This page is a previous Inkana Privacy Policy (effective November 12, 2026). See the current policy.
Inkana Privacy Policy
Effective: November 12, 2026 · Provider: Inimasolution · Other languages: 한국어 · Bahasa Indonesia · Previous version (August 13, 2026)
Inkana is an iPhone, iPad, and Android app for learning Japanese by writing. This policy explains what the app and the website inkana.app collect, why, where it is stored, how long it is kept, and what you can do about it.
In short
- You can learn without an account. Your progress and your drawings stay on your device, and handwriting recognition runs on the device.
- Signing in with Apple or Google is optional. It is needed to sync between devices and to share a pass between iPhone and Android.
- Handwriting sharing is off unless you turn it on. Anonymous usage data is on by default and you can turn it off in Settings.
- We do not sell personal data, show ads, use advertising identifiers, or track you across other apps and websites.
- You can delete your account in the app: Settings → Account → Delete account.
1. Information that stays on your device
Learning progress, practiced characters, test results, pen settings, reminder time, app language, and onboarding answers are stored on your device so learning works offline. The app also keeps your recent drawings on the device for your notebook. You can remove drawings older than 90 days with Settings → Data → Tidy handwriting older than 90 days, and clear learning records with Settings → Reset learning records. Daily reminders are local notifications scheduled on your device; we do not use push-notification tokens.
Inkana does not access your camera, photos, contacts, microphone, or location, and does not use the advertising identifier (IDFA/AAID).
2. Account sign-in and sync (optional)
When you sign in, the app sends a token from the sign-in provider to our server, which checks it with the provider. We then store:
- Sign in with Apple: your Apple user identifier, and your name and email address if Apple shares them (the email may be an Apple private-relay address). On iPhone and iPad we also exchange Apple's authorization code for a refresh token, store it encrypted, and use it only to disconnect Inkana from your Apple ID when you delete your account.
- Sign in with Google: your Google user ID, your name, and your email address if Google reports it as verified. These come from the Google ID token, which we check with Google. We do not receive your Google password and do not keep Google access or refresh tokens.
- An internal account number, the sign-in methods linked to it, your synced learning progress and selected settings, your pass status (see section 3), and a sign-in session that expires after 30 days.
We use your name and email only to show which account you are signed in with and to answer requests about your account. We never send you marketing email, and we never merge accounts because two email addresses match; linking another sign-in method requires an explicit action while you are signed in.
3. Purchases on the App Store and Google Play
Payments are handled by Apple or Google. We never receive your card or bank details. To give the same pass on every device you sign in on, our server verifies each purchase with Apple or Google and stores the store name, product, the store's purchase reference (Apple's original transaction ID or Google Play's purchase token), status, and expiry date. Apple and Google send our server notices about renewals, refunds, and cancellations of purchases linked to an account. If you received the early-learner thank-you pass, the app sends the date it was granted on your device when you sign in, so the pass can be kept with your account.
4. Handwriting sharing (optional, off by default)
The app asks once whether you want to share handwriting. Only if you turn on Settings → Data → Share handwriting does it send the drawing image, the expected character, the recognition result and confidence, the learning stage, the app version, and a random upload ID created on your device. We use these samples only to improve handwriting recognition. The upload ID is not sent with your sign-in and is not stored in your account, so samples are not connected to your name, email, or account.
Turning the setting off stops future uploads. In the Android app, Settings → Data → Delete shared handwriting deletes the samples sent from that installation and replaces its upload ID. The iPhone and iPad app does not have this button yet; because samples cannot be matched to you, we cannot find them from an email request either. All shared samples are deleted automatically within 24 months. Handwriting is never used for advertising or marketing.
5. Feedback (optional)
When you use Settings → Send feedback, the app sends the category and message you write, the app version, the operating-system version, and the app language. Feedback is not connected to your account or upload ID. Please do not include passwords, payment details, or other sensitive information. Feedback is deleted automatically within 24 months.
6. Anonymous usage data (on by default)
To learn which parts of the app help people keep studying, the app sends a small number of events, such as first launch, onboarding finished, first writing finished, a day with study, a test finished, the pass screen shown, and the result of a purchase attempt. Each event contains a random ID for this installation, the event name, the time, the app version, the app language, and a few details about the event (for example which island, whether a test was passed, or which pass was bought). It never contains handwriting, answers, your name, email, sign-in account, or store transaction IDs, and the installation ID is not connected to your account or to the handwriting upload ID.
On iPhone and iPad, the end of onboarding asks an optional question, “Where did you hear about Inkana?” (for example App Store search, a community post, social media, or a friend). You can skip it. Your answer is sent with the onboarding-finished event, and the question is not asked when anonymous usage data is turned off.
You can turn this off at any time with Settings → Data → Anonymous usage data. The app then deletes events waiting to be sent and sends no more. Events waiting on the device are kept for at most 30 days. On our server, events are deleted automatically after 400 days. We do not share them with analytics or advertising companies.
7. The website and link counts
The website uses no cookies, no analytics scripts, and no advertising tags. Some links we post (for example inkana.app/go/…) pass through the website before opening the App Store. When you open one, we add one to a daily count for that link name and a broad device type (iPhone/iPad, Android, other, or automated link preview). We do not store your IP address or your browser's user-agent string, and the count cannot be connected to you or to your use of the app. On Android these links open our web page.
8. Where data is stored and who processes it
Inkana's account and data server is operated by Inimasolution in the Republic of Korea. It stores the account, purchase, handwriting, feedback, and usage data described above. We plan to move this server to Cloudflare's cloud services; we will update this policy before that happens.
Service providers that process data for us:
| Provider | What it does | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosts the website and the link counts; carries all connections between the app and our server and protects them from attacks | Everything sent between the app and our server, including your IP address, while in transit; the link counts | United States and Cloudflare's global network (link counts in the Asia-Pacific region) |
Apple and Google are not our processors. When you sign in or buy with them, they handle that under their own privacy policies, and we exchange with them only what is needed to check a sign-in, verify or update a purchase, or disconnect Sign in with Apple.
International transfer. Because Cloudflare's network operates outside Korea, data you send while using online features (sign-in, sync, purchases, handwriting sharing, feedback, usage data, and the website) passes through Cloudflare's servers abroad, including in the United States, at the moment you send it over an encrypted connection. It is used only to deliver and protect the service and is not kept by Cloudflare beyond its operating logs. If you do not want this, you can use Inkana offline without signing in and with handwriting sharing and anonymous usage data turned off.
Cloudflare and our server may keep short technical logs (such as the time and address of a request) for security and troubleshooting. We do not use them to identify or profile you.
9. How long we keep data
| Data | Kept until |
|---|---|
| Account, linked sign-ins, name and email, synced progress and settings, pass records, encrypted Apple token | You delete your account |
| Sign-in sessions | Expire after 30 days or at sign-out; deleted with your account |
| Shared handwriting | Deleted within 24 months, or earlier with Delete shared handwriting (Android) |
| Feedback | Deleted within 24 months |
| Anonymous usage data | 400 days on our server; at most 30 days waiting on your device |
| Website link counts | Kept as totals; they contain no personal data |
We keep data longer only where a law requires it.
10. Deleting your account
In the app, go to Settings → Account → Delete account and confirm. This works the same on iPhone, iPad, and Android. We delete your account, linked sign-ins, name and email, synced progress and settings, pass records, sessions, and stored Apple credentials, and you are signed out. For accounts created with Sign in with Apple on iPhone or iPad, we first disconnect Inkana from your Apple ID; if Apple cannot be reached, the app shows an error and nothing is deleted, so please try again later.
Deleting your account does not cancel an App Store or Google Play subscription; cancel it in the store where you bought it. Data that was never connected to your account (shared handwriting, feedback, and anonymous usage data) is not affected and is deleted on the schedule above. Learning data on your device stays until you reset it or remove the app.
If you cannot use the app, see how to request account deletion or email us from the address you signed in with. You can also remove Inkana's access in your Google Account (Security → Third-party apps) or Apple ID (Sign in with Apple) settings.
11. Your rights
You can ask to see, correct, delete, or receive a copy of your personal data, or ask us to stop processing it. Most of this you can do in the app; for anything else, contact us below. We may need to confirm that the account is yours, and we will answer within the time required by law (in Korea, generally within 10 days). You can also complain to your data protection authority; in Korea, the Privacy Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, call 1833-6972).
12. Children
Inkana can be used without an account and without sending personal data. Children under the age of digital consent in their country (for example, under 14 in Korea) should sign in or turn on handwriting sharing only with a parent or guardian's permission. If you believe a child gave us personal data without permission, contact us and we will delete it.
13. Security
All connections use HTTPS. Sign-in sessions are stored in the device's secure storage (Keychain on Apple devices, Keystore-encrypted storage on Android). Apple refresh tokens are encrypted on our server. Only Inimasolution can access the server data.
14. Changes to this policy
When we change this policy, we publish the new version here with a new effective date and keep earlier versions available. For important changes, we will also tell you in the app before they take effect.
15. Contact
Inimasolution, Seoul, Republic of Korea. Privacy officer: Hyunjae Ahn. Email: [email protected]. Do not send Apple or Google passwords or payment details by email.