← InkShift

Privacy policy

Last updated 13 August 2026

The short version

This policy covers the InkShift app for iPhone and iPad, and this website. It is written to be read, not to be survived. If anything in it is unclear, ask — support@inkshift.app.

Who is responsible

InkShift is made and operated by Andrew Laignel, as an individual, in the United Kingdom. For data protection purposes that makes me the controller of the limited information described below. You can reach me at support@inkshift.app.

What is stored on your device

The app keeps a small database on your device. It holds everything the app knows about you, and it never leaves:

What Why it exists
The words you have demonstrated To decide which words appear in your new language, and which stay in English
Which sentences you have read To fill the progress ribbon and to know what you have been exposed to
Your position in each book To reopen where you left off
Your settings Difficulty, reading speed, voice, theme, text size and typeface

This database is not encrypted, because it is protected by your device's own storage protections and contains nothing sensitive — it is a list of words you can read. It is not backed up to any server of ours. It may be included in your own iCloud or iTunes device backup, which is between you and Apple. Deleting the app deletes it.

Books themselves are opened read-only. The app has exactly one thing it writes to, and that is the database above.

What leaves your device, and when

Reading is entirely local. Turning a page, tapping a word to see its meaning, running flashcards, moving the difficulty slider — none of these touches the network, and none of them involves any language model. The whole book is prepared before it ever reaches you.

Your device contacts our content delivery network in exactly three situations.

1. Listing the books available

When you open the shelf, the app fetches a catalogue file describing what is on offer. This happens whether or not you install anything.

2. Downloading a book

When you add a book, the app downloads that book's file. The address includes the title and the language pair, so this request discloses which book you chose.

3. Hearing a word spoken

If you tap the speaker on a word, the app requests that word's audio file. The address of the file is derived from the word itself — the word, and your chosen voice, are both part of the path.

This is the only request the app makes that reveals anything about your reading behaviour rather than your library, and it is included here because a policy that omitted it would be false. It happens only when you deliberately ask to hear something. If you never use the audio, no such request is ever made.

What our delivery network can see

Those files are served from cdn.inkshift.app, operated on our behalf by Bunny.net (BunnyWay d.o.o., Slovenia), acting as our processor. Like any web server, it records standard access information:

That is the entire extent of what is collected anywhere, by anyone, on our behalf. The app sends no account, no username, no device identifier, no advertising identifier and no cookie. It adds no header identifying you. Two requests from the same device cannot be linked together by us, because there is nothing in them to link.

We do not build profiles from these logs, do not analyse them for behaviour, and do not combine them with anything else. They exist because serving files produces them. Bunny.net retains them under its own configured retention period and then discards them; we do not copy them anywhere, and there is no dashboard, database or spreadsheet of readers on our side.

Bunny.net is an EU-based provider. Where a request is served from an edge location outside the UK or EEA, any transfer is covered by the standard contractual clauses in their data processing agreement.

Installing a book from a link

The app can install a book from a web address you give it. If you use that feature, your device contacts whichever server you pointed it at, and that server will see your IP address in the ordinary way. It is not ours and this policy does not cover it. The app only accepts secure (HTTPS) addresses.

Where you are

Some books may only be offered in certain countries, because publishing rights differ by territory. To honour that, the app reads your App Store country and your device's region setting, and decides on the device which books to show you.

That country is not sent to us. It is not stored beyond the moment it is used. There is no location permission and the app never asks for one; it does not use GPS or any location service.

Tracking, advertising and children

There is none. The app contains no advertising, no third-party analytics or marketing software development kits, and no crash reporting service. It does not use the advertising identifier, does not track you across other apps or websites, and will never show you Apple's tracking permission prompt, because there is nothing it would be asking for.

We do not knowingly collect personal information from anyone, of any age. Because the app has no accounts and collects nothing, it does not gather information from children either. Books carry age ratings so you can judge what is suitable.

This website

This site is static. It sets no cookies, includes no analytics, and loads no fonts, scripts, images or audio from anywhere else — everything it uses, the one spoken word on the home page included, is served from the same place as the page. Pressing that speaker tells our delivery network nothing, because it does not ask it anything. Whoever hosts the site will keep ordinary server logs, in the same way described above.

Your rights

Under the UK GDPR and the EU GDPR you have the right to access a copy of your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability.

In practice these are easy to satisfy and awkward to demonstrate, for the same reason: beyond the server logs described above, we hold nothing about you, and nothing in those logs identifies you to us. There is no account to export and no record to delete, because none was ever created. Everything the app knows about you is on your device, under your control, and removed with the app.

Our lawful basis for the limited processing that does occur is legitimate interest — namely delivering the files your device asked for, and keeping that service working and secure.

If you are in the UK you may complain to the Information Commissioner's Office (ico.org.uk); in the EEA, to your national data protection authority. We would rather you told us first.

California residents

We do not sell or share personal information, and never have. We do not process it for cross-context behavioural advertising. There is no financial incentive attached to any of this, and you will never be treated differently for exercising a privacy right.

Changes

If this policy changes, the date at the top changes with it. Where a change materially affects what leaves your device, it will be announced in the app's release notes rather than made quietly.

Contact

support@inkshift.app — for anything on this page and for everything else.

← Back to InkShift · Terms of use