Privacy Policy

Inki (macOS and iOS) — Effective June 16, 2026

Overview

Inki is a lightweight client for the Notion API that lets you quickly add items and manage pages from your menu bar (macOS) or home screen (iOS). Your privacy is fundamental to how this app is built: there is no Inki content server, the app includes no analytics, and it does no tracking. Your captures go directly between your device and Notion. The single exception is a one-time step during initial sign-in, described under Network Connections below.

You authorize Inki through Notion's official OAuth sign-in flow. During sign-in you choose exactly which workspaces and databases Inki may access. After you approve, Inki receives an access token that is stored locally in your device's Keychain; from then on, all communication goes directly between your device and Notion.

What Data the App Uses

Inki handles only the data necessary to function:

• OAuth Token — When you connect via OAuth, the app receives an access token from Notion after you authorize it. This token lets the app communicate with Notion on your behalf.
• Notion Workspace Data — Database names, page titles, property values, and other content fetched from the workspaces and databases you have shared with the integration, via the Notion API.
• App Preferences — Your selected databases, favorites, filter settings, and display preferences.

Where Data Is Stored

Your data stays in places that are yours — on your device, and (for one small piece of data) in your own iCloud:

• Authentication Credentials — Your OAuth access token is stored in your device's Keychain using Apple's Security framework. It is local to the device and is not synced via iCloud Keychain or any other service. On the same device, the token is shared between the main app and its extensions (the share extension) through a secure Keychain access group. It is removed from the Keychain immediately when you disconnect.
• App Preferences — Your selected databases, favorites, filter settings, and display preferences are stored in a local file on your device. These are not synced or uploaded anywhere.
• Cached Item Data — The app caches a summary of your Notion database items (titles, status, dates, and property values), along with each database's schema (its property names and types), in local files on your device. This cache enables the widgets to display your items, lets the app and Share extension render forms while offline, and allows the app to show data while loading. Cached data is not synced or uploaded anywhere.
• Recent Items — A list of recently added items (title, database, and timestamp) is stored locally for your convenience. This data is not synced or uploaded anywhere.
• Completion Stats & Streaks — If you complete items in Inki, a small record of your completion counts and streaks syncs privately across your own Apple devices through Apple's iCloud (using Apple's key-value store). Only you can access this data; it never passes through or is stored on any server operated by the developer.

Network Connections

During normal use, the app communicates with one external service: Notion's API at api.notion.com. All requests use HTTPS and are authenticated with your OAuth token. The app does not include any analytics, crash reporting, or telemetry services.

Because Notion's OAuth flow requires a confidential client secret that cannot be embedded safely in a distributed app, the one-time token exchange during sign-in is brokered by a small developer-operated service: a Cloudflare Worker at inki-oauth.devero.workers.dev. When you complete sign-in, this Worker exchanges Notion's one-time authorization code for an access token and forwards the token (and the workspace details Notion returns with it) back to your device. The Worker does not store your access token or any of your Notion content.

As with any web service, standard Cloudflare infrastructure access logs record the client IP address, timestamp, request path, and response status for the one-time sign-in requests. On a successful exchange, the Worker also logs the workspace ID and bot ID that Notion returns, for error diagnosis. Those IDs identify a Notion workspace, not you personally, and are never joined to your name, email, or any other identifying information. These logs are standard infrastructure diagnostics, kept only for error diagnosis on Cloudflare's default retention schedule, and are not used for tracking or analytics. After this one-time sign-in, no further requests pass through the Worker — all subsequent communication goes directly between your device and Notion.

Data We Do Not Collect

To be explicit about what does not happen:

• No Notion content (your pages, databases, or item data) is ever sent to the developer or any third party. It travels only between your device and Notion.
• Your OAuth access token is never stored on any server operated by the developer. It passes through the sign-in broker only momentarily during the one-time token exchange and is not retained there.
• No analytics, usage tracking, or event logging occurs.
• No crash reports are transmitted.
• No advertising frameworks or tracking SDKs are included.
• No accounts are created; the app uses Notion's official OAuth authorization flow.

Third-Party Services

The app interacts with the following third-party services:

• Notion (Notion's Privacy Policy) — All API requests and OAuth authorization are handled by Notion. Your use of the Notion API is subject to Notion's own terms and privacy policy.
• Cloudflare (Cloudflare's Privacy Policy) — Hosts the developer-operated Worker that brokers the one-time OAuth token exchange, as described under Network Connections. Cloudflare processes only the standard infrastructure access logs noted above.

The developer of Inki has no access to your Notion account or to the content in your workspace.

Purchases and Subscriptions

Inki Pro is sold through Apple's App Store. All payments, subscriptions, and free trials are handled entirely by Apple — the developer never sees or stores your payment details, and your purchase is verified privately on your device via Apple's StoreKit. No purchase history is collected or stored on any server operated by the developer.

Revoking Access

You can disconnect Inki at any time from within the app, or by going to Notion Settings → My Connections, finding "Inki," and clicking Disconnect. This immediately invalidates the app's access token and removes it from your device's Keychain. The app will prompt you to reconnect the next time you use it.

Children's Privacy

Inki is intended for general audiences and is not directed at children under the age of 13. It does not knowingly collect any personal information from children.

Changes to This Policy

If this privacy policy is updated, the revised version will be posted at this URL with an updated effective date. Material changes will be noted at the top of the page.

Contact

Inki is built and operated by David Parker (d.b.a. Devero Partners), Illinois, USA. If you have questions about this privacy policy or the app's data practices — or want to exercise a privacy right such as access or deletion — you can reach the developer at support@inkiapp.com.