Privacy

Last updated 25 September 2026

inkling is made by Allograph, Inc. This page describes how we handle information in the app, on our website, and when you contact us.

There is no account

You do not need an inkling account, email address, or password to use the app. If you email us for help, we receive the contact information you provide.

Downloads and email

The website links directly to the App Store. You do not need to submit an email address to download inkling. Apple handles downloads under Apple's privacy policy.

Our direct App Store download links include a campaign label so Apple can report aggregate downloads attributed to that link. The label is shared by everyone using the route; it contains no personal or device identifier. We omit it when you disable analytics or send a Do Not Track or Global Privacy Control signal. Apple applies reporting delays and privacy thresholds to campaign statistics.

Our website beta invitation signup has closed. We no longer collect addresses or send invitations through that form. Historical invitation emails were sent through Resend; its delivery and security records may remain subject to Resend's retention policies.

If you email us for help, your address and message reach our support inbox and its email providers so we can respond. Support messages are retained while needed to resolve your request and related follow-up. Contacting support does not subscribe you to marketing emails.

Website usage

We measure homepage visits and interactions such as viewing examples and clicking the App Store link. Each page load uses a new random identifier so we can count steps within that visit. We record the event time, a broad referring-site category (such as TikTok), and a screen-size category. We do not store what you type, full referring URLs, or raw IP addresses in these analytics, and do not link them to email addresses or app device identifiers. Homepage interaction measurement uses no cookies or browser storage.

For direct App Store redirects, we use a random first-party browser cookie, valid for up to 90 days, to estimate unique visitors and avoid counting repeat opens as new visitors. Each domain uses its own cookie. Our server stores a hashed identifier, the date, domain, and campaign label; it does not send the identifier to Apple or link it to an app user. Different browsers, private browsing, or cleared cookies may count again. We omit this cookie and measurement when analytics are disabled or your browser sends Do Not Track or Global Privacy Control.

These records are stored on our Fly.io server, visible only to administrators, and removed after 90 days during the next analytics cleanup. We honor browser Do Not Track and Global Privacy Control signals. You can also open the homepage with analytics disabled. We briefly use connection addresses in server memory to limit abuse of the analytics endpoint.

Your pages, and where they live

Everything you draw and write is stored on your iPhone. Each finished page is also backed up to our server, so a reinstall or a new phone brings your pages back. The backup is keyed to the same anonymous device identifier as everything else — we still don't know who you are — and we don't read it: it exists to give your pages back to you, and for nothing else. Deleting a page in the app deletes our copy of it too. If you want every trace gone at once, delete your pages before deleting the app, or write to us and we'll clear the backup by hand.

Pages you share by link

You can hand a copy of a page to somebody as a link. The copy is stored on our server, still sealed, and anyone who has the link can open it in inkling — the link is the only key, so send it only to people you mean to. The copy carries everything on that page, including the replies written on it. The small picture of the page that shows in Messages is stored beside it. A link stops working after thirty days, and expired copies are removed from storage.

What leaves your device, and when

When you pause after writing, the app sends a picture of the relevant part of your page — and the text of anything you circled — to our server, which passes it to Anthropic's Claude API to be answered. If you ask for a picture panel, the description is passed to Google's Gemini API in the same way. Finished pages are uploaded to our server as described above, so they can be restored. Support emails are handled separately as described above.

If you use the microphone, speech is transcribed on your device. The audio is never uploaded.

What our server keeps

• Verified App Store subscription records, linked to your anonymous app identifier: product and transaction identifiers, purchase price and currency when supplied by Apple, expiry, and refund or revocation status. We use these to provide paid access and measure sales. We do not receive your payment-card details or Apple ID email address.
• An anonymous device identifier from Apple's App Attest, which proves the request came from a real copy of inkling. It is not your Apple ID and does not include your name or email address.
• One row per answered turn: the identifier, which model answered, how many tokens it used, and what it cost. This is how the daily limit and the spending ceiling work.
• Your backed-up pages, stored as sealed files we never open, so they can be returned to your device. Deleting a page deletes the copy.

We do not read your pages, and we do not store your questions or answers anywhere except inside your own backup.

Who else is involved

• Anthropic — answers the page.
• Google — draws picture panels, when you ask for one.
• Fly.io — runs our server.

We do not sell your personal information or use your contact information for advertising. We share information with the service providers described here to run inkling and deliver the services you request.

Your choices

To request a copy, correction, or deletion of personal information you have provided to us, email hello@writeback.ink. We may ask you to verify control of your email address before sharing or changing a record. Depending on where you live, you may also have rights to object to or restrict processing, receive a portable copy, and complain to your local data protection authority.

Children

inkling is not directed at children under 13 and we do not knowingly collect anything from them.

Changes, and how to reach us

If this ever changes, the date at the top changes with it. Questions go to hello@writeback.ink.