Ink & Sky Privacy Policy & Terms

Last Updated: August 23, 2025

Who We Are

"Ink & Sky", "we", "our", or "us" means Trilogy Labs LLC, United States.

Age & Content Disclaimer

Ink & Sky delivers inspirational quote images and notifications. Content is for personal inspiration only — not medical, mental-health, or professional advice. The service is intended for users 13+.

What We Collect & Why

Category Examples Purpose Legal Basis* Retention
Account & Auth Firebase UID (including anonymous), email (if provided), display name (from Google/Apple), auth provider Sign-up/sign-in, maintain session, support Contract; Legitimate interest Until account deletion + up to 180 days in backups
Preferences & Scheduling Delivery time, timezone, mood/theme selection, custom mood text, last delivery timestamps, setup status Generate & deliver daily quote images on schedule Contract; Consent (where required) While account exists (or until user deletes)
Notifications FCM token, permission status, token refresh timestamps, delivery success/failure logs Send daily inspiration & app alerts Consent; Legitimate interest (service messages) Token lifecycle or until user revokes notifications
Generated Content AI-generated quote images, prompts/themes, generation IDs, creation timestamps, favorite status, viewed status Create, store, and let you re-download/share your images Contract; Consent (for optional saves) User-controlled (you can delete in-app)
Usage & Diagnostics Feature usage, authentication events, error/crash logs, performance metrics App reliability, troubleshooting, abuse prevention Legitimate interest Typically 30–90 days
Device / App Info Device model, OS version, app version Compatibility, performance, and crash diagnosis Legitimate interest Typically 30–90 days

*GDPR art. 6 legal bases; CCPA = “business purpose”, not selling/sharing.

How We Use Data

  1. Provide core functions (auth — including anonymous mode, preference storage, AI image generation).
  2. Schedule and deliver daily inspiration via push notifications.
  3. Improve stability with diagnostics and Crashlytics error reports.
  4. Prevent fraud/abuse (e.g., token hygiene, rate limits).
  5. Send essential service messages (e.g., account, delivery, or error notices).

We do not show third-party ads, do not use advertising identifiers, and do not track you across other apps or websites.

AI Processing and Third-Party Services

Image Generation:

Data Minimization:

Data Sharing (Sub-processors)

Vendor Service Location Safeguard
Google Firebase (Auth, Firestore, Storage, Cloud Functions, Crashlytics, App Check, FCM) Backend hosting, storage, notifications, diagnostics US/EU EU Standard Contractual Clauses + EU–US Data Privacy Framework
OpenAI AI image generation (prompt → image) US Transient processing; no advertising use
Apple / Google OAuth sign-in (optional) Your region Platform privacy controls & SCCs

No ad networks or third-party analytics SDKs are integrated.

International Transfers

Data may be processed in the United States or other regions where our providers operate. Transfers from the EEA/UK/Switzerland rely on EU Standard Contractual Clauses and Data-Privacy-Framework self-certifications where applicable.

Your Rights

You can access, rectify, export, or delete your data and withdraw consent at any time via in-app controls or email team@trilogy-labs.com. EEA/UK users may also lodge a complaint with their local supervisory authority.

California / U.S. State Disclosures

We do not sell or share personal information as defined by the CCPA/CPRA.

Collected categories: identifiers (UID, FCM token), contact info (email if provided), user content (generated images and prompts), internet activity (app interactions), diagnostics (crash/error logs).

Right to know, delete, or correct: use in-app controls or email (same as above).

Security

Encryption: All data encrypted in transit (TLS 1.2+) and at rest (e.g., Firebase AES-256). Access Controls: Firebase Authentication + security rules limit access to the owner’s data. Processing Limitation: Data is used solely to generate, deliver, and store inspirational images and notifications. Minimal Data: We collect only what’s necessary to run the service reliably.

Data Retention & Deletion

Account and preference data are kept while your account exists. Generated images remain until you delete them. Diagnostic logs are typically retained 30–90 days. If you delete your account, we delete or anonymize personal data from active systems, with limited backup copies retained for up to 180 days.

Automated Processing

AI image creation is automated and used only to generate your inspirational content. It does not produce legal or similarly significant effects.

App Permissions