Ink & Ash
Ink & Ash privacy policy
Ink & Ash does not collect your personal information. There are no accounts, no analytics, no advertising, and no tracking of any kind. What you write stays on your device unless you deliberately share it with someone, and even then we cannot read it.
Your notes
A private note is stored in your device's Keychain, the same place iOS keeps passwords. It is encrypted at rest, marked as available only on this device, and never synced to iCloud or included in a device backup. It is unlocked only by Face ID or your device passcode.
Your note is deleted automatically when it reaches the erase time you set, and you can erase it yourself at any moment. Once erased it is gone. We have no copy to restore, because we never had one.
Shared notes
When you start a shared note, your device generates a random key and an eight-character code. The note's contents are encrypted on your device with that key before anything leaves it, and decrypted only on the devices of people who joined with the code. The key is never sent to our server.
The code itself is never sent to our server either. Your device derives two separate values from it; only one of them, an opaque lookup identifier, is sent, and it cannot be used to work out the code or to decrypt anything.
What our server stores for a shared note is limited to that lookup identifier, an opaque room identifier, and an expiry time. It holds no note contents, no names, no email addresses, no device identifiers and no account of any kind. This pairing information is deleted automatically when the session expires.
Because the encryption happens on your device, we are not able to read a shared note, and neither is anyone who obtains the server's data.
What stays on your device
The app records one number locally: how many free shared notes you have started. It never leaves your device and is not linked to you.
Purchases
The one-time purchase in Ink & Ash is handled entirely by Apple. Payment is processed by Apple under Apple's own privacy policy; we never see your payment details, your name, or your Apple Account. The app only learns whether a purchase exists on the device.
Screenshots and recordings
Ink & Ash asks iOS to exclude your note from screenshots, screen recordings and the app switcher. This is a protection against others capturing your screen; it is not a guarantee against every possible method of capture, and the app will tell you in Settings if the protection is unavailable on your version of iOS.
Children
Ink & Ash is not directed at children and collects no information from anyone, including children.
Changes
If this policy changes, the revised version will be posted on this page with a new date above. Material changes will also be noted in the app's release notes.
Contact
Questions about this policy can be sent to support@oakandlever.com.