Privacy Policy

Ink Oracle™ ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect when you use inkoracle.ai (the "Service"), how we use it, who we share it with, and the rights you have. By using the Service you agree to this policy.

We collect only what is needed to provide and improve the Service:

• Account data — email address, authentication identifiers, and, if you sign in with a third-party provider (e.g. Google), the basic profile information that provider shares.
• Reading inputs — your answers to the twelve questions and any optional reference image you upload.
• Generated content — the readings, concepts, prompts, and images produced for you, stored against your account.
• Technical data — IP address, browser, device, locale, and basic usage events necessary for security, abuse prevention, and service operation.
• Cookies & local storage — session tokens and minimal preferences. We do not use third-party advertising trackers.

• To generate, deliver, and store your readings and tattoo concepts.
• To authenticate you and maintain your account and session.
• To operate, secure, and improve the Service.
• To respond to support requests and enforce our Terms.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your reading content to train third-party advertising models.

Where GDPR or UK GDPR applies, we process personal data on the bases of (a) performance of a contract (delivering the Service you requested), (b) our legitimate interests in operating and securing the Service, (c) your consent (where required), and (d) compliance with legal obligations.

We share information only with vetted processors who help us run the Service:

• Hosting & database — to store your account and readings.
• AI providers — your inputs and prompts are sent to model providers solely to generate your reading and images. They are not used by those providers to train models on your data where their terms allow opt-out.
• Authentication providers — only if you choose social sign-in.
• Legal / safety — when required by law, to enforce our Terms, or to protect rights, property, or safety.

We keep account data while your account is active and readings for as long as you choose to keep them. You can delete individual readings or your entire account at any time. After deletion, residual copies may persist in backups for a limited period before being overwritten.

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest where supported, row-level access controls, and least-privilege credentials. No system is perfectly secure; you use the Service at your own risk.

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal information.
• Export a copy of your data (portability).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

We may update this Privacy Policy from time to time. Material changes will be announced on the Service. Continued use after changes means you accept the updated policy.

Questions or requests? Email privacy@inkoracle.ai.