Inkto Privacy Policy
Last updated 2 October 2026
Inkto reads your documents aloud. This policy explains what the app collects, why, who
else sees it, and how to get it back or get rid of it. It covers the Inkto mobile apps for
Android and iOS and the service behind them at api.inktoapp.com.
The short version. You sign in with Google or Apple, so we hold the email address they give us. The documents you import are stored on our servers so your library and your place in each book follow you between devices. We do not sell your data, we do not show ads, there is no advertising identifier, and there are no third-party analytics or tracking tools in the app. You can delete your account, and everything in it, from inside the app or by email.
Who is responsible
Inkto is published by Ravpartap Singh, an individual developer, who is the data controller for the purposes of the UK GDPR, the EU GDPR and comparable laws.
Contact: inkto.ai@gmail.com
What we collect, and why
| What | Why |
|---|---|
| Account identity. A permanent identifier from Google or Apple, your email address, and — when Apple provides it, which is only on the very first sign-in — your name. We also record whether the address is an Apple private relay address. | To create and recognise your account. We never receive your Google or Apple password. |
| Documents you import. The file itself, the text extracted from it, and details about it: title, file type, size, page and word counts, a checksum, and the dates it was added and last opened. | To extract readable text, to speak it, and to keep your library available on every device you sign in on. |
| Pages you scan with the camera. If you use the scanner, the captured image may be uploaded so the text can be recognised. | Optical character recognition. We do not use the camera for anything else, and the app only opens it when you ask it to. |
| Reading activity. Your position in each document, favourites, and counts of listening time, words and pages, including daily streaks. | To resume where you left off on any device, and to show you your own statistics. |
| Device and session data. A device identifier generated by the app, the device name and platform, and the app version. | To keep you signed in, to let you sign out of one device or all of them, and to label a reading position with the device that set it ("from Android phone"). |
| Plan and usage. Your plan, its status, and how much of the daily free listening allowance you have used. | To apply the free daily allowance and, if you buy a plan, to give you what you paid for. |
| Operational logs. Ordinary server records of requests, including IP address and timestamps, kept briefly by our hosting provider. | To keep the service running and to investigate abuse and faults. |
What we do not collect
- No advertising identifier, and no advertising.
- No third-party analytics, attribution or tracking software in the app.
- No location data, contacts, calendar, photos library, call logs or messages.
- No microphone recording. Inkto produces speech; it does not listen to you.
- No payment card details. If you buy a plan, the payment is handled by the app store or by our payment processor, and we never see the card number.
Speech is produced on your device
The voice that reads to you is your device's own speech engine, or a voice model running on the device. The text of your documents is not sent to a third-party text-to-speech company to be spoken.
How your documents are handled
When you import a document, the app uploads it to our storage so that the text can be extracted and so the document is available on your other devices. The extracted text is stored alongside it. Both are tied to your account and are not readable by other users of Inkto.
We do not read your documents, and we do not use their contents to train any model, to profile you, or for advertising. Our staff — currently one person — access stored content only where it is strictly necessary to investigate a fault you have reported or a serious security problem, and never out of curiosity.
Legal bases (UK and EU users)
- Performance of a contract — holding your account, library, documents and reading positions, because that is the service you asked for.
- Legitimate interests — keeping the service secure and working, preventing abuse, and fixing faults.
- Consent — the camera, used only when you open the scanner. You can refuse it and the rest of the app works.
- Legal obligation — keeping records we are required to keep, such as tax records of a purchase.
Who else sees your data
We do not sell personal data, and we do not share it for advertising. We use a small number of providers to run the service:
- Amazon Web Services — hosting, storage and databases, in the United States
(region
us-east-1). - Google and Apple — sign-in. They confirm who you are; they do not receive your documents.
- A payment processor and the app stores — only if you buy a plan, and only the data needed to take the payment and tell us the plan is active.
We may also disclose data if the law requires it, or to protect the rights and safety of users and of the service.
International transfers
Our servers are in the United States. If you use Inkto from the UK, the EU or elsewhere, your data is transferred there and protected by appropriate safeguards, including the standard contractual clauses our providers offer.
How long we keep it
- Your documents and library — until you delete them, or until you delete your account.
- Reading positions and statistics — for as long as the account exists.
- Sessions — until you sign out, or they expire.
- Operational logs — a short period, measured in weeks.
- After account deletion — see below.
Deleting your account and your data
In the app: Account → Delete account. You will be asked to confirm.
Without the app: see Deleting your Inkto account, or email inkto.ai@gmail.com from the address you signed in with, with the subject Delete my account.
When you ask us to delete your account, every session is revoked and every link to your Google or Apple identity is removed immediately, so the account cannot be signed into again. If you signed in with Apple, we also tell Apple to revoke the token. Your documents, their extracted text, your positions and your statistics are then erased.
Erasure completes within 7 days. That window exists so that an accidental deletion can be undone — after it, the data is gone and we cannot recover it. Backups taken before the deletion are overwritten on their own schedule, within 30 days.
You can also delete any single document at any time, from the library, without deleting your account.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw consent. The app has a built-in export that produces a copy of your data for you. For anything else, email inkto.ai@gmail.com; we answer within 30 days.
If you are in the UK or the EU and think we have handled your data badly, you may complain to your data protection authority — in the UK, the Information Commissioner's Office.
Security
Data is encrypted in transit with TLS, and encrypted at rest by our cloud provider. Sign-in tokens are held in the device's own secure store — the iOS Keychain or the Android Keystore — rather than in ordinary app storage. Access to production systems is limited to the developer named above. No system is perfectly secure, and we do not claim otherwise.
Children
Inkto is not directed to children. You must be at least 13 years old to use it, or 16 where your country sets that age for consent to data processing. We do not knowingly collect data from children below that age; if you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you in the app before the change takes effect.