Privacy Policy

1. Overview

INKKOO ("the Service") helps tattoo artists and their clients manage consultations, bookings, and procedure records. We comply with applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea, and publish this policy to explain how we handle your data.

2. Information We Collect

• Account: email address, social sign-in identifiers (Kakao, Apple, Google), profile details (name or alias, handle, profile photo)
• Instagram connection (optional): your Instagram handle and the media you choose to import
• Consultation & booking: messages, consultation form entries (desired placement, size, dates), reference images, placement photos, quote and deposit details
• Procedure records (entered by the artist): consent confirmations, before/after photos, work logs
• Health-related information (sensitive): pre-procedure health screening answers — collected with your separate consent
• Beta signup: email address and activity type
• Automatically collected: access logs, device and browser information, cookies

3. Why We Collect It

• Identifying members and providing the Service
• Storing consultations, bookings, and procedure records, and delivering them between the parties involved
• AI-assisted features such as message translation and consultation summaries
• Notifications such as booking confirmations and reminders (email, push)
• Keeping records of pre-procedure steps (health screening, consent)
• Improving the Service, preventing abuse, and meeting legal obligations

4. Retention

We delete personal data without delay once its purpose is fulfilled. Where Korean law requires retention (e.g., contract and payment records for 5 years, consumer dispute records for 3 years, access logs for 3 months), we keep the data for the required period only. Procedure consent and records may be retained for up to 5 years from the procedure date for dispute resolution and legal compliance.

5. Sharing

We do not share your personal data with third parties, except that consultation and booking information is delivered to the other party of your conversation (the artist or the client), and disclosure may occur where required by law.

6. Processors and International Transfers

• Amazon Web Services — hosting and storage (Seoul region, Republic of Korea)
• Amazon Web Services SES — email delivery
• Google Cloud — AI translation and consultation analysis (outside Korea)
• Apple, Google, Kakao — social sign-in authentication
• Meta Platforms — Instagram integration and ad measurement (visit data and hashed contact details via the Meta Pixel, outside Korea)
• Google — website usage analytics via Google Analytics (outside Korea)

Processing that involves international transfer is limited to what is necessary to provide the Service, and our processors apply safeguards required by applicable law.

7. Deletion

When the retention period ends or the purpose is fulfilled, we destroy personal data without delay using irreversible methods.

8. Your Rights

You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time. You can delete your account in the app settings or by contacting us below; we will act without undue delay.

9. Security

We apply technical and organizational measures including encryption in transit (TLS), access controls, and token-based authentication.

10. Cookies

We use cookies for essential functions such as keeping you signed in. You can refuse cookies in your browser settings, though some features may not work properly.

11. Contact

Privacy Officer: Eunseok Yang (CEO)
Email: contact@inkkoo.com

12. Changes

If this policy changes, we will announce the update on this page or within the Service at least 7 days before it takes effect.