Privacy Policy

Last updated: August 18, 2026

1. Who we are and what this covers

This policy explains how Inkmii ("we," "us") handles your information when you use inkmii.com to design and order custom comics. Inkmii is a trade name (DBA) of ARKR Finance LLC, a Hawaii limited liability company — a small, human-run business where your order is handled by a person, not by an automated pipeline. Contact us any time at support@inkmii.com.

2. What we collect

  • Account info. Your email address, verified with a one-time code — this creates your account. If you add an optional password, it's stored by our authentication provider (Supabase); we never see it.
  • Your order. Everything you enter while designing: product choices, your story or script text (including any printed dedication), character details (names, favorite colors, descriptions), your shipping name and address, and gift messages. Your draft autosaves as you type so you can resume on any device — so this information reaches our database while you work, not just at checkout.
  • Photos. If you upload a photo to create a character, it is used transiently and never stored by us — section 3 explains exactly what happens.
  • Generated character art. The AI-generated avatars you create are saved (privately) so you can pick your favorite, and the ones you order with are kept in your account so you can reuse them — see section 3.
  • A password, if you choose one. Optional — you can always sign in with an emailed 6-digit code instead. If you set one, it's stored by our authentication provider as a salted hash; we never see or store the password itself.
  • Your marketing preference. Whether you ticked the optional "email me about new products" box, and when — so we can show that you asked, and stop if you change your mind.
  • Payment info. Payments run on Stripe's checkout pages. We store your order amounts and Stripe's transaction identifiers — never card numbers or billing details, which go directly to Stripe.
  • Proof feedback. If you request changes to a proof, we keep the feedback you write so we can act on it.
  • Automatic basics. A sign-in cookie (section 6). Our infrastructure providers (hosting, authentication) keep standard server logs, which include IP addresses; our own application doesn't track or profile you. We use no analytics or advertising trackers.
  • Phone number. Asked at checkout for one reason: the courier needs someone to call if they can't find you, and our print partner requires it before they will accept a shipment. We pass it to them for that delivery and keep it with your order. We only text you if you tick the box asking us to — that is a separate choice, it is never assumed from having your number, and it covers updates about your own order, never marketing. You can reply STOP at any time.

Free-text fields (your story, character descriptions, gift messages) often describe people other than you — family, friends, kids. Please only include details about others with their permission (for children, a parent or guardian's — see our Terms of Service).

3. Photos and AI character art — exactly what happens

The character step says "Your photos are never stored" — here is precisely what that means:

  • When you upload a photo, your browser first shrinks it to a small copy. That copy is sent over an encrypted connection to our server, which passes it — along with your character's description, favorite color, and chosen art style — to Google's Gemini image service to generate your cartoon avatar. Then it's discarded. If you click Regenerate, your browser sends that same small copy again — each time it's used for that one generation and then discarded.
  • Your photo is never written to our database, our file storage, or our logs. It exists in memory only for the seconds the generation takes. Only the AI-generated avatar is saved.
  • What Google receives is the image and description text only — never your name, email, or order details. (Whatever you type into a character description is sent to Google as written — so leave out anything you'd rather not include.) Google processes it as our service provider under its Gemini API terms: Google may log the request for a limited period solely to detect abuse and meet legal requirements, and on the paid tier we use, your content is not used to train Google's models.
  • We instruct the model to create stylized, family-friendly cartoon art — not a photorealistic reproduction of the person in the photo. If you edit an avatar, the previously generated avatar (not your original photo) is sent back to Google with your edit instruction.

Where generated avatars live: in private storage that only you (through the app) and we can access. Every version you generate is kept while you work so you can compare and pick. When you purchase, we keep only your chosen avatar — it becomes the reference our artists work from — and delete all the other versions. If you leave a draft unfinished, your saved character art is deleted after about 30 days of inactivity (we email a warning first).

Your avatar library. When you place an order, a copy of each character you chose is saved to your account under My avatars, so you can reuse them on future orders instead of creating them again. These belong to your account rather than to one order: they stay until you delete them, and the 30-day draft clean-up above never touches them. You can delete any of them yourself from that page at any time. (This is still only the AI-generated artwork — it never includes a photo you uploaded.)

Sharing an avatar. You can offer one of your saved avatars to someone else's email address — a co-parent or grandparent, say. Nothing is handed over when you send it: we email an invitation, and the artwork is only copied to that person once they sign in and prove the address is theirs. If you mistype the address, nothing is shared and the offer expires on its own. Once someone accepts, they have their own copy, which they control and can delete; deleting yours afterwards doesn't remove theirs. Please only share likenesses you have permission to share.

4. How we use your information

  • Making and delivering your order. When you pay, your complete order — story, characters, chosen avatars, shipping address, gift message — is compiled and sent to our production team's inbox, where a real person crafts your comic from it.
  • Order emails. Sign-in codes, your receipt, your proof for approval, and shipping updates.
  • Draft reminders. If you start an order and step away, we send a reminder (about a day later) and a final notice (about four weeks later) before your saved character art is deleted. To opt out of these, reply to the email or write support@inkmii.com — we'll stop them.
  • Marketing email — only if you ask for it. At checkout there is an unticked box you can tick to hear about new products, restocks and occasional offers. If you leave it alone we don't send you any, and you'll still get the order emails above either way. If you join a waitlist ("tell me when notebooks are back"), we use your address for that announcement. Every marketing email has a one-click unsubscribe, and we never sell or rent your address. These are sent through MailerLite (section 5).
  • Support, security, and legal. Answering your messages, preventing fraud and abuse, and meeting our legal obligations (like tax records).

5. Who we share information with

We never sell your personal information and never share it for advertising. We share it only with the service providers that run Inkmii, each receiving only what its job requires:

  • Stripe (payments) — your email, order total, a product label like "Comic book (8-page)," and your order's internal reference number (so we can match the payment to your order). Your story, characters, photos, and address are not sent to Stripe.
  • Google (Gemini AI) — uploaded photos and character descriptions, only to generate avatars, with no identifying details attached (section 3).
  • Supabase (database, sign-in, and file storage) — where your account, orders, and generated avatars live.
  • Resend (email delivery) — delivers our emails to you, and the compiled order (including its details and chosen avatars) to our production inbox.
  • Lulu (book printing and shipping) — for printed comics and spiral notebooks, your name, shipping address, phone number and email, plus the print-ready files for your book. They print it and hand it to the carrier. Your story text, photos and account details are not sent to them.
  • MailerLite (marketing email) — only if you opted in or joined a waitlist. They receive your email address and, if you gave one, your name — never your story, characters, avatars, address or order details. Unsubscribing is handled there, in one click, and it takes effect for good.
  • Vercel (hosting) — runs the website; like any host, it keeps standard request logs.

Beyond these: only if required by law, or to protect our rights and our customers' safety.

6. Cookies

We use only essential cookies: the sign-in session cookie that keeps you logged in while you design and order. No analytics cookies, no advertising cookies, no tracking pixels. We don't track you across other websites, and we don't allow anyone else to collect information about your activity across other sites through inkmii.com — so our site behaves the same whether or not your browser sends a "Do Not Track" or Global Privacy Control signal. When you pay, Stripe's checkout pages set Stripe's own cookies under Stripe's privacy policy.

7. How long we keep things

  • Uploaded photos: never stored by us — discarded from our systems within seconds (section 3).
  • Character art on unfinished drafts: deleted after about 30 days of inactivity, with email warnings first.
  • Unchosen avatar versions: deleted when you purchase.
  • Saved avatars in your library (including any shared with you): kept until you delete them — that's the point of them. The 30-day draft clean-up doesn't apply.
  • Unaccepted share offers: expire on their own after about 30 days, and nothing is copied unless they're accepted.
  • Marketing list: your address stays on it until you unsubscribe. Unsubscribing is permanent — ordering again later does not put you back on.
  • Unfinished draft details (your text, address, email): kept so you can pick up where you left off — until you ask us to delete them (section 8).
  • Completed orders (order details, your chosen avatar, proof feedback): kept as our record of what we made for you — it lets us help with reprints and remakes — and for legal and accounting requirements.

8. Your rights and choices

Email support@inkmii.com to access, correct, or delete your information, or to opt out of draft-reminder emails. We're a small team, so these requests are handled personally rather than by an automated dashboard — we'll confirm and complete them promptly, within any legally required timeframe. A couple of honest notes:

  • Deletion covers your account, drafts, order details, and stored avatars. We may need to keep minimal records the law requires us to keep (like completed-transaction records for tax purposes).
  • Once an order is paid, you can't edit it in the app — email us quickly if something (like your shipping address) needs fixing and we'll correct it by hand before it ships.

Depending on where you live (for example, California), you may have specific legal rights to know, correct, or delete personal information, and the right not to be discriminated against for exercising them. We honor these requests regardless of your state. We do not sell or "share" personal information as those terms are defined in the California Consumer Privacy Act.

9. Children's privacy

Inkmii is not directed at children under 13, and we don't knowingly collect personal information from children. Ordering requires being an adult. Comics about children — including their photos and descriptions — may only be submitted by a parent or legal guardian, or by another adult with that parent's or guardian's permission. Remember: a child's uploaded photo is never stored by us (section 3); only the cartoon avatar is kept. If you believe a child's information was submitted without proper permission, email support@inkmii.com and we'll remove it.

10. Security

Your data is encrypted in transit; stored avatars live in private storage accessible only through authenticated, expiring links; and database access rules ensure customers can only ever see their own orders. Card details are handled entirely by Stripe. No internet service can promise perfect security, but we've built Inkmii so that the most sensitive things — your card and your photos — are never in our systems to begin with.

11. Where data is processed

Inkmii serves customers in the United States, and our service providers process data in the United States (and other countries where they operate, under their own compliance programs).

12. Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top — and for material changes, we'll notify you by email or a prominent notice on the site before the change takes effect. We won't weaken the core promises here (like photo transience) without telling you clearly first.

13. Contact

Privacy questions, requests, or concerns: support@inkmii.com, or by mail at Inkmii, PO Box 3518, Kailua-Kona, HI 96745. We read everything and reply as quickly as we can — email is fastest — and always within any timeframe the law requires.