Privacy Policy

INK operates INK from Lagos, Nigeria and is the controller of personal data described here. Registration: RC-INKAPP-2026. Privacy requests: privacy@inkapp.name.ng.

We collect account and profile details, date of birth, contact information, posts, comments, reactions, reports, direct and group messages, call metadata, uploaded media, device and browser information, IP address, approximate city, region and country inferred from IP address, authentication and security logs, usage events, time spent, notification interactions, AI instructions and outputs, and information you choose to provide. IP-based location is approximate and is not GPS or precise location. Passwords are stored as hashes, not readable passwords.

We process data to perform our contract with you; secure, operate and improve INK; deliver posts, messages, calls and media; provide support; prevent fraud and abuse; comply with law; and provide optional features you activate. For account security, INK remembers a pseudonymous device identifier and may email you when a previously unseen browser or device signs in. Optional AI, non-essential cookies, promotional email and any future identifiable commercial-data use require an appropriate separate choice where consent is required.

Public posts and profiles can be viewed, copied or shared by others. Private messages are stored to deliver conversations and are not sold as commercial data products or used by INK to train general AI models. Private content may be processed for safety, legal compliance, or an AI feature activated by a conversation participant. Messages are not end-to-end encrypted unless INK expressly says otherwise.

If you use INK AI, the selected text, instructions and necessary context may be sent to configured AI infrastructure. A recipient may enable AI auto-response, in which case an incoming message and limited conversation context may be processed to prepare and send a response on that recipient’s behalf. Auto-response is optional, off by default, auditable by its owner and subject to safety limits. Do not use it for emergencies, medical or legal advice, payments, credentials or binding commitments. See the AI Transparency Notice.

INK processes participant identifiers, timestamps, duration, connection and quality data. Depending on WebRTC routing, network addresses may be exchanged with a peer or relay provider. INK does not record call audio or video unless a feature clearly requests permission and says otherwise. INK is not an emergency service.

INK uses activity signals for feed delivery, suggested contacts, unread and relationship reminders, time-spent and health prompts, weekly engagement reports and service improvement. You may control optional email and notification features in settings as those controls become available.

We use service providers for media delivery, email, AI, GIF search, hosting, calling and infrastructure. Processing may occur outside Nigeria. We use contractual, security and transfer safeguards appropriate to the provider and destination. See the Subprocessor List.

• Account/profile data: while active, then deletion subject to legal and security exceptions.
• Messages/content: until deleted under available controls or the relevant account is deleted.
• Call and security metadata: only for the operational, safety and legal period documented internally.
• AI queue/activity records: for service delivery, audit and safety, then removed under the applicable schedule.
• Backups: removed on a rolling schedule after primary deletion.

INK will publish more specific periods as production infrastructure is finalized and will not retain data longer merely because storage is inexpensive.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, withdrawal of consent or objection to certain processing. You may complain to the Nigeria Data Protection Commission. We may verify identity before acting.

INK is for people aged 18 or older. We do not knowingly permit children to create accounts. If we learn that a child has registered, we may suspend and delete the account while preserving information strictly required for safety or law.

We use access controls, password hashing, session protection, transport security where deployed, logging and other organizational and technical safeguards. No system is completely secure. We investigate incidents and notify authorities or affected people when applicable law requires it.

The current account-deletion control permanently removes account data handled by that workflow and cannot be undone. Some backups, reports or security evidence may remain for limited lawful periods. Material policy changes will be announced appropriately; new consent will be requested where required.