Security

Last updated June 6, 2026

In plain English: We take the security of your account and your data seriously. If you think you have found a security problem, email us at [email protected] and we will look into it.

How we protect your data

• Encrypted in transit. The whole site and app are served over HTTPS. Your photos upload directly to secure cloud storage over an encrypted connection.
• Trusted sign-in. Accounts and sign-in are handled by Clerk, a dedicated authentication provider. Inky never stores your password.
• Least access. Signed-in features are gated so your items and account data are only reachable by you (and, where you ask for it, our support team).
• Reputable providers. We build on established infrastructure and payment providers rather than rolling our own for the sensitive parts.

Reporting a security issue

If you believe you have found a vulnerability or a security problem with Inky, we want to hear about it. Please email [email protected] with:

• a description of the issue and where you found it;
• the steps needed to reproduce it; and
• any relevant screenshots, logs, or proof-of-concept details.

Our machine-readable contact details follow RFC 9116 and are published at /.well-known/security.txt.

Responsible disclosure

We ask that you give us a reasonable chance to investigate and fix an issue before sharing it publicly, and that you avoid privacy violations, data destruction, or disruption to other people while testing. We will acknowledge reports as quickly as we can and keep you updated as we work on a fix. We do not take legal action against researchers who report issues in good faith and follow this policy.

Questions

For anything that is not a security issue, our contact page lists the right inbox. For privacy questions, see our Privacy Policy.