Privacy policy
Inko is a document scanner. Your documents are yours: we keep only what we need to run the app, we never sell data, and we show no ads.
Documents on your phone
Scans you keep on your phone stay on your phone. Scanning and cropping happen on the device using Google's on-device document scanner. These documents are never sent to us unless you move them to the cloud, share them or ask someone to sign them.
What we store when you use the cloud
- Your account: your name, email address and profile picture from Google, when you sign in with Google.
- Documents you put in the cloud: the PDF files, their titles, folders, page counts and sizes.
- Share links: when they were created and last opened, how many times they were viewed, and a salted hash of the link password if you set one. We never store the password itself.
- Signature requests: who was asked to sign, the signature images placed on the document, and an audit trail of each step (time, the person who acted and the IP address they acted from). This trail is what lets everyone involved prove what was signed and when.
- Notifications: a push token from Firebase Cloud Messaging, so we can tell you when someone asks you to sign.
- Premium: the Google Play purchase token and the subscription's expiry date. Payment details are handled by Google Play and never reach us.
If you use the app without signing in, cloud documents are tied to a random identifier created on your phone instead of an account.
Verifying documents
On the verify page your browser computes the file's SHA-256 fingerprint itself. Only that fingerprint is sent to us, never the file. If it matches, we show the document title, the signers' names and when they signed.
Who processes data for us
- Cloudflare hosts our servers, database and file storage.
- Google Firebase handles sign-in and push notifications.
- Google Play handles subscriptions and payments.
We don't use advertising or analytics services, and we don't sell or rent personal data.
Security
All traffic is encrypted with HTTPS. Completed signature requests are fingerprinted with SHA-256, digitally sealed and recorded in a hash-chained audit trail, so later changes can be detected.
How long we keep data
We keep cloud documents until you delete them or delete your account. Share links stop working when they expire or when you revoke them. Sign-in sessions expire automatically.
Deleting your data
You can delete any document in the app. To delete your whole account, go to Settings → Delete account in the app, or use the delete account page. This permanently removes your cloud documents, share links, signature requests on your documents, sessions, push tokens and subscription records.
If you signed a document someone else sent you, the copy they keep still shows your signature and its audit trail. That record belongs to their document. Deleting your account also doesn't cancel a Google Play subscription: cancel it in Google Play.
Children
Inko is not directed at children under 13, and we don't knowingly collect their data.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how it is used. Email us and we'll respond within 30 days.
Changes
If we change this policy, we'll update the date above. We'll tell you in the app before significant changes take effect.