Draft for legal review. This policy describes how InkConsent actually handles data today. It has not yet been reviewed by a lawyer, and items marked [to confirm] must be completed before it is relied on.
Privacy Policy
Who is responsible for what
InkConsent is software that tattoo studios use to collect client consent. For information about a studio's clients, the studio is the controller: it decides what to collect and why, and clients should contact the studio first about their records. Adulis Labs acts as the studio's processor, storing and processing that information on the studio's behalf. For the studio's own account (owner and staff names, emails and passwords), Adulis Labs is the controller.
What we hold
- Studio staff: name, email address, role, a salted hash of the password (never the password itself), and a Google account identifier if Google sign-in is used.
- Clients of a studio: name, date of birth, phone and email, emergency contact, height if recorded, a photo of an identity document with its type, number and expiry, and for minors the linked guardian's details.
- Health screening: the answers a client gives to the studio's questions, any concerns flagged, and the artist's recorded decision about each. This is health information and is treated as sensitive.
- Consent records: the consent text shown, the signature image or scanned paper page, when and how it was signed, the IP address and device details of the signing, and a cryptographic fingerprint of the document.
- Aftercare: which instructions were sent, by what channel, and when the client confirmed receiving them.
- Operational records: an audit log of actions taken in the studio's account.
Why we hold it
Only to provide the service the studio uses: recording informed consent and health screening before a procedure, proving afterwards what was agreed, and sending aftercare. We do not sell personal data, use it for advertising, or use client records to train models.
Who else processes it
| Provider | What for | Where |
|---|---|---|
| MongoDB Atlas | Database of all records | Seoul, South Korea [confirm, or update if the database is moved] |
| Cloudflare R2 | ID photos, signatures, signed PDFs, encrypted backups | Cloudflare network |
| Hahu Cloud (Enix Ltd) | Application server | United Kingdom |
| Postmark | Sending aftercare, record links and password resets by email | [to confirm] |
| Optional Google sign-in for studio staff | Global | |
| RevenueCat, Google Play, Apple App Store | Processing studio subscription payments | Global |
Card details for subscriptions are handled by Google Play or the App Store; InkConsent never sees them.
How it is protected
- All connections are encrypted (HTTPS).
- Each studio's records are kept separate; staff of one studio cannot reach another's.
- ID photos, signatures and documents are served only through links that expire after an hour.
- Backups are encrypted with a key held separately from the backups themselves.
- Passwords are stored only as salted hashes; reset links work once and expire after 30 minutes.
How long it is kept
Consent records are kept for as long as the studio keeps them, because they may be needed to show what was agreed. Studios can set retention periods after which records are deleted automatically. Records concerning minors may be held longer where the law requires. [Default retention periods to confirm with the studio's local legal requirements.]
Your rights
Clients can ask the studio that holds their record to see, correct or delete it, subject to any legal duty to keep consent records. Studio staff can ask us directly. Contact: inkconsent@adulislabs.com. You may also have the right to complain to your data protection authority.
Children
A minor's record can only be completed with a verified parent or legal guardian, who signs on the minor's behalf.
Changes
We will post changes here and update the date above. Material changes will be notified to studio owners by email.