Legal
Last updated: October 2026
Inkrune (“Inkrune”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. It applies to all users of the Inkrune platform (“Platform”) and reflects our commitment to applicable data-protection laws.
This Policy explains what we collect, why, and the legal basis for each use. Where we rely on your consent we ask for it separately and you can withdraw it at any time. Where we rely on our legitimate interests, you can object, as explained below.
We serve users globally. Where international data transfers occur, we apply appropriate safeguards to protect your data consistent with applicable law.
Account Information: When you register, we collect your name, email address, and authentication data (OAuth tokens via Google Sign-In). Authors who want to receive payouts additionally provide identity-verification (KYC) details and bank account details for payout configuration.
Reading Data: We record your reading history (which chapters you have read, when, and how long you spent on each) to power your shelf, reading progress, and our recommendation engine. This data is pseudonymised and linked to your account ID.
Payment Information: Reader payments are handled by our third-party payment processors. We never see or store card numbers, only the tokenised payment method references and transaction records the processor returns.
Author Bank Details: Bank details (account holder, bank name, account number, IBAN, routing, SWIFT or local bank codes) are collected only from authors who opt in to payouts, and only for the purpose of paying you. Account numbers, IBANs and routing/SWIFT/bank codes are stored encrypted at rest using application-layer encryption (AES-256-GCM, with a key held separately from the database) and are only ever displayed in masked form (for example “•••• 1234”), to you and to our own staff alike.
Usage Data: We collect standard web analytics data including IP address, browser type, operating system, pages viewed, and referral URLs. This is used in aggregate to improve the Platform.
Content: Authors' submitted stories, chapter text, and profile information are stored as part of the service.
To provide and operate the Platform: authenticating your identity, delivering chapter content, tracking subscription status, and enabling the shelf and reading history features.
To improve the Platform: analysing usage patterns, diagnosing bugs, and developing new features.
To power AI features: your reading history informs personalised recommendations. Chapter content submitted by authors is processed by our AI pipeline to generate recaps, lore codices, and relationship maps. We do not use your personal data to train external AI models.
To process payments and send billing communications: invoices, subscription renewal notices, and payout confirmations.
To communicate with you: important service updates, policy changes, and responses to your support queries. We do not send unsolicited marketing emails without your explicit opt-in.
We do not sell your personal data to third parties.
Payment Processors: We share payment-related data with our payment processors solely for the purpose of processing transactions. Each maintains its own privacy policy and is bound by industry-standard PCI-DSS compliance requirements.
Infrastructure Providers: Your data is hosted on reputable cloud infrastructure. These providers process data only on our instructions and under data processing agreements that comply with applicable law.
AI Model Providers: Chapter content may be processed by third-party large language model APIs (such as OpenAI, Anthropic, and Google) for AI feature generation. Processing is governed by our agreements with these providers. We do not share user account or reading data with AI model providers.
Legal Requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Inkrune, our users, or the public.
Purpose: we use authors’ writing to train, evaluate and improve small AI models that Inkrune runs itself, such as autocomplete, a detector for AI-sounding prose and story tracking. We do not use your personal data to train external AI models, and we never sell or share training data.
Legal basis: our legitimate interest in improving the Platform, together with the optional licence in our Terms of Service. We wrote a legitimate-interest assessment and a data protection impact assessment before starting; you can ask us for a summary. You can object at any time (see “Your choice”).
What we use: chapters and drafts you write on the Platform, the outputs of AI features you used, and what you did with them (accepted, edited, regenerated or dismissed, and how long you took). What we never use: readers’ comments, reviews or messages, your email, payment or identity details, or anything from authors who turned training off. Reader activity is used only as anonymous totals.
How we protect it: account and novel identifiers are stored separately from the text, never inside it. Email addresses, phone numbers, links and similar details found in text are masked before any use. Training data is kept in private storage; every export and download is logged.
When it starts: nothing is used before the AI Training Licence in our Terms takes effect, and then only after you have seen our notice and 14 days have passed without you turning it off.
Who processes it: training runs on infrastructure Inkrune controls or on compute providers acting on our instructions under contract. Outputs of AI providers whose terms do not allow it are excluded.
Retention: training records are kept for up to 3 years from their last use while your choice allows it. Datasets are versioned; we keep the latest three and any used by a model in service, and delete others after 12 months. For authors who are not eligible we keep no text at all, only usage counts (tokens, cost, and whether a suggestion was accepted), deleted after 13 months.
Retraining: models are retrained at least every three months. Turning training off, or deleting your account, removes your work from the next dataset; a model already trained cannot unlearn it, which is why we wait 14 days before any use and retrain regularly.
Your choice: turn training off in Account → AI & data, or exclude a single novel in its settings. It takes effect at once and never affects your Ink, features or earnings. Your full history of choices is shown there, and is included if you ask us for your data. Deleting your account stops all use at once and deletes your stored training text within 30 days, except for novels under a publishing contract with Inkrune.
Account data is retained for as long as your account is active.
When you ask to delete your account, your account is scheduled for deletion 30 days later rather than deleted at once. From the moment you ask, your account is deactivated: you are signed out everywhere and cannot use the Platform, and any active paid subscription is cancelled with the payment provider (any remaining paid period is forfeited). We email you when you ask and again 7 days before the deletion date.
You can't ask to delete your account while money is owed to you or while one of your novels is under an active contract with Inkrune.
You can change your mind. Until the deletion date, you can cancel the deletion yourself: sign in with the same Google account and choose “Cancel deletion” on the page you are shown. Your account, novels and data are restored. Scheduled chapters of novels that were going to be removed are kept as drafts for you to reschedule, and a cancelled subscription is not restarted. If you have lost access to your Google account, contact privacy@inkrune.in.
Your novels during the 30 days. Novels that will be removed stay readable during the 30 days and are marked “Leaving soon”; new purchases of their chapters are paused.
On the deletion date, the following is removed in a single operation: your name, email address, avatar and Google sign-in link are erased from your account record; your profile, reading history and progress, shelves and bookmarks, notifications and notification preferences are deleted; any bank account and identity-verification (KYC) details are deleted; and your account identifier is removed from search logs while both your account identifier and visitor identifier are removed from analytics events. Your AI data is erased in the same operation: the AI training examples linked to your novels or to your feedback on AI suggestions are deleted; the inputs you sent to AI features (such as outlines, notes and draft text) and any error messages are cleared from our AI job records; the AI drafts, chapter reviews and other AI results stored for you are deleted, except what belongs to your published work (reader features generated from chapters you published, such as chapter recaps, and an AI cover already set on your novel stay with it); and the text of the AI outputs, reasoning and errors stored in our AI call logs for your jobs is cleared. Novels under a contract with Inkrune (active, expired or terminated) are kept under that contract together with their related data, including the AI data tied to them and to their chapters. An AI request of yours that is still running is stopped before its results are saved, including when it fails afterwards. Right after that: the copies of your AI requests still held in our job queue (waiting, recently finished or failed) are removed; AI data that work already under way when you deleted your account wrote afterwards is erased by a follow-up step; and the next-word suggestion (autocomplete) models trained on your chapters are deleted from our storage and from the server handling the deletion; every one of our servers checks that your account still exists before it uses or trains these models, and uses none of them when it cannot check, so copies cached on our other servers stop being used within 30 seconds and are deleted when they are next looked up or when that server restarts. If any of these steps fails, our team is alerted and completes it. If you have an active paid subscription it is cancelled with the payment provider before deletion proceeds (any remaining paid period is forfeited), and deletion does not go ahead if that cancellation fails. Your previous sign-in can no longer access the account.
Some records are retained after deletion because we are required to keep them: invoices, transactions, subscription records, coin purchases and author payout records are kept for accounting, tax and dispute-resolution purposes (typically 7 years under applicable accounting rules), and moderation and security audit logs are kept so we can enforce our Terms and investigate abuse. These records reference your former account only by an internal identifier and are not used for any other purpose.
Comments, reviews and ratings you posted remain on the Platform but are shown as authored by “Deleted user”.
Novels that are kept. Some of your novels stay on the Platform after your account is deleted: novels under a contract with Inkrune (active, expired or terminated), together with their related data; novels whose chapters readers paid for, or that a subscriber had chosen as one of their reading slots when you asked, so those readers keep what they bought; and novels removed by our moderation team, which are kept hidden as a record of the takedown. Kept novels are no longer linked to you and are shown as written by “Deleted user”. Your other novels are removed on the deletion date. We may also keep a novel after talking with you, if you agree.
If money is owed to you from your novels when the deletion date arrives, we hold the deletion until the payout is settled, because the bank details needed to pay you are erased on deletion.
Subject to applicable data-protection law, you have the following rights regarding your personal data:
Right of Access: You may request a copy of the personal data we hold about you.
Right to Correction: You may request that we correct inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
To exercise any of these rights, contact us at privacy@inkrune.in. We will respond within 30 days. We may request identity verification before processing your request.
We implement industry-standard security measures including TLS encryption for data in transit, application-layer encryption for author bank details at rest (see Information We Collect), regular security audits, and role-based access controls to limit data access within our team.
We use JWT-based authentication with short-lived access tokens and rotating refresh tokens. Passwords are never stored; we use OAuth-only authentication (Google Sign-In).
No system is completely secure. If you discover a security vulnerability, please report it responsibly to security@inkrune.in before public disclosure.
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users and the appropriate data protection authority as required by law.
For any privacy-related questions, data subject requests, or concerns, please contact our Privacy team at privacy@inkrune.in.
For general support, contact support@inkrune.in.