1. Who we are
InkLabs is an AI-powered creative writing platform. When we say "InkLabs", "we", "us", or "our" in this policy, we mean the InkLabs service and its operators. If you have any questions about this policy, contact us at privacy@inklabs.app.
2. What data we collect
We collect the minimum data necessary to provide the service:
- Account information — your email address, name (optional), and password (stored as a secure hash via Supabase Auth).
- Content you create — your projects, chapters, and writing stored in our database so you can access them across sessions.
- Usage data — how many AI generations you use per day, which features you use, and when. This is used to enforce plan limits and improve the service.
- Payment information — if you subscribe to a paid plan, payment details are handled entirely by Stripe. We never see or store your card number.
- Technical data — IP address, browser type, and device information collected automatically when you use the service.
3. How we use your data
- To provide, maintain, and improve the InkLabs service
- To enforce plan limits and prevent abuse
- To send transactional emails (account confirmation, usage alerts, password reset)
- To process payments and manage subscriptions via Stripe
- To monitor service performance and diagnose technical issues
- To comply with legal obligations
We do not sell your personal data. We do not use your writing content to train AI models.
4. Your writing content
Your projects and chapters belong to you. We store them securely to provide the service. Specifically:
- Your content is private by default — only you can access it
- We do not read, share, or analyse your writing content except where required for technical support you have requested
- Your content is not used to train AI models or improve AI outputs
- When you delete your account, your content is permanently deleted within 30 days
5. AI generation and third parties
InkLabs uses Anthropic's Claude AI to generate content. When you use AI features:
- Your prompts and project context are sent to Anthropic's API to generate responses
- Anthropic processes this data under their own privacy policy and API terms
- We minimise the context sent to reduce both cost and data exposure
- We recommend not including sensitive personal information in your story content or project ideas
6. Cookies and tracking
We use essential cookies only — those required to keep you logged in and maintain your session. We do not use advertising cookies or third-party tracking scripts. No cookie consent banner is shown because we only use strictly necessary cookies.
7. Data storage and security
Your data is stored securely using Supabase (PostgreSQL), hosted on infrastructure with industry-standard security practices including:
- Encryption at rest and in transit (TLS)
- Row-level security ensuring each user can only access their own data
- Regular automated backups
- Access controls limiting who within our team can access production data
8. Data retention
We retain your data for as long as your account is active. If you delete your account, your personal data and content will be permanently deleted within 30 days. Anonymised usage statistics may be retained indefinitely for service improvement purposes.
9. Your rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your account and data
- Portability — request your data in a machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, email us at privacy@inklabs.app. We will respond within 30 days.
10. Children
InkLabs is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email or in-app notice at least 14 days before they take effect. The date at the top of this page always reflects the most recent update.