Privacy Policy
Last updated: 29 July 2026
The short version. We collect as little as we can: your name and email from Google sign-in, the drawings you choose to render, and basic usage statistics. Your drawings are sent to OpenAI to create the artwork — that is the core of how Inkmagik works. We do not sell your data, we do not show ads, and we do not use your drawings to train AI models.
1. Who we are
Inkmagik ("we", "us") is operated by Laurens Derks, a sole trader based in New South Wales, Australia. Inkmagik is a browser-based drawing studio that turns your sketches into finished artwork using AI.
For anything in this policy, contact us at hello@inkmagik.app.
2. What we collect
Account information
Inkmagik uses Google sign-in. When you sign in, we receive your name, email address and Google account identifier. We never see or store your Google password.
Things you create
- Drawings — saved in your browser on your own device as you work.
- Rendered artwork — images produced when you press Render, stored in your private gallery.
- Reference photos — photos you load into the Trace feature. See below for how these are handled.
Tracing photos, and how they move between devices
The Trace feature lets you place a photo behind the canvas to draw over. What happens to that photo depends on whether you are signed in:
- Signed out — the photo never leaves your device. It stays in your browser and we never receive it.
- Signed in — the photo is uploaded to our private storage so the same trace can appear on your other devices. If you start a trace on a computer and then sign in on an iPad, the photo is downloaded there too.
Uploaded trace photos are held in private storage that only your signed-in account can reach. They are deleted when you press Finish on that trace, or when you remove the image.
Because trace photos are often pictures of real people, please only use photos you have the right to use — and don't upload pictures of other people without their permission. Trace photos are never sent to OpenAI: only your drawing is used to make artwork.
Purchases
If you buy tokens, payment is handled entirely by Stripe. Your card details go directly to Stripe and never touch our servers. We keep only a record that a purchase happened and how many tokens it added.
Usage information
We record basic events so we can understand how the app is used and what it costs to run: page visits, sign-ins, renders started and finished, render duration, purchase steps, and errors. We do not log your IP address and we do not use tracking or advertising cookies.
3. How we use it
- To run the app — signing you in, creating your artwork, keeping your gallery.
- To manage token balances and purchases.
- To understand usage and running costs, so we can improve and price fairly.
- To protect the service from abuse.
We do not sell your personal information, share it with advertisers, or use your drawings to train AI models.
4. Who else is involved
Running Inkmagik means relying on a small number of trusted providers. Each receives only what it needs:
| Provider | What it handles |
|---|---|
| Sign-in (name, email) | |
| Supabase | Database and file storage — your account, tokens, gallery |
| OpenAI | Receives your drawing to generate the rendered artwork |
| Stripe | Payment processing (card details go to Stripe, not to us) |
| Render | Hosting for the app |
| Cloudflare | Domain and network routing |
Some of these providers process and store data outside Australia, including in the United States. By using Inkmagik you consent to that transfer.
Security of our providers
We build Inkmagik on established providers that maintain independent security certifications for their platforms. Payments are handled by Stripe, certified to PCI DSS Level 1 — the highest standard in the payments industry. Our data storage (Supabase), hosting (Render), network (Cloudflare), sign-in (Google) and AI rendering (OpenAI) providers each maintain SOC 2 examinations, and most also hold ISO 27001. Inkmagik itself is a small independent service and is not separately certified; we keep the amount of data we hold deliberately small.
5. How long we keep things
- Gallery images — we keep only your most recent renders (currently the newest five). Once you go past that, the oldest image is deleted automatically and permanently — we cannot recover it, so download anything you want to keep.
- Reference photos — if you were signed out, they were never uploaded at all. If you were signed in, they are deleted from our storage when you press Finish or remove the image.
- Drawings in progress — stored in your own browser; clearing your browser data removes them.
- Account and purchase records — kept while your account exists, and afterwards only as long as needed for tax and accounting obligations.
6. Children and young people
Inkmagik is intended for people aged 13 and over. If you are under 18, you may only use Inkmagik with the permission of a parent, guardian or teacher — and they should buy any tokens on your behalf.
We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us at hello@inkmagik.app and we will delete it promptly.
7. Your rights
Under the Australian Privacy Act 1988 you may ask us to:
- Tell you what personal information we hold about you.
- Correct anything that is wrong.
- Delete your account and the information attached to it.
Email hello@inkmagik.app and we will respond within a reasonable time, normally 30 days. If you are unhappy with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
8. Security
Inkmagik is served entirely over HTTPS. Your gallery and reference photos are held in private storage that only your signed-in account can reach, and payment details never reach our servers. No online service can promise perfect security, but we keep the amount of information we hold deliberately small.
If you think you have found a security or privacy flaw in Inkmagik, please email hello@inkmagik.app rather than sharing it publicly. We will look into it and let you know what we find.
9. Cookies and local storage
We use your browser's local storage to keep your work-in-progress drawings, your saved colour palette and your settings on your device, and a sign-in token so you stay signed in. We do not use advertising or cross-site tracking cookies.
10. Changes to this policy
If we change this policy we will update the date at the top of this page. Significant changes will be highlighted in the app.
11. Contact us
Questions, corrections or deletion requests: hello@inkmagik.app