Privacy

Last updated: 8 October 2026

Inkidian does not collect, store or send any of your data. Your notes, PDFs and images stay on your iPad and in the vault folder you choose.

Who is responsible

Thomas Toffalori, Rosengartenstrasse 15, 39022 Algund, Italy. Email: [email protected]

The Inkidian app

• No account, no analytics, no advertising, no tracking.
• Inkidian has no server. The app reads and writes files only in the folder you select, and only on your device.
• If that folder is synced, for example with Obsidian Sync or iCloud Drive, your files are handled by that service under its own privacy policy. Inkidian has no access to those services.
• Purchases and the free trial are handled by Apple through the App Store. We receive no payment details or personal information about you.

Crash reports

If you have turned on Share with App Developers in your iPad's settings, Apple may share crash reports and diagnostics with us. They contain technical information such as the device model and iPadOS version, not your notes, and Apple does not link them to your identity. You can turn this off at any time under Settings › Privacy & Security › Analytics & Improvements.

TestFlight beta

If you join the beta through the public link, Apple shows you to us as an anonymous tester. If you send feedback, a screenshot or a crash comment through TestFlight, Apple passes it on together with technical details such as device model, iPadOS version and app build, and your name and email address where Apple provides them. We use this only to fix problems and improve Inkidian.

The Obsidian plugin

The free Inkidian plugin runs entirely inside Obsidian on your device. It reads .inkd files to show previews and makes no network requests.

This website

• No cookies, and no fonts or scripts from third parties.
• We count visits with Umami, which runs on our own server in the European Union. It records which pages are viewed, where visitors come from, their browser, device type and country, and how often the TestFlight link is opened and the launch email is signed up for. Umami sets no cookies, does not store IP addresses and does not follow you to other sites, so these numbers cannot be traced back to you. The legal basis is our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).
• The site is hosted on Cloudflare Pages by Cloudflare, Inc. (USA). Like every web server, Cloudflare processes your IP address and technical details such as your browser to deliver the page and protect it from attacks, under Cloudflare's privacy policy. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Launch email

If you sign up to be notified at launch, the form sends your email address straight to our own newsletter server (self-hosted listmonk) in the European Union. We store only your email address and use it only to tell you about Inkidian. You'll get a confirmation email first, and you are only added once you click the link in it.

The emails are sent through Amazon Simple Email Service from its data center in Frankfurt, Germany, operated by Amazon Web Services EMEA SARL (Luxembourg), which processes your address only to deliver them, under a data processing agreement (Art. 28 GDPR). Every email has an unsubscribe link. We keep your address until you unsubscribe or ask us to delete it. The legal basis is your consent (Art. 6(1)(a) GDPR).

When you email us

If you write to [email protected] or [email protected], we use your message and email address only to reply. Emails are stored with Microsoft 365 (Microsoft Ireland Operations Limited, Dublin, Ireland) and deleted when they are no longer needed. The legal basis is our legitimate interest in answering you (Art. 6(1)(f) GDPR).

Your rights

Under the GDPR you can ask for access to, correction or deletion of your data, restrict or object to processing, and withdraw consent at any time. Email [email protected]. You can also lodge a complaint with a supervisory authority; in Italy that is the Garante per la protezione dei dati personali.