Privacy policy

Last updated: August 2026

The short version

You can design and buy without creating an account. We collect the minimum we need to make your designs and ship your order: your prompts and photos (to generate designs), your email (to send order updates), and your shipping address (collected by Stripe at checkout, to deliver). We don't sell your data. Payment details never touch our servers.

What we collect, and why

Designs and conversations — the prompts you type, photos you upload, and the designs generated from them are stored so your creations don't vanish between visits and so we can print what you ordered.

Your email — asked for when you continue designing past the free previews, or at checkout. Used for order confirmations, shipping updates, and recovering your designs. Nothing else unless you opt in.

Order and shipping details — your name, shipping address, and what you bought, entered on Stripe's secure checkout page. We receive them from Stripe to fulfil and ship your order.

A session cookie — an anonymous ID that keeps your designs and cart attached to your browser. Essential; the app can't function without it.

Usage and error data — basic analytics (only with your consent, where consent applies) and technical error reports, used to fix what breaks.

Your photos and prompts go to AI providers

Inka designs are generated by AI. To do that, the text you type and the photos you upload are sent to the AI services that power generation and safety review (currently Google, OpenAI, and Ideogram) and are handled under their API terms. We send only what's needed to create your design. Don't upload photos you don't have the right to use.

Payments

Checkout is handled entirely by Stripe. Your card number goes to Stripe, not to us — we receive only confirmation that payment succeeded, plus the order details needed to fulfil it.

Who we share with

Only service providers doing work for us, only what they need: Stripe (payments), Printful (printing and shipping your order — they receive your design file and shipping address), Supabase, Vercel and Upstash (hosting and infrastructure), Resend (transactional email), the AI providers above (design generation and safety), and — where enabled — PostHog (analytics) and Sentry (error monitoring). We do not sell or rent personal data to anyone.

How long we keep things

Designs and order records are kept so you can reorder and so we can support past purchases. Abandoned carts are cleaned up on a rolling schedule. If you want your designs, photos, or email removed, ask — see below.

Your choices

Email hello@inka.me to see, correct, or delete data we hold about you, including uploaded photos and generated designs. The sections below spell out the formal rights for the EU/UK and California — but you don't need to live there or cite a law: the same email works for everyone, for every request.

Cookies & your consent

Two cookies are essential and always on: the anonymous session ID that keeps your designs and cart attached to your browser, and the small cookie that remembers your cookie choice itself. The app cannot work without them.

Analytics are optional. Where consent rules apply, analytics stay OFF unless you tap Accept on the cookie card — and declining never limits what you can design or buy. Your choice is kept for a year.

Changed your mind? Reset your choice and the cookie card will ask again:

If you're in the EU, EEA or UK (GDPR)

The GDPR applies to you, and this is where we stand under it. Our legal bases for processing: performing our contract with you (generating your designs, taking your order, shipping it), your consent (optional analytics, and any marketing you explicitly opt into), and legitimate interests (keeping the service secure and preventing abuse of the generator).

You have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to processing, and withdraw any consent at any time — withdrawing is as easy as giving (the cookie reset above, or one email). Email hello@inka.me and we'll respond within one month, as the law requires. We'll never charge for a reasonable request or treat you worse for making one.

You also have the right to complain to your data protection authority — that's the supervisory authority in the country where you live or work.

Our service providers are largely US-based, so your data may be processed outside the EU/UK. Those transfers rely on our providers' recognized safeguards, such as participation in the EU-U.S. Data Privacy Framework and standard contractual clauses.

If you're in California (CCPA/CPRA)

California residents have the right to know what personal information we collect and why (this page is the honest, complete list), to access it, to correct it, to delete it, and to never be discriminated against for exercising any of these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — so there is nothing to opt out of. If that ever changed, this page would say so first and a "Do Not Sell or Share My Personal Information" control would appear before the change did.

To exercise any right, email hello@inka.me from the address you've used with Inka — that's how we verify the request is really yours. An authorized agent can act for you with your written permission. We'll confirm receipt within 10 days and respond within 45.

Children

Inka isn't directed at children under 13, and we don't knowingly collect their data. Photos of your kids that YOU upload as an adult are treated like every other photo: used to generate your design, deletable on request.

Changes and contact

If this policy changes in a way that matters, we'll update this page and the date below. Questions, requests, complaints: hello@inka.me.

Inka is operated by [FOUNDER: legal entity / trading name]. Governing law: [FOUNDER: jurisdiction].