Privacy Policy
This Privacy Policy explains how Ink (“Ink”, “we”, “us”, or “our”) collects, uses, stores, and shares personal information when you use the Ink trading journal application and website (the “Service”).
If you have any questions, contact us at support@inklyn.app.
Who this Service is for
Ink is intended for users who are at least 18 years old. By using the Service, you represent that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at support@inklyn.app and we will delete it.
Information we collect
We collect only what we need to run the Service:
Information you provide:
- Account information — your email address and a password (stored only as a secure hash by our authentication provider), or your Google sign-in instead.
- Trading data you enter — trade entries and exits, prices, position sizes, profit and loss, dates and times, strategies, setup criteria, trading rules, sessions, notes, and grades.
- Uploaded images — chart screenshots or other images you attach to your trades.
- Account settings — your timezone, display preferences, and similar settings.
- Feedback you send — suggestions and bug reports: your text, the page you sent a bug report from (its path only), and a screenshot if you attach one (re-encoded in your browser, which removes photo data such as location).
Information collected automatically:
- Usage data — basic technical information needed to operate and secure the Service, such as your session state and interactions with features, and aggregate, privacy-friendly analytics (pageviews, referrers, general location, device type) collected via Vercel Analytics — this does not identify you individually.
- Product usage — unless you turn it off in Settings → Share usage data, we record, linked to your account, when you are active in the app, which section you are in, which features you use and which Pro previews you click. We don't record the pages' contents, your IP address or device details. We do this based on our legitimate interest in improving Ink; you can turn it off anytime in Settings.
- Country — when you sign up, we save your country code, derived from your connection by our hosting provider; we don't save your IP address for this.
- Subscription status — whether your account is on the free or paid plan, managed through our payment processor.
- How you found us — when you sign up, we save once to your account where you came from: the referring site's name, any utm_source / utm_medium / utm_campaign tags on the sign-in link, and the page you started signing up from — to see which channels work; it isn't shared with anyone. If your first visit had these, your browser keeps them on your device (local storage, not a cookie) for up to 30 days so they still count if you sign up later.
- Referral information — if you arrive through an affiliate's link, we keep the affiliate's code in a cookie for up to 60 days and, if you then create an account, record which affiliate referred you. Affiliates see only totals (clicks, sign-ups, paying customers) — never who you are.
- Fraud-prevention signals — to stop people referring themselves, we set a random device identifier cookie (kept up to 2 years) when you sign in or arrive through an affiliate link. We store it, together with a one-way, salted hash of your IP address (never the IP address itself), when you visit through an affiliate link or sign up through one, and for affiliates when they use the Service — and compare a referred sign-up's signals with the referring affiliate's own.
If you join the affiliate program:
- Application and payout details — the note you send with your application, and the payout address you give when you withdraw (a USDT wallet address or a Wise email). Payout details are used only to pay you and are visible only to Ink's administrators.
- Earnings records — your commissions, reversals and payouts, kept as financial records.
We do not ask for or store your brokerage or prop-firm login credentials, and Ink does not connect to or place trades on any trading account.
How we use your information
We use your information to:
- Provide the Service — store, display, and analyze the trading data you enter.
- Authenticate you and keep your account secure.
- Send you essential emails, such as sign-in links.
- If you ask to be notified about Pro, we'll email you at your account address when it launches.
- Operate, maintain, and improve the Service.
- Process subscription payments and manage your plan.
- Respond to your requests and provide support.
We do not sell your personal information, and we do not use your trading data for advertising.
How your data is stored and who processes it
Your data is stored in a private, per-user database with access controls that restrict each account's data to that account. We rely on a small number of trusted third-party service providers to run the Service. Each processes only the data needed for its function:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting, delivery, and privacy-friendly usage analytics (aggregate pageviews and performance metrics; Vercel Analytics does not use cookies and does not track individuals across sites).
- Paddle — payment processing and subscription management (Paddle acts as the merchant of record for purchases).
- Resend — sending transactional emails such as sign-in links.
- Google — optional “Sign in with Google” authentication, if you choose to use it, and the embedded YouTube demo video on our homepage, which is loaded only if you choose to play it.
These providers process your information on our behalf under their own privacy and security terms.
International data transfers
Ink is operated online and relies on service providers that may process and store data in countries other than the one you live in. Where personal data is transferred internationally, we and our providers rely on appropriate safeguards and the protections offered by those providers to keep your data secure.
Cookies and local storage
The Service uses first-party cookies and browser storage only to run the Service. It sets these cookies:
- Sign-in — the session cookies that keep you signed in, until you sign out or the session ends.
- Preferences (five, up to 1 year each) — your theme, where the navigation bar sits, the account you're viewing, your Trades page view, and the timezone for the news calendar.
- Affiliate program (two) — an affiliate's code when you arrive through their link (up to 60 days), and a random device identifier, set when you sign in or arrive through an affiliate link, used only to prevent referral fraud (up to 2 years).
Your browser's local and session storage also keep a few conveniences on your device, such as recently used emojis and where you were in a feed, and how you found us (up to 30 days, see above). We do not use advertising or third-party tracking cookies.
Link previews
When someone shares a link to inkX, apps like Discord, Telegram or X may show a preview of it. For public posts, public profiles and public groups, that preview can include the name, profile or group picture, @handle, the first part of the post, bio or description, follower or member counts, and a shared trade's result as shown on the post. Private profiles, posts in private groups, deleted or removed posts, and direct messages never appear in previews; a link inviting someone to a private group shows only the group's name and picture.
Other apps may keep their own copy of a preview after showing it. We refresh ours as soon as you edit, delete or make something private, but we can't change copies those apps have already stored.
Data retention
We keep your information for as long as your account is active. If you delete specific data (such as a trade) it is removed from your active records.
Product usage records are kept for 12 months; session records are then reduced to monthly totals per section, and feature records are deleted. All of it, and your country, is deleted with your account.
You can delete your account at any time in Settings → Delete account. Deletion is immediate and permanent: your trades, accounts, Days, journal notes, charts, Docs, strategies, rules, tags and stats; your posts, comments, likes, follows, stories and group chat messages; your profile, trader page and uploaded files; and groups you own that have no other members are deleted, and any active subscription is canceled.
A few records are kept after your account is deleted:
- Direct messages stay with the other person. You appear as “Deleted user”, and images you sent are deleted.
- Groups you own that have other members pass to one of their members.
- Reports you filed are kept, without your name, so moderators can finish reviewing them.
- Feedback you sent is kept, without your name; screenshots you attached are deleted.
- Records of affiliate payouts already made to you (amount, date and payout destination) are kept for accounting.
- Older funnel counts that can no longer be linked to you.
- Your username is reserved for 90 days so no one can use it to impersonate you.
- Our payment processor, Paddle, keeps its own payment records for legal and accounting purposes.
If you prefer, contact support@inklyn.app and we will delete your account for you within 30 days.
Your rights
You can:
- Request a copy of your trading data by contacting support@inklyn.app.
- Correct or update your information through the Service.
- Delete individual records, or delete your account and associated personal data in Settings → Delete account (or by contacting support@inklyn.app).
Depending on where you live, you may have additional rights over your personal data. To exercise any of these, contact support@inklyn.app.
Security
We take reasonable technical and organizational measures to protect your information, including per-user access controls and private storage for your trading data and chart images. A profile picture, if you upload one, is stored at a publicly reachable address so it can be displayed. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address any issues promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
Contact
If you have questions or requests regarding this Privacy Policy or your data, contact us at support@inklyn.app.