Privacy Policy

Inkz is provided by ATİBA DİJİTAL EĞİTİM DANIŞMANLIK İNŞAAT LİMİTED ŞİRKETİ. The company is the data controller for the processing described in this policy.

Address: BARBAROS MAH. LALE SK. AGAOGLU MY OFFICE NO: 2 İÇ KAPI NO: 13 ATAŞEHİR/ İSTANBUL

For privacy, personal data, or account deletion requests: [email protected]

This policy applies to people who use Inkz as clients, tattoo artists, studio owners, or studio team members, as well as visitors to inkz.app.

Inkz is a technology platform for discovering artists and studios, publishing profiles and portfolios, messaging, booking requests, studio relationships, and AI-assisted tattoo try-on.

Account and identity information: name, username, email address, profile photo, date of birth, preferred language, account type, and email verification status.

Profile and contact information: biography, headline, phone number, website, country, city, address, tattoo preferences, work mode, experience, availability, and rates. Some of these fields are optional.

Studio information: studio name, description, contact details, location, team members, services, starting prices, and schedules. Business or authorization documents may also be uploaded during studio verification.

User content: posts, stories, captions, photos, videos, comments, messages, portfolio links, booking notes, job applications, offers, contract terms, reviews, reports, and support requests.

Location information: approximate or precise location when you allow it so we can show nearby artists and studios, plus any location you deliberately add to a profile, studio, post, or job listing.

Camera, photos, and files: information accessed only when you choose to take a photo, scan a QR code, or select and upload content from your device.

Tattoo try-on data: the tattoo design and body photo you select, body area, placement settings, and generated result.

Booking and professional transaction information: requested service, appointment time, client and studio notes, cancellation or dispute reasons, artist-studio relationships, job applications, offers, compensation ranges, and contract history.

Technical and security information: IP address, user agent, session and authentication records, device platform, operating system and app version, installation identifier, push token, permission status, notification delivery and open events, error codes, and abuse-prevention records.

Usage information: post views, likes, saves, follows, shares, searches, notification interactions, and similar in-app actions. Inkz uses this information for in-service counters and aggregate performance measurements.

You provide most information directly when you create an account, edit a profile, upload content, send a message, or use a feature.

We use your device's permission system for location, camera, photo library, notifications, and media-library access. You can decline or later remove a permission in device settings. If you decline, only the feature that needs that permission may be unavailable.

The app and our servers automatically create limited technical records needed for session security, notification delivery, and service operation.

If you use Sign in with Google or Sign in with Apple, we may receive an account identifier, name, email address, profile image, and other basic account information shown on that provider's permission screen.

To create your account, verify your identity, maintain your session, and protect account security.

To operate profiles, portfolios, discovery, following, messaging, bookings, studio management, job listings, offers, contracts, reviews, and notifications.

To show nearby artists and studios by distance when you give location permission.

To create an AI-assisted tattoo try-on from images you select.

To review content and account reports, protect community safety, prevent spam and fraud, enforce our rules, and resolve disputes.

To troubleshoot errors, track delivery problems, understand service use, and improve Inkz's reliability.

To send the notifications you choose and, only if you opt in, product announcements.

To meet legal obligations, respond to rights requests, and protect legal rights.

We process information needed to provide Inkz and perform our agreement with you.

Where required, we rely on your consent or device permission for location, camera and photo access, AI image processing, and optional marketing communications. You may withdraw consent at any time. Withdrawal does not affect processing already carried out.

We may rely on our legitimate interests for account and platform security, fraud prevention, measurement, service improvement, and the defense of legal claims, after balancing those interests against your rights.

We rely on legal obligations when we must keep records or respond to a lawful request from a competent authority.

When you publish a public profile or content, your display name, username, profile image, biography, portfolio, posts, studio information, and any location or contact details you choose to publish may be visible to other Inkz users.

Messages, private documents, drafts, private tattoo try-ons, and device information are not public. They are accessible only to people authorized for service operation, security, support, or legal compliance.

You can manage profile visibility, message permissions, blocks, and notification preferences in the app.

If you choose to use tattoo try-on, your tattoo design, body photo, selected body area, and placement settings are uploaded to Inkz over a secure connection. They are sent to Eachlabs only to create the image you requested.

Images sent to Eachlabs are not used to train AI models and are deleted by Eachlabs within 30 days.

Inkz may keep try-on inputs and results in private storage so your history remains available. Unsaved try-ons are deleted within 30 days. Saved try-ons remain until you delete them, remove them from saved items, or delete your account.

We do not use body photos for identity verification, facial recognition, or biometric profiling. Before generation begins, we ask for separate, explicit permission to share the images with Eachlabs. You can later withdraw this permission under Profile > Settings > Privacy and safety; withdrawal prevents future tattoo try-ons.

Cloudflare: R2 and Stream store, securely transfer, and deliver public and private photos, videos, documents, and tattoo try-on files.

Google Firebase Cloud Messaging: delivers push notifications and manages delivery errors using a device token and limited notification data.

Resend: sends verification codes, password resets, invitations, security messages, and service emails using your name, email address, language, and email content.

Eachlabs: receives the tattoo design, body photo, and placement information only when you request an AI-assisted tattoo try-on.

Google and Apple: authenticate you and provide basic account information when you choose one of these sign-in methods.

FlagCDN: provides country flag images in country-selection screens. Loading these images may send your IP address and standard network request information to FlagCDN.

These providers may process information only to provide services to us and are subject to appropriate privacy and security obligations. Inkz does not sell personal data. We do not use advertising SDKs, Google Analytics, or Sentry.

Inkz is free at launch. We do not currently offer paid plans, collect payment or card information, or display advertising in the app. We do not use or share personal data for ad targeting or ad measurement.

If we later decide to introduce paid plans, we will update this policy and our Apple and Google store disclosures before processing payment-related data. Where an app store processes a payment, Inkz will not receive your full card details; we may receive transaction identifiers needed to verify a subscription or purchase.

We may also disclose information where permitted by law and necessary for a legal obligation, user safety, fraud prevention, protection of rights, or a corporate transaction such as a merger or transfer.

We keep account, profile, message, booking, studio, job application, offer, and contract data while your account is active and for as long as needed to provide the relevant service.

Deleted posts and associated media are permanently purged within 30 days after a recovery and safety period. Expired stories are purged within 30 days; reported stories may be retained for review and appeals for up to 90 days.

Notification history is deleted after 90 days. Delivery errors and notification-open events are kept only as long as needed for security and service measurement and are deleted or aggregated within 12 months.

Unsaved tattoo try-on inputs and results are deleted within 30 days. Saved try-ons remain in Inkz's private storage until you delete or unsave them or delete your account. Eachlabs deletes its copies within 30 days.

When you request account deletion, access to the account is disabled immediately. Personal data is deleted from active systems or irreversibly anonymized within 30 days. Copies in backups are removed through the normal backup cycle within 90 days.

Limited fraud and abuse-prevention records may be kept for up to two years to verify a deletion request and prevent repeated violations. Transaction, contract, tax, or dispute records that the law requires us to retain are kept with restricted access for the applicable statutory period. We do not use retained records for marketing or profiling.

Aggregate statistics that can no longer identify a person may be kept for longer.

You can delete your account in the app under Profile > Settings > Account > Delete Account. If you cannot access the app, follow the instructions on the Account Deletion page at inkz.app or email us from the address registered to your account.

Account deletion does not merely freeze the account. Profile and sign-in information, content, private media, relationships, and app preferences are deleted or anonymized. We may retain limited records needed for the safety of other users or a legal obligation for the purposes and periods described above.

You can also ask us to delete specific content or a particular category of data without closing your account.

We protect data in transit with HTTPS/TLS. Private files are kept in access-controlled storage and delivered through expiring signed links. Production secrets are not embedded in the mobile app.

We use authorization checks, session management, rate limits, logs and audit trails, administrator role controls, abuse prevention, and service-provider access restrictions.

No security method is perfect. If a breach creates a risk to your rights and freedoms, we will provide the notices required by applicable law.

Some service providers may process information outside Türkiye or the country where you live. Where this happens, we apply contractual, technical, and organizational measures required by the KVKK, GDPR, and other applicable data protection rules.

Providers receive only the information they need for their service. We will reflect material changes to providers or processing locations in this policy and our store privacy disclosures.

The mobile app may keep your session key, unfinished onboarding or tattoo try-on draft, language and theme preferences, last safe screen, and installation identifier in secure device storage. Removing the app may clear local data, but it does not delete your server-side account.

inkz.app may use necessary cookies to remember your language and provide required session functions. We do not currently use advertising or third-party behavioral analytics cookies.

Depending on the KVKK, GDPR, and other laws that apply to you, you may have rights to access your data, obtain a copy, correct inaccurate information, request deletion, restrict processing, receive a portable copy, object to processing, and withdraw consent.

You can change profile, privacy, blocking, message, and notification preferences in the app. You can withdraw permission for AI tattoo try-on sharing with Eachlabs under Profile > Settings > Privacy and safety. Camera, location, photo, and notification permissions can be withdrawn in device settings.

To make a rights request, email [email protected] from the address associated with your Inkz account. We may need to verify that the account belongs to you. We respond within the period required by law, normally within 30 days.

If you are dissatisfied with our response, you may complain to the Turkish Personal Data Protection Authority or the competent data protection authority where you live.

Inkz is not intended for anyone under 18. We ask for a date of birth to enforce the age limit and prevent ineligible accounts.

If you believe we have processed information belonging to someone under 18, contact us. We will investigate and take the steps needed to close the account and delete the associated data.

We may update this policy when the product, our providers, or legal requirements change. The date at the top shows the latest revision.

If a change materially affects your rights or how we use information, we will provide notice through the app, email, or website. Where required, we will ask you to accept the updated policy or provide new consent.