inkPad privacy policy

Effective date: 9 November 2026

inkPad is a note-taking and PDF annotation app for Android tablets. Questions about this policy: support@inkpad.work.

What inkPad keeps on your device

Your notes, the PDFs you open, your handwriting and the pictures you add are stored on your device. inkPad requires an account to use. On the Classic, Premium and Pro plans your library is also synced to the cloud for backup; on the Free plan it stays on your device only.

Account: your name and email address, from your Google account or the email you sign up with. Passwords you set in inkPad are handled by our authentication provider and are never stored by the app in readable form.
Library sync: on the Classic, Premium and Pro plans, inkPad syncs your folders, notes, pages, handwriting strokes, comments, pictures and PDFs to the cloud, so they are available on your other devices and backed up.
Version history: on the Classic, Premium and Pro plans, when you erase or change synced handwriting, text boxes, pictures or page settings, the earlier version stays in the cloud for up to 90 days, so an earlier version of a note can be restored. Permanently deleting a note removes its history. Deleting your account removes all of it.
Reading and writing activity: the days you wrote or read, which drives the activity grid and streak. It is synced with your library.
Device information: a name and an identifier for each device that syncs, to show your devices and keep them within the allowed number.
Purchases: if you buy a plan, the plan, the Google Play product, the purchase token Google Play gives the app, its expiry date and whether it was refunded, so your plan works on all your devices and can be restored. Payment is handled by Google Play; inkPad never sees your card or payment details.
Sync diagnostics: when a sync ran and whether it succeeded, to show sync status.

inkPad has no advertising and no tracking of your activity in other apps. Your data is not sold or shared with third parties for their own purposes.

On-device recognition

inkPad recognizes handwriting and text with Google ML Kit, which runs on your device. Your handwriting and the recognized text are processed on the device. ML Kit may send Google technical data for diagnostics and usage analytics: device information such as make, model and Android version, the app's name and version, a per-installation identifier, the language you recognize, and performance and error data.

What inkPad sends when you report a problem

When you use Report a problem in Settings > Support or in a note's menu, inkPad sends what you wrote and the email address you enter for a reply, if any. If you leave "Include app and device details" on, it also sends the app version, device make and model, Android version, screen refresh rate, pen speed statistics, and which method the app uses to read text in PDFs and whether it found text the last time you long-pressed a PDF (never the text itself). When you report a problem from a note's menu and leave "Include note details" on, it also sends counts and sizes for that note: number of pages and strokes on each page, size of the ink, pictures and PDF, how many strokes or pictures can't be read, and whether its PDF opens. If inkPad crashed recently and you leave "Include last crash" on, it also sends technical details of that crash: the type of error, where in the app's code it happened and the app version. The crash details stay on your device until you send a report, and are deleted once it's sent. A report never includes what is in your notes, PDFs or pictures, or the names of notes or files. Reports are used only to fix problems and reply to you.

Where it is stored

Cloud data is stored with Supabase (database, file storage and authentication), which processes it on our behalf. Problem reports are stored as private issues in our GitHub repository, and a link to each new report is posted in a private team channel on Discord. Data is protected in transit with HTTPS, and access is restricted to your own account. Purchases are checked with Google Play, which also tells us when a subscription renews, ends or is refunded.

Permissions

Internet: for sign-in, sync and sending problem reports.

inkPad does not ask for access to your photos. To place a picture on a page, you choose it in Android's file picker, and inkPad only receives the pictures you pick.

Your choices and deleting your data

You can sign out at any time. Your notes stay on the device.
You can delete your account and everything synced to the cloud from Settings > Account (Delete account), or by following https://inkpad.work/delete-account. Deletion removes your account, the synced library, the stored files and your purchase records. Any copy in our hosting provider's backups is removed when those backups expire, within 30 days. Problem reports you sent stay until you ask us to delete them at support@inkpad.work. Deletion does not cancel a Google Play subscription; cancel it in Google Play. It cannot be undone. Notes on your device are not touched.

Children

inkPad is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes, the new version will be posted here with a new effective date.