Privacy Policy

Inkpilot is an iPhone app made by Henry MacLane, an individual developer. In this policy, "we," "us," and "our" mean Henry MacLane. This policy covers the Inkpilot app, the Inkpilot server the app talks to, and this website.

1. What our server stores

When you make an account and use Inkpilot, our server stores:

• Account details. Your email address and your name. If you sign up with email, we store your password as a salted hash, never the password itself. If you use Sign in with Apple, we store the account ID Apple gives us, plus the name and email address Apple shares with us. If you chose Hide My Email, that's a private relay address from Apple.
• Age and Terms confirmation. When you make an account, you confirm you're 13 or older and agree to the Terms of Use and this policy. We store the time you did that.
• Sign in sessions. When you sign in, we store a hashed (scrambled) copy of your sign in token, when it was created, when it was last used, and when it expires.
• Usage records. For each Claude request, we store which feature it was for (Fill, writing, or Chat), which Claude model answered, whether it worked, how many tokens it used (tokens are how Claude measures text), what it cost, and when it happened. These records don't include your photos, your text, or Claude's answers.
• Subscription status. If you subscribe, we store what Apple tells us about it: the plan, Apple's transaction ID, an ID that links the purchase to your Inkpilot account, whether it's active or in a free trial, when the current period started and ends, whether it will renew, and whether it was a real purchase or a test purchase.
• Reports. If you use Report on a Claude answer, we store the text of that answer, the reason you picked, your note if you add one, which feature it came from, and the time. Reports are tied to your account so we can review them.

2. What passes through our server but isn't stored

Claude features have to send your content to Claude. It goes from your phone to our server, our server passes it to Anthropic, and the answer comes back the same way. Our server doesn't save this content and doesn't write it to its logs. Here's what gets sent for each feature:

• Fill: the photo of your page, the text your phone read from it, the blank spaces it found, the page size, and any notes you add for Claude. Reading the text happens on your phone first, using Apple's built in text recognition.
• Write and Letters: what you ask Claude to write, any photos you add, and the details you fill in on a template, which can include names and details about the people you're writing to.
• Chat: your conversation so far, any photos you add to that chat, and the results of plotter actions (like "The pen is up").

Before you use a Claude feature for the first time, the app asks if it's okay to send your photos and text to Anthropic's Claude. Your answer is saved only on your phone.

Please only send what you're comfortable sharing, and don't put sensitive information like ID numbers, passwords, or medical details into photos or prompts.

3. Anthropic (Claude)

Claude is made by Anthropic. Anthropic receives the content described above so it can generate answers, and handles it under its own terms and privacy policy: anthropic.com/legal/privacy.

Requests go to Anthropic from our server under our account, not yours. We don't send Anthropic your Inkpilot account details like your email address or name, unless you include them in what you ask Claude.

4. Cloudflare (hosting)

Our server and its database run on Cloudflare. Cloudflare carries the traffic between your phone and our server, which includes technical details like your IP address. Cloudflare and our server may keep basic logs, like the time of a request, the address requested, and error messages, for a limited time so we can keep Inkpilot running and fix problems. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

This website is hosted by Vercel, which may also keep basic request logs, like IP addresses, to deliver pages and protect against abuse.

5. Apple

Apple handles every payment in the app. We never see your card number or billing details. Apple tells our server about your subscription so we can give you the right plan. Sign in with Apple is also run by Apple. Apple's privacy policy: apple.com/legal/privacy.

6. Plotter orders (Shopify)

When you buy a plotter on this website, you check out on a Shopify page. Shopify runs the checkout and handles the payment, so we never see your full card number. To get your order to you, we receive your name, email, shipping address, your phone number if you give one, and what you ordered. We use that to ship your order, send you updates about it, and help with questions or returns. We share your name and address with the shipping company that delivers it. Shopify's checkout pages have their own cookies and privacy policy: shopify.com/legal/privacy.

7. What stays on your phone

These are saved only in Inkpilot's storage on your iPhone. Our server doesn't keep copies of them:

• Your profile photo
• Handwriting fonts you make, and the photos you make them from. Fonts are made on your phone, and those photos aren't sent anywhere.
• Recent plots, including the text that was written
• Chat history (the text only; photos you add to a chat aren't saved). Your conversation is sent to Claude with each new message, as described above.
• Letter templates you make, and drafts
• Your settings, like default handwriting, signature, return address, and custom paper sizes
• Plotter settings and the plotters you've connected to
• Your answer to the question about sending content to Claude
• Your sign in token (in the iPhone Keychain), plus a copy of your plan and usage so the app opens quickly

If your iPhone backs up to iCloud or a computer, these can be part of that backup. Deleting the app removes them from your phone.

When you plot, the app talks to your plotter (or the bridge on your Mac or Raspberry Pi) directly over your local Wi-Fi. That traffic doesn't go through our server. The app asks for Local Network permission for this.

8. How we use information

• To create and run your account and sign you in
• To give you the right plan and keep track of your Claude usage
• To send your requests to Claude and return the answers
• To prevent abuse, like limiting how many requests can be sent in a minute
• To review reports about Claude answers
• To answer you when you email support
• To follow the law

We don't use your information for ads, and we don't build profiles about you.

9. No ads, no tracking, no selling

Inkpilot has no ads and no analytics or tracking tools. We don't track you across other apps or websites, and we don't sell or rent your personal information. This website doesn't use cookies or analytics either. (Shopify's checkout pages, which open when you buy a plotter, are run by Shopify.)

10. When we share information

We only share information:

• With the service providers named above (Anthropic, Cloudflare, Apple, Shopify, and Vercel for this website), and only so they can do their part
• With the shipping company that delivers your plotter order
• When the law requires it, like a valid court order
• When it's needed to protect the safety, rights, or property of our users, the public, or us
• If Inkpilot is ever sold or moved to a new owner. This policy would keep applying to your information.

11. How long we keep it

• Account details, usage records, subscription records, and reports: until you delete your account.
• Sign in sessions: until you sign out, or after 90 days without being used.
• Content you send to Claude: our server doesn't store it.
• Support emails: as long as we need them to help you.
• Plotter orders: as long as we need them for shipping, returns, and the tax and business records the law requires.
• Backups: our database host keeps backups for a limited time, so deleted data can stay in those backups for up to 30 days.

12. Deleting your account

You can delete your account in the app at Account > Profile > Delete account, or by emailing support@inkpilot.co. This removes your account details, sessions, usage records, subscription records, and reports from our server right away.

Deleting your account doesn't cancel an Apple subscription. Cancel that in iPhone Settings > your name > Subscriptions. The Delete your account page has more details.

13. Your choices and rights

• You can change your name in the app any time.
• You can delete your account any time.
• You can say no when the app asks to send content to Claude. Plotting your own text and making handwriting fonts still work.
• You can email us to ask for a copy of the information we have about you, or to fix something that's wrong.

Depending on where you live, like California or the European Union, you may have more privacy rights. Email us and we'll help you use them. We won't treat you differently for using them.

14. Children

Inkpilot isn't for children under 13, and you have to confirm you're 13 or older to make an account. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has made an account, email support@inkpilot.co and we'll delete it. If you're under 18, please get a parent or guardian's permission before using Inkpilot.

15. Security

The app talks to our server over encrypted HTTPS connections. Passwords are stored only as salted hashes, sign in tokens are stored on our server only in hashed form, and your token on the phone is kept in the iPhone Keychain. No system is perfectly secure, so we can't promise your information will never be accessed without permission. If that happens, we'll work to fix it and tell you when the law requires it.

16. Where information is processed

Inkpilot is run from the United States. Cloudflare and Anthropic may process your information in the United States and in other countries.

17. Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date at the top.

18. Contact

Questions about privacy? Email support@inkpilot.co. Inkpilot is published by Henry MacLane.