Inkleaf
Privacy Policy
Effective 21 August 2026 · Last updated 21 August 2026
The short version. You write a journal entry and we draw it as a page of manga. To do that we have to keep your entries and one photo of your face, and we have to send them to two AI vendors who do the drawing and the writing. We keep your entries on purpose, because a manga with no memory is just a pile of daily strips — that is explained in full below.
There are no ads in this app, no analytics SDK, no advertising identifier, and nothing that follows you to other apps or websites. We do not sell your data, and we have never been asked to.
Who we are
Inkleaf is an iPhone app built and operated by Zaman Ishtiyaq
(“we”, “us”). It is the app published on the App Store under the bundle identifier
com.lifeofzi.mangalife, and its servers run at
my-manga-life.vercel.app.
For anything in this policy — a question, a copy of your data, a deletion request — write to info+manga@anarchylabs.in. It is a real inbox and a person reads it.
What we collect, and why
| What | Why we have it |
|---|---|
| Your Apple account identifier | Sign in with Apple is the only way into the app. Apple gives us a stable
identifier for you (the sub) and that is what your account is keyed on. |
| Your email address, if you share it | Apple asks you at sign-in whether to share your real address or hide it. If you
choose Hide My Email we only ever see the @privaterelay.appleid.com
relay, and that is genuinely all we have. Either way we use it to reach you about
your account. Apple sends it exactly once, at first sign-in. |
| Your name, if you share it | Same one-time hand-off from Apple. Used to address you in the app. |
| One photo of your face | The selfie you take or pick during onboarding. It is the only thing that lets us draw a character who looks like you. We use it purely as a drawing reference: we do not run face recognition or face detection on it, we do not create a faceprint, biometric template or any numeric face embedding, and we never use it to identify, authenticate or track you. |
| Your journal entries | The text you write. It is the script. Everything the app produces is derived from it. |
| Your cast | The names, relationships and descriptions you type for the recurring people, animals and places in your life, plus the names our system notices repeating in your entries. This is how your sister looks like your sister on page 40. |
| The pages we render | Your manga pages and character sheets, and the volumes they are bound into. |
| A push token for each device | An Apple Push Notification token, if you allow notifications. It is used for one thing: telling you a page has finished rendering. Nothing else is ever pushed. |
| Your subscription status | Whether you are on Free or Pro, when the period ends, and how many pages you have used this month. This is how the page limit is enforced. |
| Ordinary server logs | Our host records requests to our API — timestamp, path, status code, IP address — for operational and abuse-prevention purposes. We do not build profiles from them. |
What we do not collect
- No password. There is no email-and-password flow to breach.
- No payment details. Apple takes the payment. We are told “this person is entitled to Pro until this date” and nothing more. We never see a card number, a billing address, or the last four digits of anything.
- No advertising identifier, no location, no contacts, no health data, no microphone. The app asks for the camera and the photo library, for the selfie and for saving an exported page. That is the whole list of permissions.
- No third-party analytics or attribution SDK. There is no Firebase, no Amplitude, no Mixpanel, no ad network in this app. This is why you are never shown an App Tracking Transparency prompt: we do not track you, so there is nothing to ask for.
Why we keep your entries — the important part
Most journalling apps could delete your text the moment it has been used. We cannot, and you should know exactly why before you write anything into this app.
A manga is not a collection of unrelated daily strips. A boss who ignores emails in March becomes an antagonist by June. A broken coffee machine becomes a running gag the reader waits for. For any of that to happen, the thing writing your pages has to remember what has already happened to you. So we keep three kinds of memory, all tied to your account:
- Your recent entries, word for word. The last four are held in full so that “you finally fixed it yesterday” can be written truthfully.
- Story threads. Running situations, recurring people, places and gags, each stored as a short title and summary with a “heat” score that halves roughly every two weeks of silence. A thread that goes quiet becomes dormant rather than being deleted, so that one mention months later can revive it — which is what a callback is.
- A rolling synopsis. Everything older than the verbatim window is compressed into a single running summary, hard-capped at 2,000 characters, and updated a few entries at a time. It never grows without limit and we never re-read your whole archive to rebuild it.
All of this is stored against your account and used for one purpose: writing your next page. It is not used to profile you, not shared between users, and not used for advertising. Your threads and synopsis are yours and no other account can reach them — the database enforces that with foreign keys, not with a code convention.
The honest trade-off: if you delete your history, your book loses its memory. Later pages will read as unconnected vignettes again. That is a real consequence of a real deletion, not a scare tactic to keep you from asking.
Who else sees your data
We are one person and a server. Everything below is a company we pay to do a specific job, and none of them is paid in data.
| Company | What they receive |
|---|---|
| Apple | Your sign-in, your subscription purchase and payment, and the push notification that tells you a page is ready. Governed by Apple's own privacy policy. |
| Vercel (United States) | Hosts our API and stores every image — your selfie, your character sheets and
every rendered page — in Vercel Blob. Our server region is iad1, in the
United States. |
| Neon (United States) | The Postgres database. Your journal entries, cast, story threads, synopsis and subscription state live here. |
fal.ai (queue.fal.run) and
KIE (api.kie.ai) |
The AI gateways we send work to. Two kinds of work go through them:
· Your selfie and cast reference images, plus a text prompt, go to an image model — Google's nano-banana-2 — which draws your character sheet and your pages. Image requests go primarily to fal.ai, with KIE as an automatic fallback if fal.ai is unavailable; both run the same nano-banana-2 model and receive the same selfie image and prompt. · Your journal entry, together with the recent-entry, thread and synopsis context described above, goes to an Anthropic Claude text model, which turns it into a four-panel beat sheet and extracts the story threads. We send this under each gateway's API terms and the model providers' terms. We do not grant anyone permission to use your entries or your face to train a model, and we do not train any model of our own on them. |
| RevenueCat | Keeps track of whether your subscription is active. It receives your account identifier and the receipt data Apple issues. It does not receive your entries, your photo or your pages. |
We do not sell personal data, we do not share it for advertising or cross-context behavioural advertising, and we do not disclose it to anyone else — except where we are legally compelled to, or where it is genuinely necessary to protect somebody from harm.
Where your data lives
In the United States. If you use the app from outside the US, your entries and images are transferred there and processed there. Our vendors above operate in the US and, in some cases, in other countries where they run infrastructure.
How we protect it
- Everything travels over HTTPS. Our API sends
Strict-Transport-Securityand refuses to be framed or sniffed. - Your session is a short-lived access token — fifteen minutes — and a refresh token that we store only as a hash. If our database were read, the refresh tokens in it could not be replayed.
- Our keys for the AI vendor, the database and the image store are held in server environment variables. They are never in the app you download, and the app itself never talks to the AI vendor directly.
- Every image is copied into our own storage before anything is recorded. No link to a third party's temporary copy of your face is ever persisted.
No system is perfectly secure and we will not pretend otherwise. If something goes wrong we will tell affected users what happened, in plain words, and what we did about it.
How long we keep it
- Your entries, pages, cast, threads and synopsis — for as long as your account exists. This is a journal; deleting last month by default would be a bug, not a courtesy.
- Your selfie — for as long as your account exists, so your character can be redrawn if a render fails or the art needs regenerating.
- Push tokens — until you sign out on that device, Apple tells us the token is dead, or the device stops being used.
- Refresh tokens — 60 days, or until you sign out.
- Server logs — for the short retention window our host applies, which is measured in days, not years.
Your choices
In the app, right now
- Turn notifications off in iOS Settings; we stop pushing and the token stops being used.
- Signing out removes that device's push token from our records.
- Manage or cancel Pro at any time under Settings → your Apple ID → Subscriptions.
Deleting your account
Settings has a real “Delete account” action. Confirming it erases your account and everything attached to it — your entries, your pages, your selfie, your character sheets, your cast, your story threads and your synopsis — immediately, not on a delay. If you would rather not use the app to do it, or you can no longer sign in, write to info+manga@anarchylabs.in from the email address on your account, or from the Apple relay address if you used Hide My Email, and we will confirm it is you and delete it by hand. Backups age out on their own shortly after either path.
Getting a copy, or correcting something
Ask us at the same address and we will send you your entries and pages in a readable format, or fix anything that is wrong. Depending on where you live you may also have the right to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. We will not charge you for asking and we will not treat you differently for having asked.
Children
Inkleaf is not built for children. You must be at least 13 years old to use it, and older if that is the age of digital consent where you live. We do not knowingly collect anything from a child under 13. If you believe a child has an account, write to us and we will delete it.
Related, and it matters here: the selfie should be your face, and any photo or description you add for a cast member should be of somebody who is happy to be drawn.
Changes to this policy
If we change something that materially affects what we collect or who receives it, we will update the date at the top and tell you in the app before the change takes effect. We will not quietly widen this policy and hope you do not reread it.
Contact
Zaman Ishtiyaq · info+manga@anarchylabs.in