Privacy Policy

Who we are

Inkora is run by [Company name], [Company address] (CVR [CVR number]). We decide why and how your personal data is used, which makes us the data controller. You can reach us at [Contact email].

What we collect

• Account: your email address, username, display name and password (stored hashed by our authentication provider).
• Profile: anything you choose to add — bio, genres, links, avatar and cover images, the look you pick for your profile.
• What you write and create: books, chapters, characters, locations, notes and the rest of your story world; posts, comments and messages you publish; groups and challenge entries. What others can see is set by the visibility you choose for each.
• Activity: words written and writing sessions (which power your stats, streaks and challenges), achievements, follows, likes and saves, and notifications.
• AI use: a record of each AI request — which feature, when, and its cost — so we can apply your plan's allowance. See "AI features" below for what is sent.
• Payments: what you bought and when. Card details go straight to Stripe and never reach us.
• Technical data: IP address and browser details, which our hosting and database providers process to keep the service running and secure.

Why we use it, and on what basis

[Lawyer to confirm each basis.] In outline:

• To provide the service you signed up for, including your books, community features and payments — performance of a contract.
• To keep the service safe, prevent spam and abuse, and fix faults — our legitimate interests.
• To keep records the law requires, such as accounting records — legal obligation.
• Anything optional, such as marketing email if we ever send it — your consent, which you can withdraw.

AI features

When you use an AI feature (Ask Inkora, the continuity check, the writing assistant), the text you are working on and relevant parts of your story world — for example characters, locations, plot points and chapter excerpts — are sent to Anthropic, which generates the response. We send only what the feature needs. Inkora does not train AI models on your writing. [Lawyer: confirm and describe how Anthropic handles and retains data under the terms we use.]

Who we share it with

We use these companies to run Inkora. They process data on our behalf:

• Supabase — database, sign-in and file storage. Data region: [region].
• Stripe — payments and subscriptions.
• Anthropic — AI features (see above).
• [Hosting provider] — hosting.
• [Email provider] — the emails we send, such as sign-in confirmation and password reset.
• [Error-monitoring service, if used — e.g. Sentry — and Cloudflare, for bot protection on sign-up, if enabled.]

We do not sell your personal data. [Lawyer: international transfers and the safeguards relied on.]

How long we keep it

• Your account data and writing are kept until you delete your account.
• When you delete your account, your profile, books, posts, comments and uploaded files are deleted straight away. Copies may remain in encrypted backups for up to [N] days.
• Stripe keeps its own payment records for as long as the law requires. [Accountant: how long we keep our own transaction records.]

Your rights

• See and take your data: Settings → Your data → Download my data.
• Delete it: Settings → Delete my account.
• Correct it: edit your profile and content in the app, or write to us.
• Object or restrict: write to us at [Contact email].
• Complain: you can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or the authority in your own country.

Children

Inkora is for people aged 16 and over. If you think a younger person has signed up, tell us and we will delete the account. [Lawyer: confirm the age.]

Changes

If we change this policy in a way that matters, we will tell you and ask you to accept it again.