Inkling is designed to collect the minimum data needed to make the practice useful — and to be honest about every byte we touch.
Inkling ("the App," "we," "us") is a perception-training application published by Divine Karma ("the Publisher"). This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights.
When you create an account through our authentication provider (Clerk), we receive your email address, display name, and a unique user identifier. We use these to identify your account and contact you about important service changes. We do not market to your email address.
Each perception trial you complete generates a row in our database with:
This data powers your Insights screen. It is associated with your account and is never shared with third parties or other users.
Free-text reflections you write in the app are encrypted at rest using AES-256-GCM with a key derived per-user. We cannot read your journal entries from the database without your account-specific decryption material. Plaintext exists only in transit (over TLS) and in your local device memory while you are reading or writing.
The Decision Lockout filter scans entries for high-stakes phrases (medical, financial, legal, safety) and shows a soft warning, but the entry is always saved and the warning is for your benefit, not ours. We log only the category triggered (e.g., "financial") for service-quality monitoring; we do not log entry text.
If you submit an impression to the weekly community challenge and opt in to "share to community," your text and matched words may appear (anonymously, with your initials) on the next week's reveal page. The opt-in is asked at submit time, not buried in settings; the default is private.
We collect anonymized crash reports and performance telemetry (no entry content, no journal, no PII beyond user ID) to fix bugs and improve performance. You can disable diagnostic collection in Settings.
We do not use your data to train machine learning models for any purpose other than serving your own session, to personalize advertising, to sell to data brokers, or to profile you for credit, insurance, or employment purposes.
We share data only with the service providers required to operate Inkling:
| Provider | Purpose | Data shared |
|---|---|---|
| Clerk | Authentication | Email, display name, login events |
| Replicate | CLIP image scoring | Text and target image URL during an image trial |
| RevenueCat | Subscription management | Subscription status, purchase events |
| Fly.io / hosting provider | Service hosting | All data, encrypted at rest |
| Apple / Google | App distribution | Subscription receipts, device info per platform requirements |
Each provider is contractually obligated to handle data only on our behalf. None of them are permitted to use your data for their own purposes. We do not share data with advertisers, data brokers, or analytics providers that build cross-app profiles.
Depending on your location, you may have the following rights:
For users in California (CCPA), the EU/UK (GDPR), or other jurisdictions with specific privacy rights, additional procedures may apply. Contact privacy@divine-karma.com to exercise jurisdiction-specific rights.
Inkling is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it.
No system is perfectly secure. If you discover a vulnerability, please email security@divine-karma.com — we maintain a coordinated disclosure process.
We will notify you of material changes via in-app notification and email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
Divine Karma
Email: privacy@divine-karma.com
Web: divine-karma.com/inkling/privacy
For data protection inquiries in the EU/UK, please use the same email and mark "GDPR" in the subject line.