Privacy
effective October 6, 2026 · plain language, and binding
Inkiln is a writing app. This page says what it keeps about you and your writing, what it sends anywhere else, and how you can take everything with you or delete it. The short version: we keep as little about you as we can, we don’t read your writing, we never sell it, and it is never used to train AI.
Inkiln is run by Jayde Russell, in the United States, which is responsible for your data (the “controller”). Write to access@inkiln.app about anything on this page.
What we keep, and why
- Your account: a random account number that says nothing about you; the public half of each passkey you sign in with (the private half never leaves your device), with the label you give it and the name of the password manager that holds it; your recovery codes, stored only in a form that can check a code but not reveal it; and when each passkey was last used. We don’t ask for your name, your email address or your phone number. We also keep whether you’ve turned on AI features, your role (author, or admin for those who run Inkiln), the newest release you’ve been shown in What’s new, so it isn’t shown again on your other devices, and which version of the terms you agreed to when you created your account, and when, so that if they change in a way that matters we can ask you again.
- Your writing: your books, chapters, notes, versions, story bible, pictures you add, targets and daily word totals. We keep them to run Inkiln for you, and for nothing else. We also keep the time-zone offset your browser reports, so a day counts by your clock, and a monthly count of your AI use: how many requests, how many tokens, and what they cost. Never what was sent or what came back.
- Feedback: what you send from the app, which screen it came from and your account number. It is deleted with your account.
- Cookies: three, all needed for the app to work, none for tracking: one keeps you signed in, one remembers which passkey is on this device, and one lasts five minutes while you sign in.
- Your IP address: Cloudflare sees it in order to deliver pages and to slow down repeated sign-in attempts from one address. We don’t store it.
- In your browser only: your settings, words not yet saved, where you stopped reading aloud, and similar conveniences. These stay on your device and never reach us.
What we don’t do
- We don’t read your writing. We look at an account only when you ask us to fix a problem with it, and only as far as fixing it needs.
- We never sell your writing or anything about you, and there is no advertising.
- Your writing is never used to train AI, by us or by any of our providers.
- There are no tracking cookies, and no profile of you is built.
Who else handles your data
- Cloudflare hosts Inkiln: it runs the app, stores your account and writing, and forwards email sent to access@inkiln.app. It also counts page visits for us with Web Analytics, which uses no cookies and builds no profile. Cloudflare does not use customer content to train AI.
- Anthropic: AI features are off until you turn them on, at sign-up or in Settings, and you can turn them off again at any time. Each account has a monthly AI budget; when it is used up, AI features pause until the next month. Anthropic provides the AI analysis that drafts story-bible entries, and only when you choose it, each time. Inkiln shows you exactly what would be sent first: short passages about the names you picked, never a whole book. Anthropic does not train its models on what it is sent, deletes it within 30 days, and keeps something its safety checks flag for up to two years.
- Your browser’s voices: reading aloud uses the voices your device provides. Some browsers offer online voices that send the text being read to the browser’s maker. Settings has a switch, “Only voices on this device”, that keeps reading aloud entirely on your device.
Cloudflare and Anthropic process data in the United States and elsewhere. Where the law requires it, transfers are covered by the European Commission’s standard contractual clauses.
If you write to access@inkiln.app, we receive your email address and your message, and use them only to answer you. We delete invitation requests within 90 days once they are answered.
Keeping it, taking it, deleting it
- Take it: download everything you’ve written, in one file, at any time from the app.
- Delete it: deleting your account signs you out everywhere at once. Your writing, pictures, backups and sign-in details are deleted 30 days later, unless you sign in again before then to keep them. Our hosting provider’s own recovery copies expire within a further 30 days.
- Delete a book: it stays in the Trash for 30 days, where you can restore it, then it is deleted for good, with its backups.
- If Inkiln closes: you’ll have at least 90 days’ notice, and everything stays downloadable until then.
Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, give it to you in a portable form, or delete it, and you can object to how we use it. Most of this you can do yourself in the app. For anything else, write to access@inkiln.app; we’ll answer within a month. If you are in the EU or UK, you can also complain to your data protection authority.
Legal requests
We disclose data only when the law requires it, we push back on requests that are too broad, and we tell you about a request unless the law forbids it.
Security
Your writing is kept in a store of its own, separate from every other author’s, and everything travels encrypted. Sign-in uses passkeys, so there is no password for anyone to steal.
Children
Inkiln is not meant for anyone under 16, and we don’t knowingly hold data about them.
Changes
If this page changes in a way that matters, we’ll say so in the app before the change takes effect.