Legal
Privacy Policy
WhiteInk (“WhiteInk”, “we”, “us”) is a writing app for novels, scripts, songs, and more, operated by Praveen Chakkadi, trading as Flawe, Bagalkote, Karnataka, India. This policy explains what we collect, why, and the choices you have. Contact: flawestudios@gmail.com.
1. The short version
- WhiteInk is local-first. Your writing stays on your device unless you turn on Cloud Sync.
- We never read, sell, or use your writing to train AI models.
- We don’t collect your precise location, device identifiers, contacts, clipboard, or keystrokes. Your writing, project titles, and Vault reach us only if you upload them with Cloud Sync, and the Vault only in encrypted form.
- We don’t sell your personal data or show ads.
- You can delete your synced data and your account at any time.
2. What we collect
a. Data that stays on your device
Your projects, chapters, scenes, scripts, lyrics, characters, notes, inbox thoughts, and Vault entries are stored locally. We do not receive this data unless you use Cloud Sync (see below).
b. Account data (only if you sign in)
When you sign in with Google, we receive from Google your email address and display name. We also record your sign-up date, last sign-in time, and sign-in count. We use this to run your account, provide support, and prevent abuse.
c. Cloud Sync data (only if you turn it on)
If you enable Cloud Sync, a snapshot of your data is uploaded to your own private storage container so you can move it between your devices. Snapshots are automatically deleted after 24 hours. Our staff and admin tools do not open snapshot contents; the admin system can see only the snapshot’s size and timestamps. Vault entries are included in a snapshot only in encrypted form, and your Vault master passphrase is never sent to us, so we cannot read or recover them. The rest of a snapshot (your writing) is protected in transit and at rest by our storage provider but is not end-to-end encrypted.
d. Usage events
When you sign in or sync, we log a small event (event type, timestamp, and your account ID). We use this to count active users, diagnose failures, and detect abuse. No writing content is included.
e. No analytics or crash reporting
The WhiteInk app contains no analytics, advertising, or crash-reporting tools. If we ever add any, they will be off by default, and we will update this policy and ask you before anything is sent.
f. Website and downloads
Our website does not use analytics or tracking cookies. The website and app downloads are hosted on GitHub, which may process your IP address under its own privacy policy.
g. Support communications
If you email us or file a GitHub issue, we keep that correspondence to respond and improve WhiteInk. Please don’t include private writing in bug reports.
3. How we use data
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide Cloud Sync and your account | Contract |
| Security, abuse prevention, service reliability | Legitimate interests |
| Product improvement via aggregate usage counts | Legitimate interests |
| Legal compliance and responding to requests | Legal obligation |
4. Who we share data with
We do not sell or rent your data. We share it only with service providers that run WhiteInk, under contract, and only as needed:
- Google: sign-in (Google Identity).
- Microsoft Azure: hosting, storage, and logging for Cloud Sync and account records (region: East US).
- Cloudflare: hosting and network security for our admin tools.
- GitHub: website hosting, app downloads, and public issue tracking.
We may also disclose information if required by law, to protect users’ safety or our rights, or in a merger or sale of the business (we’ll tell you and honor this policy’s commitments).
5. Admin access
A small number of named administrators can view account metadata (email, name, sign-up and last-seen dates, sync size, and usage events). Access is restricted by allow-list, requires a fresh Google sign-in, and every administrative action (suspend, reactivate, delete) is recorded in an audit log that stores only a masked email address. Administrators have no ability to read your writing.
6. Retention
| Data | Retention |
|---|---|
| Cloud Sync snapshots | Automatically deleted after 24 hours, or sooner on request |
| Account record | Until you delete your account |
| Usage event logs (account ID, event type, time; no email or writing) | Kept for service statistics and abuse prevention; not linked to your email once your account is deleted |
| Audit log (masked email only) | Kept as a security record of administrative actions |
| Support correspondence | Up to 24 months after the issue is resolved |
7. Your rights
Depending on where you live (including the EEA, UK, California, and India) you may have the right to access, correct, delete, export, or restrict your data, to object to processing, and to withdraw consent. Use in-app options where available or email flawestudios@gmail.com. We will respond within 30 days and may need to verify your identity. You may also lodge a complaint with your local data-protection authority.
- Delete Cloud Sync data: removes your synced container but keeps your account.
- Delete account: removes your synced data and account record. It cannot be undone.
We do not “sell” or “share” personal information as those terms are defined under California law, and we do not use automated decision-making that produces legal effects.
8. Security
Access to our systems uses managed identities, role-based allow-lists, HTTPS everywhere, and audit logging. No system is perfectly secure; because your data is local-first and your Vault passphrase never leaves your device, your most sensitive material is not exposed to our servers. You are responsible for your device security and for keeping your master passphrase safe; we cannot recover it.
9. International transfers
Our infrastructure is in the United States. If you use WhiteInk from elsewhere, your account data and Cloud Sync snapshots are transferred to and processed in the U.S. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Children
WhiteInk is not directed at children under 13, and we do not knowingly collect their data. If you are under 18 (or the age of majority where you live), please use WhiteInk only with a parent or guardian’s permission. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes
We’ll post updates here and change the “Last updated” date. When this policy changes, the app will show you the new version and ask you to accept it before you continue using it.
12. Contact
Praveen Chakkadi (Flawe) · Bagalkote, Karnataka, India · flawestudios@gmail.com