Privacy policy
Last updated: September 2026
Who operates Inklings
Inklings (the “operator”) operates this service. For our legal entity name and mailing address, write to hello@inklings.shop and we'll reply within 2 business days. For any privacy question, request, or concern, email hello@inklings.shop — we read every message ourselves.
What we collect
- Account info: the parent's email address, optional name, and a Stripe customer ID for billing (if you subscribe or order a print).
- Child profile info: your child's first name and age. We never ask for a last name, birthdate, photo, or contact details for the child.
- Story & character inputs: the characters (including the name your child types for each one), worlds, story choices, and the story text and illustrations generated from them — stored in your account so characters can return across stories.
- Consent record: when you create an account we store your confirmation that you are the child's parent or legal guardian, along with the time, your IP address, and your browser's user-agent string.
- Voice input during Studio sessions: the Studio uses your browser's built-in speech recognition (the Web Speech API) to turn your child's spoken choices into text. Inklings never receives or stores audio — our servers only ever receive the resulting text transcript. Some browsers send audio to their own speech service to do the transcribing, so check your browser's privacy settings if that matters to you.
- Photos and drawings: Inklings does not currently accept photo or drawing uploads, so we do not collect photos or images of your child. Characters are built only from the name, animal, color, and personality traits your child taps in. We will update this policy before we ever add uploads.
- Usage records: counts of stories started and illustrations generated, tied to your account, used to apply plan limits.
- Sample-story requests: if you enter your email in the “Email me a sample story” form, we store that address (with the form it came from and the time) and email you a link to the sample story. To have it removed, email hello@inklings.shop.
- Usage analytics: basic, IP-anonymized product analytics (see Cookies below) so we can see which pages and features are used, and fix what's broken. Analytics run on the marketing site and parent pages, not inside the child Studio.
Who we share data with
We never sell or trade your data. We use a small number of named service providers to run Inklings, each of which only receives the data it needs to do its job:
- Stripe — processes payments and subscriptions. Stripe receives billing details directly; Inklings never sees or stores your card number.
- Anthropic (Claude API) — powers Sparky, the AI that writes your child's story pages. Story choices, character details, and the story text so far are sent to Anthropic to generate each page.
- OpenRouter and Together AI — generate the illustrations for your child's story pages from the story text and character descriptions. OpenRouter routes the request to an image model provider (currently Google's Gemini image model); Together AI is used as a fallback.
- Resend / our mail server — delivers transactional email (magic links, receipts, account notices) to your inbox.
- Lulu (our print fulfillment partner) — when you order a printed softcover, the finished book file and the parent's shipping address are shared with Lulu so they can print and ship your book.
How long we keep data
We keep your account, child profile, and story data for as long as your account is active. If you delete your account, we delete your account, child profiles, stories, and characters within 30 days. Some records (like order and payment history, the consent record above, and usage counts) may be retained longer where we need them for legal, tax, accounting, or security purposes.
Your rights as a parent
- Review or export everything we hold on your account and your child at any time:
/api/portal/export(a full JSON download), or from/portal/settings. - Delete your account and all associated data at
/api/portal/delete-account, also reachable from/portal/settings. - Revoke consent to us collecting your child's information at any time by emailing hello@inklings.shop or by deleting your account. Because that information is necessary to run the Studio, revoking consent means we close the account.
Cookies
ink_session— a session cookie that keeps you signed in after a magic-link or password login. Required for the site to function; not used for tracking.- Analytics cookies (Google Analytics 4) — set when our GA4 tag is enabled, with IP anonymization turned on. Used only in aggregate to understand traffic and usage. Analytics run on the marketing site and parent pages, not inside the child Studio (the Studio, the kids' library and the grown-up unlock screen load no analytics).
What we don't do
- No public profiles, no social discovery, no sharing surface.
- No selling or trading of your data, ever.
- No advertising. Inklings is a paid product.
- No collection of biometric data — Inklings does not accept photo or drawing uploads, so no face images or facial data are collected. We will update this policy before adding uploads.
COPPA & children
Inklings is built for children under 13. The parent creates and controls the account, and a story cannot be ordered as a printed book without your approval, and Inklings has no public sharing. We collect only what is necessary to operate the service, described above. You can review, export, or delete your account and all associated data at any time from your portal settings.
Contact
Privacy questions: hello@inklings.shop