Privacy Policy

Last updated: [FILL IN BEFORE PUBLISHING]

This policy covers the Inkbase mobile app and this website. It describes what we collect, why we collect it, who else sees it, and how to get it removed.

Who we are

Inkbase is operated by [LEGAL ENTITY / YOUR NAME]. You can reach us at support@inkbase.ink.

You must be 13 or older

Inkbase is not for children. You need to be at least 13 to hold an account, and we ask for your date of birth during sign-up to check. If we learn that an account belongs to someone under 13, we delete it. Tattooing has its own higher age limits, which the app enforces separately.

What we collect

Account

• Your email address.
• Your password, stored only as a salted hash — we never see or store it in the clear.
• If you sign in with Google, the fact that you did, plus the email and name Google returns. We do not receive your Google password.
• Your date of birth. This is kept in a separate, private table, is never shown on your profile, and cannot be changed once set.

Profile

• First and last name, display name, username, and avatar image.
• Pronouns and gender, if you provide them.
• Your city and state, and approximate coordinates for that location, so we can show artists near you. This comes from the location you tell us, not from continuous background tracking.
• Whether you joined to get tattooed, to tattoo, or to look around.
• A phone number, if you add one. This is kept private alongside your date of birth and is not shown on your profile.

If you are an artist

• Bio, Instagram handle, website, booking email and booking link.
• Styles, placements, languages, what you will and won't tattoo, and your minimum client age.
• Pricing — rates, deposits, consultation fees and your cancellation policy.
• Shop affiliation and availability.
• Payout status held by our payments provider. We store an identifier and whether payouts are enabled; we never store card or bank details.

What you create and do

• Posts and flash you upload, including images and captions.
• Messages you send, and who they are between.
• Booking requests — preferred date, placement, size, description, budget, and any reference image.
• Reviews you leave, including the rating and text.
• Artists you save, and posts you like or comment on.

Technical

• A push notification token for each device you sign in on, and whether it is iOS or Android, so we can notify you about messages and bookings. You can turn notifications off in your device settings.
• Ordinary server logs from our hosting provider, kept briefly for security and debugging.

We do not use advertising trackers, and we do not sell your personal information.

What other people can see

Your profile — name, username, avatar, pronouns, city and state, and any artist details — is visible to other signed-in Inkbase users, along with anything you post publicly. Messages are visible only to you and the person you are talking to.

Your date of birth and phone number are never shown to other users. They are held in a private table that only you and our servers can read. Age limits are applied by checking your age on the server; other people are told only whether a rule is met, never your birthdate.

Why we collect it

• To create and secure your account, and to let you sign back in.
• To check you meet the age requirements — a legal obligation for tattooing.
• To show you artists near you and let people find you.
• To carry messages and booking requests between clients and artists.
• To send account email you asked for — confirmation and password reset — and notifications you have enabled.
• To keep Inkbase safe, and to investigate abuse or fraud.

Who we share it with

We use a small number of providers, and only for the purposes below:

• Supabase — hosts our database, file storage and authentication.
• Resend — sends account email such as confirmation and password reset.
• Expo — delivers push notifications to your device.
• Google — only if you choose to sign in with Google.
• Stripe — handles payments and artist payouts, and holds the financial details itself.

We may also disclose information where the law requires it. We do not sell your data or share it with advertisers.

How long we keep it

We keep your account data while your account exists. If you delete your account, we remove your profile, your posts, your messages and the private data attached to you. Some records may persist briefly in backups and server logs before ageing out, and we may keep the minimum needed to meet a legal obligation or resolve a dispute.

Your choices

• See or correct your information — most of it is editable in the app. For anything else, email us.
• Delete your account — email support@inkbase.ink from the address on the account.
• Get a copy of your data — email us and we will send it.
• Turn off notifications — in your device settings at any time.

Depending on where you live you may have additional rights over your personal data. We apply the choices above to everyone regardless of location.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to your data is enforced at the database level, per row, rather than only in the app — so private fields stay private even if a client asks for them directly. No system is perfectly secure, and we won't pretend otherwise.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.

Contact

Questions about privacy: support@inkbase.ink.