Privacy policy

Effective November 12, 2026. InkDraft is operated by Bradley Brewington. Contact: bmbrewington4@gmail.com.

What InkDraft handles

The iPad app saves your handwriting and sketches locally. When signed in with cloud access, opening or editing a document automatically syncs its current pages: PNG images, original editable PencilKit drawings, page dimensions and backgrounds, document title and identifiers, and revision metadata. The service keeps one current document per account in a private Google Cloud Storage bucket in the United States. Folders, inactive documents, local Trash, and library backups stay on your device or wherever you export them.

Your selected identity provider and Auth0 handle sign-in. Available sign-in choices are shown in the app. InkDraft uses the verified provider identity to separate account storage and may receive your name, email, and profile information through authentication. Native credentials are kept in the iPad Keychain; your connected agent manages its own authorization credentials. InkDraft does not receive your Apple or Google password.

Purchases

Apple processes subscription payments. InkDraft verifies Apple-signed purchases and keeps transaction identifiers, purchase and expiry dates, revocation status, and the Apple purchase environment linked to a pseudonymous token for your InkDraft account. We use these records only to provide and restore cloud access and handle renewals or refunds. InkDraft does not receive payment-card or bank details. Purchase history is not used for advertising or tracking. Account deletion removes these purchase facts and retains only a minimal deletion marker so delayed Apple notifications cannot recreate them. Apple retains its own purchase records under its policies.

How information is used and shared

We use account information to authenticate you and deliver your paper to clients you authorize. An authorized MCP client can retrieve your account display name and account identifier, current document metadata and page images, including changed pages since a client's last read. Historical page content is not available. Read-only agent access does not permit updating your paper.

Google Cloud provides hosting/storage and Auth0 provides authentication. Your chosen third-party AI or agent provider receives current page images, account display name and identifier, and document metadata it retrieves after you authorize its connection. Review that provider?s privacy and retention terms before authorizing access. InkDraft does not receive your chat history or collect full conversations. Tool inputs contain the requested operation, document/page identifiers, revision baselines, and optional pagination cursors.

InkDraft does not sell personal information, run advertising trackers, or send handwriting to an AI service on its own. The public documentation pages use no analytics scripts or tracking cookies. Authentication pages use cookies necessary for sign-in.

Protection by service providers

Google Cloud and Auth0 process information for hosting and authentication under their applicable data-protection terms. InkDraft requires providers processing information on its behalf to protect it at least as carefully as described in this policy, including confidentiality, security, limited processing purposes, and deletion obligations. See Google Cloud?s data-processing terms and Okta/Auth0?s data-processing information. An independently connected agent is selected and authorized by you; its separate handling of retrieved copies must be reviewed before connection. Contact support if a provider?s practices conflict with these protections.

Logs and retention

Each successful sync replaces the current document or its changed pages. Superseded content is removed from active storage, with durable retries if cleanup fails. Incoming pages can be staged for 30 minutes while the previous complete document remains readable; abandoned staging is eligible for cleanup after one hour. Small bounded hashes, change metadata, and deletion records contain no historical ink or page images. Operational logs can include request time, URL, status, client network information, and authentication events. Application code does not intentionally log paper contents or bearer tokens. Content-free operational counters include pseudonymous account namespaces, request and transfer totals, storage operations, page-read counts, errors, and coarse timing to maintain service reliability and control operating costs. These counters do not contain document titles, page contents, or chat messages. The service's standard Google Cloud log bucket retains request logs for 30 days; authentication and administrative audit records follow the respective provider's retention settings.

Latest-document deployments disable object versioning and soft delete. Copies soft-deleted before that policy change can remain for their original seven-day recovery period. Legal, security, or abuse-related records may need to be retained separately. Copies already retrieved by an agent provider are controlled by that provider.

Your choices

Write offline or sign out to keep subsequent edits local. Disconnect an agent to stop future access through that connection; already issued short-lived tokens can remain valid until expiry. Signing out or deleting the app does not clear the current cloud document. Moving that document to Trash while signed in requests its deletion when online. Export a native library backup: inactive documents and folders cannot be restored from the server.

To delete your InkDraft account, open Account & connections in the iPad app, choose Delete account, and confirm. The service immediately blocks account access once the deletion request is accepted, then removes current and staged document content, any legacy publications, and the hosted authentication identity. If a provider or storage operation is temporarily unavailable, the app reports pending deletion and the service retries it. A minimal account deletion record is retained to prevent old credentials from restoring access; it contains no paper content. Deleting your InkDraft account does not delete your Apple or Google account or cancel your Apple subscription. Cancel billing separately using Manage subscription in the app or your Apple Account subscription settings. Original local documents are preserved on this iPad; remove local copies separately if desired. Copies already retrieved by connected providers must be removed through those providers. For access, correction, export, or assistance with deletion, contact support; ownership is verified before handling account data. No public paper links are created.

Children

InkDraft is a general-purpose productivity tool and is not directed to children. Connected identity and agent services have their own eligibility requirements. If you believe a child?s information was provided without required authorization, contact support so we can investigate and handle removal.

Changes

Material changes will be reflected here with an updated effective date. Contact support with privacy questions before publishing sensitive information.