Inkpot
Privacy Policy
Inkpot is a daily vocabulary app. This policy describes exactly what the app collects, what it deliberately does not, who can see what, and how to remove everything.
It is written to match what the code actually does. If the two ever disagree, the code is the bug.
Effective 4 November 2026
The short version
- You can use Inkpot without giving us your email or your real name.
- We do not use analytics, advertising, or tracking of any kind.
- We never sell or share your information.
- Most of what Inkpot knows about you stays on your phone. What we hold is what the leaderboard and your account need — and, if you are 13 or over and choose to fill them in, the display name, picture and one-line bio that other members see beside your score.
- If you are under 13, your name and anything you write stay on your phone. Our servers never receive them.
- You can erase your account and all of it from inside the app, at any time.
What Inkpot collects
If you just open the app and start learning
Inkpot creates an anonymous account for you automatically so your progress has somewhere to live. This account has no email address attached to it — it is a random identifier.
| What | Why |
|---|---|
| An anonymous account identifier | So your progress belongs to someone |
| Whether you are under 13 — a single yes or no | So the protections for children apply wherever your account is used, and so our servers can enforce them too |
| A display name you choose — only if you are 13 or over | So the leaderboard can show a name. Under 13, a placeholder like learner-3f9a2b is stored instead |
| Which of the worm's outfits you are wearing | So the leaderboard can show your picture |
| A one-line bio, if you write one — only if you are 13 or over | So other members can read it on your card. It is optional |
| The date your account was created | Housekeeping |
| Your XP and your thread | They decide your place on the leaderboard, so they have to live somewhere we can compare them |
| One row per day you finish — the date, how many questions you answered, and how many you got right | So your progress survives a new phone, and so a day can only be counted once |
We record the day's score, not your answers. Which word you were asked about, which options you were shown, and which one you tapped are never sent.
Stored only on your phone, never sent to us:
- Your ink, your leaves, and the outfits you own
- Which words you have collected
- Your goal and pace from the setup questions
- Your appearance and reminder settings
- The people you have added as friends or blocked
- If you are under 13: your name and anything you write
- Today's word and your current thread, shared with the Inkpot home-screen widget so it can draw itself
What other people can see
The leaderboard (the "wing") is shown only to members — people who have created an account — and lists only members who are 13 or over. For each of them it shows the display name, picture, bio, XP and current thread. Nothing else is published: not your email, not your age, not when you play.
Guests and anyone under 13 are never listed, and nobody under 13 can see the leaderboard.
If you choose to create a full account
Signing in with email or Apple is entirely optional, and only exists so your progress can survive a lost or replaced phone, and so you can join the leaderboard. Accounts with an email address are only for people 13 or over. If you create one:
- Your email address is stored by our authentication provider.
- That is all. We do not copy your email anywhere else, and your display name can never be your email address — the database rejects it outright.
If you sign in with Apple, Apple offers to share your real name with us. We deliberately discard it. Your display name is the one you chose in the app.
Your date of birth
When you first open Inkpot we ask when you were born, so that we can set up the right kind of account.
Your date of birth is never stored and never transmitted. It is used once, on your device, to work out a single yes-or-no answer — whether you are under 13. That answer is the only thing kept, and it is described in the table above. The date itself is not written to disk, not sent to our servers, and not recoverable.
If you report someone
Every member's card has a Report button, for a name or bio that should not be there. When you use it we store your account identifier, the name you reported, the reason you chose, and the time. A person reads every report. The reported member is not told who reported them.
If you buy Inkpot Pro
Apple takes the payment. We never see your card, your name, or your Apple Account email — Apple keeps those.
To know whether you have Pro, Inkpot uses RevenueCat, a company that checks App Store purchases on our behalf. RevenueCat receives your anonymous account identifier, the purchase and renewal records Apple provides for your Inkpot subscription (which plan, when it started, when it renews or ends, and the country it was bought in), and the basic technical details needed to do that, such as the app version and the type of device. It does not receive your email or your display name.
Children under 13 cannot buy Pro in the app.
If you send us a bug report
Profile → Report a bug opens an email in your own mail app. It is not sent unless you send it. To help us reproduce the problem it includes the app's version, your device model and iOS version, and the last few errors the app recorded on your phone. You can read and delete any of that before sending.
What Inkpot does not collect
We want to be specific rather than reassuring, so here is the actual list. Inkpot contains no analytics SDK, no advertising SDK, no crash or performance reporting service, and no third-party tracker of any kind.
We do not collect, and cannot collect:
- Location
- Contacts
- Photos, camera, or microphone
- Health or fitness data
- Device's advertising identifier
- Browsing or app-usage history
- Biometric data
Every row reads nil. Nothing in this list is collected, and none of it can be.
We do not build a profile of you, and there is nothing to sell even if we wanted to.
Notifications
If you turn on daily reminders, Inkpot schedules them on your device. The reminder never travels through our servers, and no push notification token is sent to us or to anyone else. Turning reminders off cancels them outright.
Reminders are never switched on for you — you have to ask for them.
Children
Inkpot is suitable for all ages and children are welcome to use it.
If you tell us you are under 13:
- You cannot create an account with an email address. You stay on the anonymous guest account, and the app plainly says why.
- The name you choose and anything you write stay on your phone. Our servers hold a placeholder name instead, and the database itself replaces any name or bio that reaches it for an account under 13 — so this does not depend on the app behaving.
- You never appear on the leaderboard, and you cannot see it.
For a child's account our servers hold only what the app needs to work: the random identifier, the placeholder name, the yes-or-no age answer, the outfit being worn, and the progress described above (XP, thread, and finished days). None of it is shown to anyone else, and none of it identifies the child.
We do not knowingly collect personal information from a child under 13. If you believe a child has provided us with personal information, contact us at the address below and we will delete it.
Where your information is stored
The account data described above is held by Supabase, our hosting and authentication provider, on servers in the United States (region us-west-2). Supabase processes this data on our behalf and does not use it for its own purposes.
If you buy Pro, the purchase records described above are held by RevenueCat, in the United States. RevenueCat processes them on our behalf, to tell the app whether you have Pro, and does not use them for its own purposes.
Everything else stays on your device. Your sign-in credentials are held in the iOS Keychain, the operating system's own protected storage.
Supabase and RevenueCat are the only companies we share your information with, and only to run the app. We do not sell or rent it to anyone, ever.
How long we keep it
Account data is kept until you delete your account. Once deleted it is gone immediately and permanently — there is no grace period and no archived copy.
Purchase records held by RevenueCat are kept for as long as the law requires us to keep records of sales, usually several years for tax purposes. They are linked only to your anonymous account identifier.
Reports are kept until they have been dealt with. A bug report you email us is kept in our inbox for as long as it takes to fix the problem, and then deleted.
Deleting everything
Open Profile → Delete account.
This erases your account and everything attached to it: your profile, your name, picture and bio, your streak record, any subscription record, your progress, any reports you have made, and any notification token. It also wipes everything Inkpot has stored on your phone, including what the home-screen widget shows. It happens straight away and it cannot be undone.
Deleting your account does not cancel a Pro subscription. Apple bills it, so cancel it in your iPhone's Settings → your name → Subscriptions, before or after you delete. Records of past purchases are kept for tax purposes, as described above, but once your account is deleted nothing in them leads back to you.
If someone reported your name before you deleted your account, that report keeps the name as it was reported, but no longer leads back to you.
You do not need to email us, and you do not need an account to do it — the option is there for guests too.
Your rights
Wherever you live, you can ask us for a copy of your information, ask us to correct it, or have it erased. The delete option above erases everything immediately. For anything else, write to us at the address below and we will answer within one month.
In the UK and the European Union, we use your information because it is needed to provide the app you asked for, and — for reminders — because you switched them on, which you can undo at any time. You can also object to how we use your information, ask for it in a portable form, and complain to your local data protection authority.
In California and other US states with privacy laws, we do not sell your personal information or share it for targeted advertising, and we never have. You will not be treated differently for using any of these rights.
Changes to this policy
If this policy changes in a way that affects what we collect, we will update the date at the top and note the change in the app before it takes effect.
Contact
Questions about privacy, or about this policy
Inkpot does not have a legal team. This policy is a plain-English, accurate description of the app's behaviour, written by its developer. It is not legal advice, and if Inkpot starts collecting more than it does today it should be reviewed by someone qualified.