Privacy Policy

Rocket Digital Limited ("we," "us," or "our") operates the INKAI - AI Tattoo Generator mobile application and the website https://www.inkaitattooapp.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Personal Information

When you create an account or use our Service, we may collect the following personal information:

• Name and email address
• Account credentials (authentication tokens)
• Profile information you choose to provide
• Payment and subscription information (processed by RevenueCat)
• Communications you send to us (e.g., support requests, feedback)

1.2 Usage Data

We automatically collect certain information when you use our Service, including:

• App usage patterns, features accessed, and interaction data
• Search queries and text prompts submitted to generate tattoo designs
• Session duration and frequency of use
• Crash reports and performance data
• Referring URLs and pages visited on our website

1.3 Device Information

We may collect information about the device you use, including:

• Device type, model, and operating system version
• Unique device identifiers (e.g., IDFA, IDFV, Android Advertising ID)
• IP address and approximate geographic location
• Browser type and version (for website visitors)
• Screen resolution and device language settings

1.4 AI-Generated Content

When you use our AI tattoo generation features, we collect:

• Text prompts and descriptions you submit for tattoo generation
• Style preferences and customisation parameters you select
• AI-generated tattoo images and designs created through the Service
• Images you upload for reference or tattoo try-on features
• Your interactions with generated content (saves, shares, favourites)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain our Service: To operate the AI tattoo generation features, process your design requests, and deliver personalised tattoo designs.
• Account management: To create and manage your user account, authenticate your identity, and process subscriptions and in-app purchases.
• Improve our Service: To analyse usage patterns, diagnose technical issues, and develop new features and improvements.
• Personalisation: To customise your experience, suggest tattoo styles, and provide relevant content recommendations.
• Advertising: To display relevant advertisements within the app and measure advertising campaign effectiveness.
• Communications: To send you service updates, security alerts, and support messages. With your consent, we may also send promotional communications.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• Safety and security: To detect, prevent, and address fraud, abuse, and security issues.

3. Third-Party Services

We use the following third-party services to operate and improve our Service. Each service may collect and process data as described below:

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account data: Retained for as long as your account remains active. Upon account deletion, your personal data will be deleted or anonymised within 30 days, except where retention is required by law.
• AI-generated content: Tattoo designs and associated prompts are retained for the duration of your account. You may delete individual designs at any time through the app.
• Usage and analytics data: Retained in aggregated or anonymised form for up to 26 months for analytics purposes.
• Transaction data: Retained for up to 7 years as required for financial and tax compliance.
• Support communications: Retained for up to 3 years after the last interaction.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication for internal systems
• Secure cloud infrastructure provided by Microsoft Azure and Firebase

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee its absolute security.

6. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@rocketdigital.ai so that we can take appropriate action.

7. Your Rights

7.1 Rights Under the GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: You have the right to request copies of your personal data.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: You have the right to request deletion of your personal data under certain conditions.
• Right to restrict processing: You have the right to request restriction of processing of your personal data.
• Right to data portability: You have the right to request transfer of your data to another organisation or directly to you.
• Right to object: You have the right to object to processing of your personal data for certain purposes, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

7.2 Rights Under the CCPA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of collection, the purposes for collection, and the categories of third parties with whom we share your data.
• Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to opt-out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information.
• Right to non-discrimination: You have the right not to be discriminated against for exercising your privacy rights.

To exercise any of these rights, please contact us at hello@rocketdigital.ai. We will respond to your request within 30 days (or as otherwise required by applicable law).

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device.

Types of Cookies We Use

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Used by Google Analytics and Vercel Analytics to understand how visitors interact with our website, including pages visited, time spent, and navigation patterns.
• Advertising cookies: Used by Meta Pixel to track conversions and optimise our advertising campaigns on Facebook and Instagram.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our website.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our servers and third-party service providers are located in various countries, including the United States, the European Union, and other regions.

When we transfer data outside of the EEA or the United Kingdom, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission for the recipient country
• Binding Corporate Rules where applicable
• Reliance on the service provider's compliance with recognised frameworks (e.g., EU-U.S. Data Privacy Framework)

By using our Service, you acknowledge that your data may be processed in jurisdictions with different data protection laws than your own.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Last updated" date
• Sending you an in-app notification or email for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related enquiries, you also have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.