Overink Privacy Policy

Your photos, designs and renders

To make a render, Overink prepares the photo you take or pick on your phone (it is resized to at most 1,536 pixels on its long side, and location and other metadata are removed) and sends it through aqualley’s AI gateway, which runs on Amazon Web Services in the United States, together with what the render needs: the body area you chose, the area you painted over the old ink (for a cover-up) or where you placed the new design, the design itself (a design from Overink’s library, an image you upload, or the words you type to describe one) and the style and options you picked. A design on white for the artist sheet is made the same way from your description and style. The gateway sends these to these third-party AI companies, which run the image models:

OpenAI: makes the render or the design with its GPT Image model.
Google: makes the render or the design with its Gemini model when OpenAI returns no picture.

Your photos and designs are used only to make the renders and designs you asked for. Overink does not use face recognition and never makes face templates or other biometric data from your photos. Before your first photo is sent, Overink explains this and asks for your agreement; without it nothing is uploaded. Overink uses the camera only when you choose to take a photo, and the system photo picker otherwise, so it reads only the photos you pick and does not ask for access to your whole photo library.

How long we keep your photos and renders

Photos, designs and renders: aqualley’s gateway keeps a private copy of each photo, mask and design you send and of each finished render, linked to your anonymous app user ID, so that only your copy of Overink can download the result. We keep them for 7 days, then delete them automatically. We do not sell them, share them with anyone else or use them for advertising. You can delete them sooner at any time (see below).
The AI companies’ copies: OpenAI and Google receive the photo, the design and the render’s instructions only so that they can make your render, and handle them and the result under their own terms and privacy policies for their APIs.
On your phone: Overink keeps your saved renders and favourites on your phone until you delete them. When you save or share a render or an artist sheet, the destination you choose, such as Photos, Instagram, email or another app, handles it under its own privacy practices. If you use iCloud, Google backup or another backup service, Overink’s saved renders may be included according to that service’s settings.
Reports: if you report a render, we keep the report (the reason, any note you write and an anonymous app ID) together with that render’s photo, mask, design and result for up to 400 days, so we can review it; only our team looks at them. Deleting your photos (see below) deletes them too.

Deleting your photos

Settings › Your photos › Delete my photos from our servers asks aqualley’s gateway to delete every photo, design and render it keeps for you, and the app shows when that is done. Settings › Delete saved results on this phone removes your saved renders from your phone. To have the other records linked to your User ID deleted, see Delete your data.

Your credits, free render, offers and invites

To keep plan and pack credits, credits returned for failed renders, the free render, gifts from invites and special offers fair, aqualley’s gateway records each render and design you start: a job identifier, the kind of render, whether it succeeded and which credits it used. These records are linked to your anonymous app user ID and to the identifiers of your App Store or Google Play purchases, which the gateway reads from RevenueCat, so that a purchase cannot be spent twice. The app proves to our server that it is the genuine Overink app with Apple’s App Attest on iPhone and Google’s Play Integrity on Android. So that the free render, an offer’s timer and an invite reward count once per phone, the gateway keeps a one-way hash of a device identifier (on iPhone one that our apps share on your phone, on Android the Android ID that Android gives the app), never the identifier itself. To limit free renders from one network, it also counts free renders per day under a one-way hash of your network’s IP address, and deletes that count after two days. When you invite a friend, the gateway records your invite code and which codes were claimed and rewarded. None of this is used for advertising.

Feedback

If you send feedback, request a feature, or tell us why a render did not turn out (“How did it turn out?”), the app sends your choice and anything you write, with your anonymous app user ID, to aqualley’s gateway so we can improve Overink.

Notifications

If you allow notifications, Overink sends its push token, your time zone and whether you want offers to aqualley’s gateway, which sends notifications through Google’s Firebase Cloud Messaging (and Apple’s push service on iPhone). We use them to tell you when your render is ready and, while the Offers switch in Settings is on, for occasional offers such as a reminder before a special offer ends. We send at most one offer a day and none at night in your time zone. You can turn offers off in Settings, or all notifications in your phone’s settings.

Purchases

Apple or Google processes payments for Overink’s subscriptions and credit packs. Overink uses RevenueCat to verify purchases. RevenueCat may process an anonymous app user identifier, purchase status, and device and diagnostic information needed to provide that service. Overink Settings shows this identifier as your User ID so you can choose to share it with support. Offer codes are entered in Apple’s redemption sheet or on Google Play’s redeem page; Overink does not read or send the code. aqualley does not receive your payment-card details.

Optional usage analytics

When usage analytics is on in Overink Settings, the app sends limited events to PostHog Cloud in the United States. Events include a random Overink-specific identifier, a session identifier, the app version and build, whether the device is one of our own test devices, and actions such as opening the app for the first time, finishing onboarding, choosing cover-up or a new tattoo, your choice on the photo agreement, choosing a photo, a body area, a design and a style, starting, finishing, saving, sharing or reporting a render and whether it failed, exporting an artist sheet, viewing the paywall, packs or an offer, notification and invite choices, and the outcome of a purchase, restore or redeem attempt. They never contain your photos, designs, the words you type, renders, payment details or contact details. PostHog derives your approximate country from the IP address of each request and stores that IP address alongside the event; Overink does not read device location, and we use country only for aggregate reporting. Advertising tracking and session replay are disabled.

Usage analytics is on by default and you can turn it off in Settings at any time. This stops further collection, discards unsent events and resets the local analytics identifier; it does not remove events PostHog has already received. See PostHog’s privacy policy for that service.

Crash reports

When usage analytics is on, Overink also sends crash reports to Google’s Firebase Crashlytics so we can fix problems. A crash report contains technical details of the crash (the code that failed), the app version, device model, operating system version and the state of the app at the time, with a random installation identifier; it never contains your photos, designs, renders, User ID, payment details or contact details. Turning off usage analytics in Settings also turns off crash reports. See Firebase’s privacy information.

How you found Overink

To learn which of our videos, links and ads bring people to Overink, the app records once how it was installed: whether it came from an Apple Search Ads campaign (Apple tells the app through its AdServices service, without tracking you across apps), or, on Android, the campaign or invite code in one of our links, and, if you choose to answer, where you heard about Overink. These values are added to the usage analytics events and stored with your anonymous app user ID at RevenueCat, so we can see downloads and revenue by source in aggregate. They are not sent when usage analytics is off. Our links at go.aqualley.net count taps per campaign, device type and country, and store no IP address or identifier.

Support emails

“Report a bug” opens an email to info@aqualley.net filled in with your User ID, app version and build, device model, iOS or Android version, locale and store country. Nothing is sent unless you send it.

Children

Overink is for adults and is not directed to children. We do not knowingly collect personal information from children through the app.

Changes and contact

We may update this policy as Overink changes. The current version will be posted on this page. For privacy questions or requests, contact info@aqualley.net. To have the records linked to your User ID deleted, email us the User ID shown in Overink Settings; we delete aqualley’s gateway records for it within 30 days, except the records that stop a purchase, the free render, an offer or an invite reward from being used twice. See Delete your data for what is deleted and what is kept. Purchase records kept by Apple, Google and RevenueCat follow their own policies.

Overink Support · Terms of Use · Privacy Policy