Privacy Policy

Effective date: July 18, 2026

This policy describes how InkLab, provided by Deniz Ozagac (the "Developer"), collects, uses, and shares information when you use the InkLab iOS app (the "App").

1. What information do we collect?

Information you provide

Name. During onboarding you can enter a first name so the App can personalize itself. Providing it is optional.

Tattoo ideas and instructions. The text prompts, style choices, and placement descriptions you enter to generate or preview tattoo designs.

Photos. Photos you take with the camera or pick from your photo library when you preview a tattoo on your skin or preview a tattoo removal.

Payment data. Subscription purchases are processed by Apple. The Developer never sees or stores your card details. Subscription status is managed through RevenueCat.

Information collected automatically

Anonymous user ID. The App creates an anonymous identifier the first time it runs. It exists so your creations can be stored in a private cloud space that only your device can access. No account, email, or password is needed.

Usage and diagnostics data. The App uses Firebase Analytics and Amplitude to understand how features are used (for example, which screens are opened and which actions are taken), plus crash and error reports. This data is tied to the anonymous ID, not to your name or email.

Device data. Basic device information such as model, operating system version, and language may be collected by the analytics services above.

2. How do we use your information?

• Service delivery. Your prompts and photos are used to generate the designs and previews you request.
• Your library. Generated designs and try on previews are saved to your private cloud space so they appear in your Creations across reinstalls.
• Customer support. If you email us, we use your message to respond and resolve issues.
• App improvement. Aggregated usage data helps us understand which features work and which need fixing.

2A. How is AI content generated?

When you generate a design, try a design on your skin, or preview a tattoo removal, your prompt and any photo you provided are sent through the Developer's servers to Google's Gemini API, which generates the resulting image. Google processes this data to provide the result.

Generated designs and try on previews are saved as your creations. Tattoo removal previews are shown once and are never stored on our servers.

3. Photos and camera

The App only accesses your camera or photo library when you start a flow that needs a photo, and asks for permission first. Photos are uploaded solely to produce the preview you requested and to save the result to your private creations. Your photos are never made public, never shown to other users, and never used for advertising.

4. Will your information be shared with anyone?

The Developer shares information only with the service providers needed to run the App, for legal compliance, rights protection, or business obligations:

• Google Firebase. Cloud storage for your creations, anonymous authentication, analytics, and remote configuration.
• Google Gemini. AI image generation, as described in section 2A.
• RevenueCat. Subscription management.
• Amplitude. Product analytics.
• Apple. Payment processing for subscriptions.

Business transfers. Information may be shared during mergers, asset sales, financing, or business acquisitions.

Personal data sales. The Developer does not sell personal information to third parties.

5. Do I need an account?

No. InkLab has no sign up, sign in, email, or password. The anonymous ID described above is created automatically and is not linked to your identity. If you delete the App, the link between your device and that ID is lost. To have the creations stored under your ID deleted from our servers, contact us at the email below.

6. What is our stance on third-party websites?

The App is not responsible for the safety or privacy practices of linked third-party websites. Users should review third-party privacy policies directly.

7. How long do we keep your information?

Your creations remain in your private cloud space until you delete them in the App or ask us to delete them. Analytics data is retained only as long as necessary for the purposes above or as required by law, after which it is deleted or anonymized.

8. How do we keep your information safe?

The Developer implements technical and organizational security measures to protect personal information, including access rules that restrict your cloud creations to your anonymous ID. However, no electronic transmission or storage technology can be guaranteed to be 100% secure, and users access the App at their own risk.

9. What are your privacy rights?

Regional rights

Residents of the European Economic Area and United Kingdom possess rights including access to personal information, rectification, erasure, processing restrictions, and data portability. Users may withdraw consent at any time. EEA and UK residents may complain to their data protection supervisory authority.

Swiss residents can contact data protection authorities through the Federal Data Protection and Information Commissioner.

Your data

You can delete individual creations directly in the App. For full deletion of the data stored under your anonymous ID, contact support at the email below.

10. Tracking

InkLab does not track you across apps and websites owned by other companies, and does not use your data for targeted advertising. iOS additionally provides App Tracking Transparency settings, which the Developer respects.

11. Do California residents have specific privacy rights?

CCPA privacy notice

Resident definition. California residents include individuals in the state for non-temporary purposes or domiciled in California outside the state temporarily.

Collected personal information categories:

• Identifiers (anonymous user ID)
• Personal information you provide (name, prompts, photos)
• Usage data
• Diagnostics data

Data usage and sharing. Information collection and sharing practices are detailed throughout this privacy notice.

Service provider disclosures. The Developer may disclose information to service providers through written contracts for processing on behalf of the business.

Personal data sales. The Developer has not disclosed or sold personal information in the preceding 12 months and will not sell future information.

Consumer rights

• Right to deletion. Users may request personal information deletion subject to legal exceptions.
• Right to know. Users may request information regarding collection practices, categories collected, usage purposes, third-party sharing, and business purposes.
• Right to non-discrimination. The Developer will not discriminate against users exercising privacy rights.
• Verification process. Identity verification is required through previously provided information or communication methods. Additional information may be requested for security purposes.

12. Do we make updates to this notice?

The privacy notice may be updated periodically to maintain legal compliance. Material changes are communicated through prominent notices or direct notification.

13. How can you contact us about this notice?

Email: contact@marcana.app

14. How can you review, update, or delete the data we collect from you?

You can delete creations in the App at any time. To request access, modification, or full deletion of your data, email contact@marcana.app.