the request.

5. Your Choices and Rights

• Change photo and tracking permissions in your device settings.
• Manage personalized advertising through iOS Tracking settings, Android Ads settings, or the in-app privacy-options entry where available.
• Request access, correction, export, restriction, or deletion by emailing our support team. We may need to verify your identity.
• Cancel a subscription in Apple or Google, separately from deleting your account.

6. Security and International Processing

We use reasonable technical and organizational safeguards, including access controls, App Check, encrypted transport, and provider security controls. No system is perfectly secure. Our providers may process data in countries other than yours, with safeguards required by applicable law.

7. Children

InkFlow is not directed to children under 13 (or a higher minimum age where local law requires). We do not knowingly collect personal information from children. Contact us if you believe a child has provided information.

8. Changes and Contact

We may update this policy and will post the new effective date here. Material changes will be communicated in the app or by another appropriate method. Questions or privacy requests: email our support team.