Legal & Privacy

Legal information, policies, and attributions for Inkwell.

Privacy Policy

Our Privacy Policy explains what data we collect, how we use it, and your rights. Key highlights:

• Your script files stay on your device (we don’t upload or store them) — unless you share a draft, which uploads an encrypted copy that we can’t read
• Quill AI sends script portions to AI providers when you use it, and keeps a small per-conversation memo on your account
• If you’re signed in, your writing sessions (including script titles) are saved to your account to power writing time and streaks
• Optional analytics (can be disabled)
• Required crash reports for app stability

📄 Read Full Privacy Policy Last updated: October 31, 2026

Terms of Service

Our Terms govern your use of Inkwell and related services. Covers:

• Acceptable use
• Account responsibilities
• Subscription terms
• Intellectual property
• Disclaimers and limitations

📄 Read Terms of Service

End User License Agreement (EULA)

The EULA is the software license agreement you accepted when installing Inkwell. Key points:

• Grant of license
• Restrictions on use
• Updates and support
• Warranty disclaimer
• Limitation of liability

📄 Read EULA

Data & Privacy

What We Collect

Always collected (required):

• Crash reports and error logs
• App version and platform info
• Performance diagnostics

Optionally collected (you control):

• Anonymous usage analytics (PostHog)
• Feature interaction patterns
• Quill AI prompt types (not content)

Saved to your account (when signed in):

• Writing sessions: start/end times, active vs. idle time, word counts
• The title of the script you were working on, and an identifier for it
• Quill conversation memos: characters, beats, decisions, and open questions summarized from your Quill chats

Never collected:

• The words you write (your script text is never uploaded, except as the encrypted copy you choose to share — which we can’t read)
• Keystroke logging
• Screen recordings

How Your Scripts Are Handled

Local storage:

• Scripts are saved as .ink files on your computer
• Not uploaded to Inkwell servers
• You control backups and file location

What we do keep about a script:

• Its title and an identifier, on each writing-session record (signed-in accounts)
• A per-thread Quill memo summarizing what a conversation established about it
• Both are deleted when you delete your account

Quill AI usage:

• When you use Quill AI, relevant script portions are sent to AI providers (Anthropic and Google)
• AI providers may temporarily cache content for processing
• Your content is not used to train AI models
• See each provider’s privacy policy for their data handling

Version history:

• Stored locally in .ink-history folder next to your script
• Not uploaded to cloud
• You can delete anytime

Shared Drafts

When you use File → Share Draft…, Inkwell uploads an encrypted copy of your pages so the people you send links to can read them. See Share a draft for notes. What we can’t read:

• The shared pages and every reader note and reply are encrypted on your Mac (and in the reader’s browser) before they’re uploaded. The decryption key is in the part of the link after the #, which browsers never send to our servers.
• We never receive the key or your passphrase. For passphrase links we keep only a value that lets us check a passphrase is right; on its own, without the link, a passphrase can’t open the draft.

What we store:

• The names you give your links (“Sam”), in plain text, so they can be shown on notes
• When each link was created, when it expires or was revoked, and whether notes are private or shared
• The draft’s page count and the size of the encrypted copy
• Read receipts: when a link was opened, the furthest page reached, whether the reader finished, when notes were posted, and clicks on the small Inkwell links on the reading page, counted by where they appear (cover, end of draft, after a note) and nothing about the draft. You see the reading receipts and note counts in the app (link clicks aren’t shown to you); readers are told on the cover of the draft.

Analytics: read-receipt events are also sent to our product analytics (PostHog) from our servers, tied to the writer’s account, with a shortened one-way hash of the link — never the link itself, the script, the notes, or the reader’s IP address. Readers:

• Readers don’t need an account and we don’t ask them for any personal information.
• Their IP address is used briefly to limit repeated requests and passphrase guesses; it isn’t stored with their notes or receipts. Our hosting provider’s standard request logs may record the address of the page they opened, which contains the link’s ID but never its key.
• While reading, the browser tab shows “Draft from [writer’s first name] · Inkwell”, and link previews show “A script draft, shared with you”, never the script’s title. Links from the reading page to inkwell.app carry only a label for where the link was placed, never the link, its key, or anything about the script.
• The reading page loads no third-party scripts, ads, analytics or tracking cookies. To remember the unlock key, reading position, display settings and any unsent note, it uses the browser’s local storage on the reader’s device.

Retention:

• The encrypted copy is deleted 14 days after the last link to it expires or is revoked.
• Notes, link names and read receipts are deleted 90 days after that.
• Notes already downloaded to your Mac stay there until you delete them.
• You can revoke any link at any time.

Your Rights

You have the right to:

• Disable optional analytics (Settings)
• Request deletion of your anonymized telemetry data
• Access what information we’ve collected about you
• Use Inkwell offline (no Quill AI)
• Delete your account, which removes your writing-session history and Quill memos along with your sign-in and billing records

Exercise your rights: Email privacy@rundquist.tech

Third-Party Services

Inkwell integrates with these external services:

AI Providers

When you use Quill AI, relevant portions of your script are processed by third-party AI providers:

• Anthropic
• Google

📄 Privacy policies:

• Anthropic Privacy Policy
• Google AI Privacy

Analytics & Infrastructure

• PostHog: Optional product analytics
• Google Firebase: Authentication, cloud storage, messaging
• Stripe: Payment processing (subscriptions and credit purchases)

📄 Privacy policies:

• PostHog Privacy
• Firebase Privacy
• Stripe Privacy

Feedback

• Feedback Fish: In-app feedback collection

📄 Feedback Fish Privacy

Open Source & Attributions

Inkwell is built with open source software. We’re grateful to these projects and their contributors:

Core Technologies

• Electron: Cross-platform desktop framework
• React: UI framework
• Lexical: Text editor framework
• TypeScript: Programming language
• Tailwind CSS: UI styling

Full License Attributions

View complete list of open source licenses and attributions, the application shops with a ThirdPartyLicenses.txt file.

Compliance

GDPR (European Union)

If you’re in the EU, you have additional rights under GDPR:

• Right to access your data
• Right to data portability
• Right to erasure (“right to be forgotten”)
• Right to restrict processing

Exercise GDPR rights: privacy@rundquist.tech

CCPA (California)

California residents have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don’t sell your data)

Exercise CCPA rights: privacy@rundquist.tech

Children’s Privacy

Inkwell is not intended for children under 13. We don’t knowingly collect data from children.

Security

We take security seriously: How we protect your data:

• Encrypted connections (HTTPS, TLS)
• Secure authentication (Firebase Auth)
• Regular security audits
• Prompt vulnerability patching

Report security issues: security@rundquist.tech

Contact

Privacy questions: privacy@rundquist.tech
Legal inquiries: legal@rundquist.tech
General support: contact@inkwell.app Rundquist Tech LLC
4546 El Camino Real B10 #781
Los Altos, CA 94022
United States

Updates to Policies

We may update these policies from time to time. When we do:

• “Last updated” date will change
• You may see an in-app notification
• Policies are always available on our website

Check for updates: inkwell.app/privacy

Next Steps