Privacy

Last updated 27 October 2026

Inkword is made and run by one person, Sumit Bedi. This page says what the product collects, why, and which other companies handle it. It is short because the list is short.

What is collected

• Your email address, when you sign in or ask for access. If you use Continue with Google, Google also passes on your name and profile picture address. Nothing else is requested from Google: not your contacts, not your files, not your mail.
• The words you type, and what comes back: the written breakdown, the drawing, the style you chose and the model's reasoning. These are saved to your account so your history works.
• Your balance and tier: how many drawings you have, whether you are Pro, and a log of each change.
• Feedback you send from the Feedback button: your words, your email, and, if you tick the box, which drawing you were looking at. It is stored, and emailed to me so I can answer.
• Usage figures per drawing: token counts and cost, so the product can be priced honestly.
• Simple account events: when your account is created, when you sign in, start or finish a drawing, export, or start a checkout, with the time. For an export that means the format, whether the file was made or failed (with a reason from a short fixed list, never an error message), and a scrambled (hashed) form of the drawing's id that does not show the word you typed. They show where the product works and where people get stuck.
• Your IP address, in server logs and briefly in memory, to limit how many free drawings and sign-in attempts one connection can make. For the free drawing on the home page, a scrambled (hashed) form of it is kept for up to a week, so the daily limit survives a restart. These rate-limit records do not store the address itself or form an account profile. Browser analytics requests also forward the network address to PostHog.

What is not

There are no advertising trackers or analytics cookies. A ten-minute sign-in cookie makes Continue with Google work. Cloudflare Web Analytics counts visits without cookies. Our own server records page visits and clicks with a random visit number shared by Inkword tabs; a new visit number is made after two hours without opening an Inkword page. Separately, PostHog keeps a random browser identifier in localStorage so returning visits can be recognised. When you sign in, the anonymous journey is joined to your account's internal id; signing out resets the PostHog identifier. The browser also keeps your sign-in session, chosen style and free home-page drawing so you can keep it after signing up.

Mac downloads and update checks are counted with a daily hash of the IP address and browser or app identifier, plus the download source and any campaign tags or referring website. The raw IP address and browser or app identifier are not included in those analytics events. Nothing is sold, rented or shared for advertising.

How your drawings are used

Your drawings are private: nobody else using Inkword can see them. I may look at drawings, edits and usage to find and fix drawings that go wrong, and to answer you when you write. They are never shown publicly, used in marketing or shared without asking you first, and never used to train AI models.

Who else handles it

• Anthropic runs Claude, which writes most drawings (Claude Sonnet, and Claude Opus for Big Heads, Figures and Riso). The word you type, and any change you describe in Edit, is sent to it. Your email is not. Under Anthropic's commercial terms, what is sent through the API is not used to train their models.
• OpenAI runs GPT-6, which draws instead when Claude is busy or fails, and receives the same things on those occasions. Under OpenAI's API terms, what is sent through the API is not used to train their models either.
• Supabase stores accounts, drawings and balances, and handles sign-in.
• Google, only if you choose Continue with Google, confirms who you are. Fonts on these pages are also served by Google Fonts.
• Resend delivers the emails: your welcome, sign-in links, receipts and codes.
• Fly.io runs the server, and Cloudflare the domain and the cookieless visit counts.
• PostHog provides product analytics and session recording: page visits, clicks, drawing and export outcomes, sign-in and purchase steps, and a replay of the visit on screen, including the words typed into the drawing field and the drawings that come back. Events and recording are sent through our own domain, inkword.app, to PostHog's US service. Its browser identifier uses localStorage and sets no cookies. Signed-in analytics use your internal account id, email domain (such as gmail.com), join date, Pro status, pack and Mac ownership, and saved drawing count. Full email addresses, passwords and Mac licence keys are not sent to PostHog: email inputs and private account text are masked, and activation links and licence-key elements are blocked from recording and click capture. Sign-in tokens and URL queries are removed from analytics events. Server events contain selected product properties, not your keyword, edit text or secrets. I use this to understand how Inkword is used and fix where people get stuck.

Dodo Payments handles checkout when you buy a pack, as the merchant of record: it takes the payment, sends the receipt and handles tax. Inkword never sees or stores your card number; it receives only that a payment went through, for which pack, and the email on it.

Email

You get email when you ask for a sign-in link, when you buy a pack, when drawings are added to your account, and, rarely, a short note from me when something new ships or when a drawing of yours went wrong and has been fixed. There is no marketing list and nothing is shared. If you would rather not get the occasional product note, reply and say so.

Seeing, changing or deleting your data

You can delete any drawing from your history yourself. To delete your account and everything attached to it, or to get a copy of what is held, write to hello@inkword.app from the address on the account. It is done by hand, by a person, usually within a few days.

Children

Inkword is not meant for children under 13, and does not knowingly collect their data.

Changes

If this page changes in a way that matters, the date at the top changes and people with accounts are told by email.

Contact

Sumit Bedi · hello@inkword.app. A person reads it.