Privacy policy
Last updated 2026-10-23
This explains what personal data Inkstone keeps, why, and who else handles it. We follow Singapore's Personal Data Protection Act (PDPA).
What we collect
Account: your email address, the name you give, your language settings and, for teachers, studio name, currency and prices.
Learning: the photos you upload, details of what you practised, your teacher's marks and notes, messages and questions in your room.
Payments: what was paid, when and for which submission. Card details go straight to Stripe; we never see your card number. Teachers: the bank or Wise details you enter for payouts. The account number is stored encrypted, and only our administrator can see it, to pay you.
Technical: the country your connection comes from (used once, to suggest a currency) and basic server logs kept for security.
Why we use it
To run your room, send sign-in links and notifications, take payments and refunds, pay teachers, translate notes and messages into each person's language, recognise the copybook text in photos, keep the service secure, and meet legal and accounting obligations.
Who sees it
The other person in your room sees what you share there. Nobody else does, apart from us when we need to fix a problem or answer you.
We use these service providers, who handle data only to provide their service to us: Railway (hosting and photo storage, Singapore region), Cloudflare (network), Stripe (payments), Resend (email), and DeepSeek (machine translation and reading photos to recognise the copybook text; processed in China). Some of them also process data outside Singapore, for example in the United States.
We don't sell personal data and don't use advertising or tracking services.
Cookies
Inkstone uses only the cookies it needs: one that keeps you signed in, one that remembers your language, and a short-lived one that remembers an invite link you just created. No advertising or analytics cookies.
How long we keep it
We keep your account and room while you use Inkstone. If you ask us to delete your account, we delete your personal data and photos within 30 days, except payment records, which Singapore law requires us to keep for 5 years. A room is shared with the other person, so we will tell you what happens to work you shared before deleting it.
Your choices
You can ask to see, correct or delete your personal data, or withdraw consent, by writing to [email protected]. We reply within 30 days.
Inkstone isn't designed for young children. A student under 18 should use it with a parent's or guardian's agreement.
Changes
If we change this policy in a way that affects you, we will tell you by email first.