Privacy Policy for InkHeart

Effective Date: November 22, 2025 | Last Updated: November 26, 2025

Introduction

Welcome to InkHeart (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how InkHeart Entertainment collects, uses, discloses, and safeguards your information when you use our mobile application.

By using InkHeart, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our application.

Information We Collect

1. Information You Provide Directly

Account Information via OAuth:

• When you sign in with Google: We collect your email address, name, and profile picture from your Google account
• When you sign in with Apple: We collect your email address (or private relay email) and name from your Apple ID
• We do not store passwords; authentication is handled securely by Google and Apple

Reading Preferences and Activity:

• Books you read and add to your library
• Chapters you unlock (via coins or subscription)
• Reading progress and bookmarks
• Reading history and session duration

Payment and Subscription Information:

• Purchase history (subscriptions and coin bundles)
• Transaction IDs and receipts
• Subscription status and renewal dates
• Payment processing is handled entirely by Apple App Store and Google Play Store
• We do not store your credit card numbers, bank account information, or full payment details

2. Information Collected Automatically

Device Information:

• Device type and model
• Operating system and version (iOS/Android)
• Unique device identifiers
• App version

Usage Data:

• App features accessed
• Reading sessions and time spent reading
• Screen views and navigation patterns
• App crashes and performance data

How We Use Your Information

Service Delivery:

• Providing access to reading content
• Managing subscriptions and processing purchases
• Syncing reading progress across your devices
• Maintaining your reading library

Personalization:

• Recommending books based on your reading history and preferences
• Customizing your reading experience

Data Storage and Security

Our backend infrastructure is hosted on Supabase, which uses Amazon Web Services (AWS) data centers. Data is primarily stored in the United States.

We implement industry-standard security measures including:

• End-to-end encryption in transit using HTTPS/TLS 1.2+
• Encryption at rest for sensitive data
• Row-Level Security (RLS) policies on all database tables
• Secure token-based authentication (OAuth 2.0)

Advertising and Tracking

InkHeart does NOT track you for advertising purposes.

• We do not collect Apple's IDFA (Identifier for Advertisers)
• We do not collect Google's Advertising ID (GAID)
• We do not share your data with advertising networks
• We do not use your data for targeted advertising

Your Privacy Rights

Universal Rights (All Users):

• Access: Request a copy of your personal data we hold
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications and push notifications

Account Deletion

To permanently delete your account:

1. Go to Settings → Account → Delete Account
2. Or email contact@inkheart.app with “Delete My Account” in the subject line

What Happens When You Delete:

• Personal information deleted within 30 days
• Reading history and progress permanently removed
• Coin balances forfeited (no refunds)
• Transaction records retained for 7 years (legal/tax requirements)

Children's Privacy

InkHeart is rated 12+ and is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Contact Information

For privacy-related inquiries:

• Email: contact@inkheart.app
• Subject: Privacy Inquiry
• Response Time: Within 2 business days