Your words, your data.

• Account details — your email address, and any name, username or bio you choose to add.
• Your writing — the titles, bodies, tags and drafts you create, and whether you publish under your name or anonymously.
• Activity — the pieces you like or save, and reports you file.
• Notification preferences — whether you've opted into browser push or email notifications, and (for push) an anonymous device subscription token.
• Basic technical data — a session cookie to keep you logged in, and standard server logs (e.g. IP address, browser type) used to keep the service secure.
• If you sign in with Google — your email address and basic profile name from Google. Nothing more.

To create and secure your account, show your writing to readers, send the notifications you asked for, prevent spam and abuse, and keep the service running. That's it — no profiling for advertising.

We keep the list of companies that handle data on our behalf short and deliberate:

• Supabase — our database and authentication. Your account and writing are stored here (primary region: Mumbai, India).
• Vercel — hosts and serves the website.
• Groq — runs the automated checks. When you publish, your piece's text is sent to Groq to screen it against our guidelines and to estimate whether it reads as machine-written. If you scan handwriting, the image is sent to Groq to convert it to text.
• Resend — sends our emails (e.g. a note when someone likes your piece, or the newsletter).
• Google — only if you choose “Continue with Google” to sign in.

We never sell your personal data or your writing, and we don't share it beyond the processors above.

We use a single essential cookie to keep you signed in. We don't use advertising or cross-site tracking cookies, and there are no third-party trackers on Inkwell.

You're in charge of your data. At any time you can:

• Delete a single piece — from the piece itself.
• Delete your whole account — from Settings. This permanently removes your profile, every piece, and your saved collection.
• Edit or correct your profile and writing whenever you like.
• Turn off notifications — push and email, independently, in Settings.

Depending on where you live (including under India's Digital Personal Data Protection Act and the GDPR), you may also have the right to request access to, or a copy of, your data. Email us and we'll help.

We keep your data for as long as your account exists. When you delete a piece or your account, it's removed from our live database immediately; residual copies may persist for a short time in encrypted backups before they age out.

Inkwell isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has given us personal information, contact us and we'll remove it.

If we change how we handle your data, we'll update this page and the date at the top. For significant changes, we'll do our best to let you know directly.