Inky

Privacy policy

Last updated: 1 November 2026

The short version

Who we are

Inky is made by Appfex Ltd, a company registered in England and Wales (company number 12892382), registered office 167-169 GREAT PORTLAND STREET, 5TH FLOOR, LONDON, GREATER LONDON, W1W 5PF, ENGLAND. We're the “controller” of the data described here, which means we decide how it's used and we're responsible for protecting it.

If you have any questions about privacy, write to us at hello@sayinky.com.

Inky is made for children, set up by grown-ups

Inky is designed to be used by young children, with a parent or carer setting it up. We follow the UK Information Commissioner's Age Appropriate Design Code (the “Children's Code”): the app is private by default, it has no profiling, no advertising, no location features and no ways for children to talk to other people. Purchases and settings are behind a grown-ups-only check.

What we collect, and why

WhatWhy we need it
A random device code. When Inky first opens, it creates a random code and keeps it in the device's keychain. It isn't linked to your name, Apple Account or advertising identifier. To keep track of the free pages, subscription and page packs that belong to this device.
The text of each request (for example “a dinosaur eating ice cream on the moon”), the age setting and the app's language. To check the request is suitable for children and to draw the page. The original text is used for the check and then discarded. We don't store it.
The cleaned-up description and a few topic labels (for example “dinosaur”, “space”), with names, schools and other personal details removed. To draw the page, to let you redraw it, and to keep the service working properly.
The pages Inky draws. To send the page to the app. The app keeps its own copy in My pages.
Page and purchase records: when each page was made, which free page, subscription or pack it used, and the product, transaction number and dates of App Store purchases. To give you the pages you've paid for, to refund pages that fail, and to keep the accounting records the law requires.
Anonymous counts such as how many pages were drawn, how many requests were redirected and which language was used. These aren't linked to a device. To understand whether Inky works well and keep it safe.
A check that the app is genuine (Apple's App Attest). To stop people abusing free pages with fake or modified copies of the app. It contains no personal information.

What we don't collect

No names, email addresses, phone numbers, photos, contacts, location, advertising identifiers or voice recordings. We don't build profiles of you or your child, and we don't use your data to make automated decisions about you.

Speech and the microphone

Inky asks for permission to use the microphone and speech recognition so your child can say what they'd like. Speech is turned into text by Apple's speech recognition on the device itself: Inky requires on-device recognition, so the audio isn't sent to Apple, to us or to anyone else, and it isn't recorded. On a device that can't recognise speech offline, the Speak button doesn't work rather than sending audio away.

When a child says something personal

Children sometimes say their name, a friend's name or their school. Our safety check removes personal details like these before anything is stored or drawn. The page is drawn from the cleaned-up description only.

Lawful bases (UK and EU GDPR)

Who we share data with

We never sell data and never share it for advertising. We use a small number of service providers that process data only on our instructions and under contracts that protect it:

Our AI providers don't use the data we send them to train their models. They may keep it for a short time to detect abuse, then delete it.

We may also share data if the law requires it, or if a company takes over Inky, in which case this policy would continue to protect your data.

International transfers

Google, OpenAI and RevenueCat are based in the United States, so some data is processed there. When that happens, we rely on the EU–US Data Privacy Framework and its UK extension (the “UK–US data bridge”), or on standard contractual clauses approved by the UK and EU authorities, so your data stays protected to the same standard.

How long we keep data

Deleting the app removes the pages saved on the device. The random device code stays in the keychain, so your purchases come back if you reinstall.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. A parent or carer can do this on behalf of their child. To make a request, email hello@sayinky.com. Because Inky has no accounts, we may ask you for details that help us find the right device, such as the date of an App Store purchase or roughly when some pages were made. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Children in the United States (COPPA)

Inky is directed to children, so we've designed it to collect as little as possible. We don't collect children's names, contact details, photos, voice recordings or location. The random device code is used only to support the app's internal operations (keeping track of pages and purchases), never for advertising or profiling. Personal details a child says aloud are removed before anything is stored. Parents can review or delete their child's data, or stop further use, by emailing hello@sayinky.com.

Security

All data travels over encrypted connections (HTTPS). Our database and stored pages can't be reached directly by the app or the public: everything goes through our server, which checks each request. The device code is stored on our side only as a one-way fingerprint (a hash), and pages are only reachable through short-lived private links.

This website

SayInky.com uses no cookies, no analytics and no tracking. It's hosted by GitHub Pages, which may log visitors' IP addresses for security, as described in GitHub's privacy statement.

Changes to this policy

If we make important changes, we'll update this page and the date at the top, and where appropriate let you know in the app.

Questions?

Write to us at hello@sayinky.com. A real person will reply.