Privacy policy
Last updated: August 2026
The short version
You can design and buy without creating an account. We collect the minimum we need to make your designs and ship your order: your prompts and photos (to generate designs), your email (to send order updates), and your shipping address (collected by Stripe at checkout, to deliver). We don't sell your data. Payment details never touch our servers.
What we collect, and why
Designs and conversations — the prompts you type, photos you upload, and the designs generated from them are stored so your creations don't vanish between visits and so we can print what you ordered.
Your email — asked for when you continue designing past the free previews, or at checkout. Used for order confirmations, shipping updates, and recovering your designs. Nothing else unless you opt in.
Order and shipping details — your name, shipping address, and what you bought, entered on Stripe's secure checkout page. We receive them from Stripe to fulfil and ship your order.
A session cookie — an anonymous ID that keeps your designs and cart attached to your browser. Essential; the app can't function without it.
Usage and error data — basic analytics (only with your consent, where consent applies) and technical error reports, used to fix what breaks.
Your photos and prompts go to AI providers
Inka designs are generated by AI. To do that, the text you type and the photos you upload are sent to the AI services that power generation and safety review (currently Google, OpenAI, and Ideogram) and are handled under their API terms. We send only what's needed to create your design. Don't upload photos you don't have the right to use.
Payments
Checkout is handled entirely by Stripe. Your card number goes to Stripe, not to us — we receive only confirmation that payment succeeded, plus the order details needed to fulfil it.
Who we share with
Only service providers doing work for us, only what they need: Stripe (payments), Printful (printing and shipping your order — they receive your design file and shipping address), Supabase, Vercel and Upstash (hosting and infrastructure), Resend (transactional email), the AI providers above (design generation and safety), and — where enabled — PostHog (analytics) and Sentry (error monitoring). We do not sell or rent personal data to anyone.
How long we keep things
Designs and order records are kept so you can reorder and so we can support past purchases. Abandoned carts are cleaned up on a rolling schedule. If you want your designs, photos, or email removed, ask — see below.
Your choices
Email hello@inka.me to see, correct, or delete data we hold about you, including uploaded photos and generated designs. The sections below spell out the formal rights for the EU/UK and California — but you don't need to live there or cite a law: the same email works for everyone, for every request.
If you're in the EU, EEA or UK (GDPR)
The GDPR applies to you, and this is where we stand under it. Our legal bases for processing: performing our contract with you (generating your designs, taking your order, shipping it), your consent (optional analytics, and any marketing you explicitly opt into), and legitimate interests (keeping the service secure and preventing abuse of the generator).
You have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to processing, and withdraw any consent at any time — withdrawing is as easy as giving (the cookie reset above, or one email). Email hello@inka.me and we'll respond within one month, as the law requires. We'll never charge for a reasonable request or treat you worse for making one.
You also have the right to complain to your data protection authority — that's the supervisory authority in the country where you live or work.
Our service providers are largely US-based, so your data may be processed outside the EU/UK. Those transfers rely on our providers' recognized safeguards, such as participation in the EU-U.S. Data Privacy Framework and standard contractual clauses.
If you're in California (CCPA/CPRA)
California residents have the right to know what personal information we collect and why (this page is the honest, complete list), to access it, to correct it, to delete it, and to never be discriminated against for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising — so there is nothing to opt out of. If that ever changed, this page would say so first and a "Do Not Sell or Share My Personal Information" control would appear before the change did.
To exercise any right, email hello@inka.me from the address you've used with Inka — that's how we verify the request is really yours. An authorized agent can act for you with your written permission. We'll confirm receipt within 10 days and respond within 45.
Children
Inka isn't directed at children under 13, and we don't knowingly collect their data. Photos of your kids that YOU upload as an adult are treated like every other photo: used to generate your design, deletable on request.
Changes and contact
If this policy changes in a way that matters, we'll update this page and the date below. Questions, requests, complaints: hello@inka.me.
Inka is operated by [FOUNDER: legal entity / trading name]. Governing law: [FOUNDER: jurisdiction].