What Inki accesses
When you connect Notion through its official OAuth flow, you choose exactly which workspaces and databases Inki may see. Inki uses that access for two things only:
- Reading a database's schema (its property names and types) so it can build the right capture fields.
- Creating and editing the items you explicitly ask it to, the things you type and save.
Inki never reads, indexes, or transmits the contents of databases you haven't shared with it.
Where your data lives
Your data lives only in places that are yours:
- On your device. A local cache holds recent items for offline display and a queue of captures waiting to sync. Deleting the app removes this cache.
- In your Notion. The items you create live in your own Notion workspace, governed by Notion's privacy policy.
- In your iCloud. Your completion stats and streaks sync privately across your own Apple devices through Apple's iCloud. Only you can read them, they never pass through or live on an Inki server.
Your Notion access token is stored in your device's Keychain (Apple's secure storage), never in a plain file, and never stored on a server.
What Inki does not do
- There is no Inki content server. Your captures travel directly between your device and Notion. The only exception is a one-time sign-in step (see below).
- No third-party analytics, advertising, or trackers are bundled in the app.
- Inki does not sell, rent, or share your data with anyone. There's no one to share it with.
- There is no telemetry, Inki collects no usage data, sends no crash reports, and has nothing to opt into.
The one-time sign-in step
Notion's OAuth flow requires a confidential secret that can't live inside a distributed app, so the one-time token exchange when you connect is brokered by a small developer-operated service (a Cloudflare Worker at inki-oauth.devero.workers.dev). It swaps Notion's authorization code for your access token and hands the token straight back to your device, it never stores your token or any of your Notion content. Standard infrastructure logs record the request's IP address, timestamp, and response status, and on a successful sign-in the workspace and bot IDs that Notion returns. Those IDs identify a Notion workspace, not you personally, and the service never joins them to your name, email, or any other identifying information. These logs are kept only for error diagnosis, on the hosting provider's (Cloudflare's) default retention schedule, and are never used for tracking or analytics. After sign-in, nothing else passes through this service.
This website
The Inki app contains no analytics of any kind. This website (inkiapp.com) uses Cloudflare Web Analytics, a privacy-preserving service that measures aggregate page views and referrers so we can understand where our traffic comes from. It sets no cookies, does not track you across sites, does not fingerprint your device, and collects no personal information, so no cookie banner is needed.
Security and hosting. This website is hosted and delivered by Cloudflare. As part of serving the site, Cloudflare applies standard security protections against automated abuse, which may include a script that checks whether a visitor is a real browser. This is a security measure, not analytics, and it is not used to build a profile of you or to track you across sites.
Notion's role
Inki is an independent app that uses Notion's official public API. Once an item is in your Notion workspace, it's governed by Notion's own privacy policy. Inki is not affiliated with, endorsed by, or sponsored by Notion Labs, Inc.
Purchases and subscriptions
Inki Pro is sold through Apple's App Store. All payments, subscriptions, and free trials are handled entirely by Apple, Inki never sees or stores your payment details, and your purchase is verified privately on your device. Inki keeps no record of your purchase history on any server.
Your controls
- Disconnect anytime. You can revoke Inki's access from within the app, and from your Notion integration settings, at any time.
- Delete everything. Removing the app deletes the local cache and the Keychain-stored token from your device. Stats stored in your iCloud can be cleared from your device's iCloud settings.
- Choose your scope. You decide which workspaces and databases Inki can see, and you can change that at any point.
Who operates Inki
Inki is built and operated by David Parker (d.b.a. Devero Partners), Illinois, USA. If you have a question about your data, or want to exercise a privacy right such as access or deletion, email the address below and a real person will reply.
Children
Inki is a productivity tool intended for general audiences and is not directed at children under 13. It does not knowingly collect personal information from children.
Changes to this policy
If this policy changes, the "last updated" date above will change with it. Material changes will be noted in the app's release notes.
Contact
Questions about privacy? Email support@inkiapp.com and a real person will reply.