Privacy Policy

Inksound ("the app") is published by Ruby A&A Ventures LLC ("we"). This policy explains what the app does with your information.

Notes, drawings, typed text, images and audio recordings you create in the app are stored on your device. We do not upload them to our servers and we cannot read them, with one exception that you choose each time: a picture of a selection you send with Ask AI's "Answer here" (see Ask AI below). If you delete the app, your notes are deleted with it unless you exported them.

When you choose to share or export a note (PDF or note file), the file is handed to the app you pick (for example Mail or Files) and is governed by that app's policy.

In versions of the app that offer it, you can connect your Google account in Settings and back up your notes to your own Google Drive. Connecting is your choice: until you connect, Inksound itself sends nothing to Google Drive, and the rest of the app works the same without it. Signing in with Google here only connects your Drive; Inksound has no accounts of its own. A backup you save yourself with "Back up all notes", through your device's share or save window, goes wherever you choose and is handled under that service's own terms; Inksound does not receive it.

• What Inksound can access. Only what Google's consent screen lists when you connect. In your Google Drive, that means the files Inksound itself creates (a folder named Inksound Backups and the backups in it): Inksound asks only for Google's drive.file access, so it cannot see, open, change or delete any other file there. From your Google account, it means basic details: the email address and Google's ID for the account, and with some sign-in methods also your name and profile picture. Of these details, Inksound uses only the email address, to show which account is connected, as in "Connected: name@gmail.com". Google's sign-in, built into the app, also receives your device's IP address, which Google may use to prevent fraud, under Google's privacy policy.
• What it does with them. Inksound uses this access only to back up and restore your notes: it creates the Inksound Backups folder, uploads each backup you make (one file with your notes, recordings, subjects and saved items), lists your backups so you can choose one to restore, and downloads the one you choose. It can also delete older backups it made in that folder, to keep only your most recent ones. It never deletes anything else.
• Nothing goes to our servers. Backups go straight from your device to Google Drive over an encrypted connection, and come back the same way when you restore one. They never pass through Inksound's servers, and we cannot see them. Your account details and your sign-in tokens are not sent to us either. Google keeps the backups in your Drive under Google's terms and privacy policy, https://policies.google.com/privacy, and they count toward your Google storage.
• On your device. The sign-in tokens that let Inksound reach your Drive stay on your device, kept by the system: in the Keychain on iPhone and iPad, and on Android in the Keystore or by Google Play services. The app also keeps the connected account's email address on the device, to show it in Settings.
• Disconnecting and removing access. To disconnect, open Settings in Inksound and tap Disconnect under Google Drive: the app forgets the account and removes its tokens from your device. To remove Inksound's access on Google's side as well, go to myaccount.google.com/permissions, choose Inksound and remove its access. You can do this at any time, even without the app. Disconnecting or removing access does not delete your backups: they stay in your Drive until you delete them (see Delete your data).
• Google's user data policy. Inksound's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. We use that information only for the backup and restore described here. We do not sell it or use it for advertising or to train AI models, and because it never reaches our servers, no one at Inksound can read it. A note restored from a backup is again an ordinary note on your device, and the rest of this policy applies to it.

• Microphone: only while you record audio in a note. Recordings are saved in the note on your device.
• Photos and camera: only when you add a picture to a note.

Subscriptions and the lifetime purchase are processed by Apple (App Store) or Google (Google Play). We use RevenueCat, Inc. to verify purchases and unlock Pro features. RevenueCat receives your purchase history and an anonymous app user identifier; it does not receive your notes. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy.

Ask AI, the button on the bar above a selection, offers two ways to ask about what you selected:

• Send to an AI app. The app makes a picture of your selection and hands it to your device's share sheet (in a browser it copies the picture or downloads it). You choose the app it goes to, and that app's own policy applies. Inksound sends nothing: no picture, no question and nothing else goes to us or to anyone else.
• Answer here, in versions of the app that offer it. When you tap Ask, the app sends a picture of your selection (handwriting, typed text, or the part of a PDF page or photo under it) and the question you typed, if any, over an encrypted connection to Inksound's server (a Cloudflare Worker), with the language the answer should be in, the app's version and platform, and which version of the notice below you agreed to. The server sends the picture and the question to Google's Gemini API to produce the answer and returns the answer to the app, where you can copy it or add it to the note as text.

What happens to what Answer here sends:

• We do not keep it. Our server handles the picture, the question and the answer in memory only, and does not store or log them, unless you report an answer (below). Its logs hold the outcome of each request and the day's counts, never the picture, the question, the answer or an identifier. Cloudflare, which runs the server, sees your device's IP address in order to deliver the request, as for any website; our server does not log or keep it.
• Your country. Our server reads the country that Cloudflare derives from your IP address, only to know whether Answer here may be offered there (below), and does not keep it.
• Daily limits. So that everyone gets answers, the app also sends a random install id that it makes for this purpose. It is not linked to you, to your account or to your device's identifiers. The server keeps only a one way hash of it with the number of answers that day, and deletes it within two days. So that one network cannot use up everyone's answers, the server also counts each day's questions and reports from each network address: it keeps those counts under a keyed one way hash of the day and the address (the whole IPv4 address, or the first half of an IPv6 address, and also its first 48 bits), never the address itself, and deletes them within two days with the other counts. Cloudflare's rate limiter also counts the requests from each address for one minute. The server sends nothing about you to Google.
• Google. The answer comes from Google's Gemini API, used on its free tier. Under Google's terms for that tier, Google uses what is sent to it and the answers to provide and improve its products and machine learning technologies, and human reviewers may read them (Google says it disconnects them from the account they came through first). Google's privacy policy applies: https://policies.google.com/privacy. If we move to Google's paid service or to another provider, this section and the notice in the app will change first. Each request says which version of the notice you agreed to, and our server answers it only through a provider that version names, so a new provider never receives what you send from an app whose notice does not name it.
• Do not send personal information. Before your first question the app shows a notice that says this, with a link to this policy, and Settings shows it too; nothing is sent until you tap Agree and continue. Select only the part you are asking about, and leave out names, ID numbers, faces, contact details and anything else that is personal or confidential.
• Withdrawing your agreement. You can withdraw it at any time in Settings > Ask AI > Withdraw consent. After that nothing is sent until you agree to the notice again, which shows before your next question. Even while you agree, nothing is sent unless you tap Ask.
• Where it is not offered. Google allows only its paid service for users in the European Economic Area, Switzerland and the United Kingdom, so there Answer here says it is not available yet. It is also not offered through the Tor network, where every request can come from a new address.
• Not stored, so nothing to delete. Because we keep neither the picture nor the question (apart from the reports you choose to send, below), there is nothing of them for us to delete or hand over. What Google kept is covered by Google's policy.
• Reporting an answer. Report, under an answer, asks what is wrong with it: offensive or inappropriate, wrong, or something else. Only when you choose one, the app sends a report to Inksound's server: the answer, your question, the reason you chose, the app's version, the platform (iOS, Android or web), the language of the answer (Hebrew or English), a code our server gave with that answer to show it came from our server, and when it was sent. It never includes the picture, the install id or your device's address, and it is not sent to Google. We use reports only to review the AI's answers, and we keep each one for up to 12 months, then delete it. A report holds nothing that identifies you. To have yours deleted sooner, write to us through the support page (below). Put Delete my data at the start of your message, followed by your question or a few words of the answer, and we will find your report and delete it.
• Recovery copies. Our database (Cloudflare D1) keeps a recovery history for up to 30 days, so the counts and reports we delete are gone from it too within 30 days.

The app contains no advertising and no third-party analytics.

The app is not directed at children under 13 and does not knowingly collect their personal information.

We will update this page if this changes. RevenueCat, Cloudflare and Google receive only the data this policy describes, including what Google's sign-in receives when you connect Google Drive, and protect it at least as this policy states.

Questions, or a request to delete data: write to Ruby A&A Ventures LLC through the support page, https://inksoundapp.wordpress.com/support/ (for a deletion, put Delete my data at the start of your message), the support address on the app's store page.

The support page is on WordPress.com, which Automattic runs: what you send with its form (your name, email address and message) reaches us through WordPress.com, which handles it for us. We use it only to answer you and to do what you ask.