Privacy Policy
Effective date: May 29, 2026
InkSphere ("we", "our", "us") provides an AI tattoo design generator. This Privacy Policy explains what data we
collect, how we use it, and your rights.
Information We Collect
- Account data: If you sign in, we receive your email address and a unique user ID via Apple Sign
In or Google Sign In.
- Guest identifier: If you use the app without signing in, we generate an anonymous UUID stored on
your device to associate your creations.
- User content: Tattoo designs you generate and photos you upload (for portrait/style features) are
stored to power the in-app gallery. We access your camera and photo library only when you actively choose to upload a
photo.
- Usage data: Generation counts, language preference, and basic device/app diagnostics.
- Purchase data: Subscription status processed through Apple In-App Purchase and RevenueCat (we do
not see your payment card).
- Push token: If you allow notifications, OneSignal stores a device token to deliver them.
How We Use Data
- To generate and store your tattoo designs.
- To authenticate your account and sync your creations across sessions.
- To deliver push notifications (only if you opt in).
- To improve the app, prevent abuse, and enforce rate limits.
Third-Party Services
We share the minimum data needed with the following processors:
- Supabase — authentication, database, and image storage.
- Replicate — AI image generation. Uploaded images and prompts are processed to generate your
tattoo and are not used to train AI models.
- OneSignal — push notification delivery.
- RevenueCat — subscription and entitlement management.
- PostHog — product analytics (anonymized event tracking).
- Apple / Google — sign-in providers.
Data Retention
Your creations and account data are retained until you delete them or request account deletion. You can delete your
account in the app under Settings → Delete Account; this removes your stored data within 30 days.
Your Rights
You may request access to or deletion of your personal data at any time by contacting us. Subject to GDPR/CCPA, you
also have the right to object to processing and to data portability.
Children
InkSphere is not directed to children under 13. We do not knowingly collect data from children under 13.
International Transfers
Our processors (Supabase, Replicate, OneSignal, RevenueCat, PostHog) may store and process data on servers in the
United States and other countries. By using InkSphere you consent to this transfer.
Changes
We may update this Privacy Policy. Material changes will be reflected by updating the effective date above.
Contact
Questions or requests: canozgundogus@gmail.com