Privacy Policy

1. Overview

INKKOO ("the Service") helps tattoo artists and their clients manage consultations, bookings, and procedure records. We comply with applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea, and publish this policy to explain how we handle your data.

2. Information We Collect

• Account: email address, social sign-in identifiers (Kakao, Apple, Google), profile details (name or alias, handle, profile photo)
• Instagram connection (optional): your Instagram handle and the media you choose to import
• Consultation & booking: name or alias, contact details (phone, email), consultation language, messages, consultation form entries (desired placement, size, dates), reference images, placement photos, quote and deposit details. The same data is collected when you use a consultation link without an account, and is linked to your account if you sign up later.
• Pre-procedure questionnaire: address (including unit, if entered)
• Artist payment methods: bank account number, holder and bank, quick transfer links (KakaoPay, Naver Pay), overseas payment links (PayPal, Wise, Stripe, Square) — shown to the artist's clients for payment guidance
• Artist studio: studio name, area, location hint, address and unit, arrival directions, latitude/longitude derived from the address, English translation
• Procedure records (entered by the artist): consent confirmations, before/after photos, work logs
• Health-related information (sensitive): pre-procedure health screening answers — collected with your separate consent
• Beta signup: email address and activity type
• Automatically collected: access logs, device and browser information, push notification tokens, app language and region settings, cookies

3. Why We Collect It

• Identifying members and providing the Service
• Storing consultations, bookings, and procedure records, and delivering them between the parties involved
• AI-assisted features such as message translation, consultation summaries, and studio information translation
• Studio directions — deriving and storing coordinates so that, at the time the artist chooses (always, when the deposit is paid, or the day before the session), confirmed clients see the address and a map
• Image-based features such as design previews and stencil generation
• Notifications such as booking confirmations and reminders (email, push)
• Keeping records of pre-procedure steps (health screening, consent)
• Improving the Service, preventing abuse, and meeting legal obligations

4. Retention

We delete personal data without delay once its purpose is fulfilled. Where Korean law requires retention (e.g., contract and payment records for 5 years, consumer dispute records for 3 years, access logs for 3 months), we keep the data for the required period only. Procedure consent and records (including consent signatures, questionnaire answers, and before/after photos) may be retained for up to 5 years from the procedure date for dispute resolution and legal compliance. Conversations that did not lead to a booking are deleted without delay when you delete your account or ask us to.

When you request account deletion, we keep your account data for 30 days so it can be restored; signing in again within that period restores the account. After 30 days we delete everything except data we are legally required to retain.

5. Sharing

We do not share your personal data with third parties, except that consultation and booking information is delivered to the other party of your conversation (the artist or the client), and disclosure may occur where required by law.

An artist's studio address, unit, and arrival directions are shown only to clients with a confirmed booking, at the time the artist chooses. Payment methods an artist registers (bank account, transfer links, overseas payment links) are shown to that artist's clients for payment guidance; once you follow an external payment link, that service's privacy policy applies.

6. Processors and International Transfers

• Amazon Web Services — hosting and storage (Seoul region, Republic of Korea)
• Amazon Web Services SES — email delivery
• Google Cloud — AI translation and consultation analysis (outside Korea)
• Anthropic, PBC — consultation analysis and studio information translation: conversation content, studio name, address and directions (outside Korea)
• Google Maps Platform — address search, geocoding and map display: studio address and coordinates, addresses you enter (outside Korea)
• Kakao — address search and postal code lookup, geocoding: studio address (Korea)
• Replicate, Inc. — design preview and stencil image generation: placement photos, design images (outside Korea)
• Apple, Google, Kakao — social sign-in authentication
• Meta Platforms — Instagram integration and ad measurement (visit data and hashed contact details via the Meta Pixel, outside Korea)
• Google — website usage analytics via Google Analytics (outside Korea)

Processing that involves international transfer is limited to what is necessary to provide the Service, and our processors apply safeguards required by applicable law.

Inkkoo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Data received from Google Workspace APIs is used only to provide the features you request, and we do not use Google user data to develop, improve, or train generalized AI or machine learning models.

7. Deletion

When the retention period ends or the purpose is fulfilled, we destroy personal data without delay using irreversible methods.

8. Your Rights

You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time. You can delete your account by choosing "Delete account" on the account screen in the app, or by contacting us below. Signing in again within 30 days of the request restores the account; after 30 days we delete your personal data except what Section 4 requires us to keep.

9. Security

We apply technical and organizational measures including encryption in transit (TLS), access controls, and token-based authentication.

10. Cookies

We use cookies for essential functions such as keeping you signed in. You can refuse cookies in your browser settings, though some features may not work properly.

11. Contact

Privacy Officer: Eunseok Yang (CEO)
Email: contact@inkkoo.com

12. Changes

If this policy changes, we will announce the update on this page or within the Service at least 7 days before it takes effect.