Skip to content

Privacy policy

Last updated 17 October 2026

This policy explains what Hayden Killiby (ABN 94 858 034 943) collects when you use Inkloop, why, who it's shared with, and the choices you have.

What we collect

  • Account: your email address and when you joined.
  • Sign-ins: the time, IP address and browser of each sign-in, kept for 180 days to protect your account and stop abuse.
  • What you make: your prompts, settings, uploads, generated images and videos, your Cast characters and your projects.
  • Payments: your plan, purchases, refunds and disputes, and the IP address of each checkout (kept for 180 days for fraud checks). Stripe handles your card; we never see or store the full number.
  • Messages: emails you send us.
  • Cookies and browser storage: a sign-in cookie, a cookie that remembers your cookie choice (kept for 180 days), and drafts saved in your browser. We don't use advertising cookies or run analytics. If we add analytics, we'll ask first.

How we use it

  • To run your account and sign you in.
  • To make your generations and store the results.
  • To take payments, add credits, and handle refunds and disputes.
  • To prevent fraud and abuse, for example with limits on new accounts, payment checks and content reports.
  • To send the emails you need: sign-in links, receipts, credits added, and important notices about your account or the service.
  • To answer support requests and meet legal obligations, such as keeping tax records.

We don't sell your personal information or use it for advertising.

Who we share it with

We use these providers to run Inkloop. Each handles data for us under its own terms and security practices:

  • Higgsfield runs the AI models. It receives your prompts, settings and uploads and makes your outputs. Its Terms of Use let it use content processed through its service to train and improve its models.
  • Stripe processes payments and checks them for fraud.
  • Resend sends our emails.
  • MongoDB Atlas, on Amazon Web Services in the United States, is our database.
  • Cloudflare R2 stores your images and videos and delivers them to you.
  • Vercel, in the United States, hosts the website.

These providers are mostly in the United States, so your information is stored and processed outside Australia.

We may also share information when the law requires it, to protect someone from serious harm, or if Inkloop is sold or transferred, in which case this policy keeps applying to your information.

Community

Only what you choose to publish to Community is public: the output, its prompt and its settings. Posts don't show your name or email, and your uploads, Cast and spending are never shown. You can unpublish at any time.

How long we keep it

  • Your account and what you make: until you delete it or close your account.
  • Generations and uploads you delete: removed from our storage straight away, and from backups as they expire.
  • Sign-in and checkout records with IP addresses: 180 days.
  • Payment and tax records: 5 years after the transaction, as Australian tax law requires.
  • Content Higgsfield has already processed is kept under Higgsfield's terms.

Security

Data is encrypted in transit, access to our systems is limited and protected, and sign-in uses one-time email links instead of passwords. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and the regulator, as the law requires.

Your choices and rights

  • Delete generations and uploads yourself at any time in Assets.
  • Change your cookie choice from the link in the footer.
  • Ask for a copy of your information, ask us to correct it, or ask us to close your account and delete it, by emailing hadeenkillovic@gmail.com from your account's address. We'll reply within 30 days.
  • Depending on where you live (for example the EU or the UK), you may have more rights, such as objecting to how we use your data or taking a copy elsewhere. Ask us and we'll help.

Children

Inkloop is for people aged 18 and over. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

When we change this policy we update the date at the top. For significant changes we'll also email you or show a notice in Inkloop.

Contact and complaints

Questions or complaints about privacy: hadeenkillovic@gmail.com. We'll respond within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.