Privacy Policy
Inkaro collects the minimum it needs to draw your designs and bill you correctly. Nothing you upload is used to train any model, and nothing is sold to anyone.
Last updated September 16, 2026 · applies to lucaschwandt.shop
The three things people actually want to know. Photos you upload are used only to render your preview, never to train a model, and are removed from processing storage within 30 days. We never sell personal data. You can ask for a copy or for deletion at support@lucaschwandt.shop and we act within 30 days.
1. Who is responsible
Inkaro, operating the website lucaschwandt.shop, decides how and why your personal data is processed. All privacy correspondence goes to support@lucaschwandt.shop.
2. What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To create your account, send receipts and answer support | Performance of a contract |
| Design prompts, style and placement choices | To generate the artwork you asked for and enforce the Acceptable Use Policy | Performance of a contract; legitimate interests (safety) |
| Generated designs and stencils | So you can return to your work and re-download it | Performance of a contract |
| Photos you upload for on-skin previews | To render that one preview, and nothing else | Your consent, given each time you upload |
| Subscription and payment status | To know which plan you are on and to handle refunds | Performance of a contract; legal obligation (tax records) |
| Basic technical logs (IP, browser, timestamps) | To keep the service up, prevent abuse and diagnose faults | Legitimate interests |
We do not ask for your name, address, date of birth or phone number, and we do not collect them.
3. Photos you upload — the important part
- A photo you upload is used only to render the on-skin preview you asked for in that session.
- It is never used to train, fine-tune or evaluate any model — ours or anyone else's.
- It is never shown to other users, never sold and never shared with advertisers.
- You can delete it from your session at any time, immediately.
- Otherwise it is removed from processing storage within 30 days.
- Upload only a photo of your own body, or one you have the subject's explicit permission to use. We do not perform face swaps and we do not accept photos of people who have not agreed.
4. Training
Nothing you upload and nothing you generate is used to train any machine-learning model. We do not licence your prompts, your photos or your designs to model providers as training data. Prompt text may be reviewed by a person only where it is flagged by our safety filters, and only to decide whether the Acceptable Use Policy was breached.
5. Payment details
We never see or store your full card number, expiry date or security code. Payment is handled by a specialist payment provider that processes it on its own systems and returns to us only what we need: whether the payment succeeded, the last four digits, the card brand, the country and the amount. Their handling of your data is governed by their own privacy policy, which is shown to you at the point of payment.
6. Who else touches your data
We use a small number of service providers, each under a contract that limits them to acting on our instructions:
- Hosting and delivery — runs the website and stores generated files.
- Generative image infrastructure — receives your prompt and, for on-skin previews, your photo, to produce the output. Configured not to retain inputs for training.
- Payment processing — handles card details and subscription billing.
- Transactional email — sends receipts, cancellation confirmations and support replies.
We do not sell personal data, and we do not share it with advertisers or data brokers.
7. International transfers
Some of these providers operate outside the country you live in, including in the United States. Where data leaves the UK or the European Economic Area we rely on an adequacy decision where one exists, and otherwise on the Standard Contractual Clauses together with any additional measures required.
8. How long we keep things
| Data | Kept for |
|---|---|
| Uploaded photos | Until you delete them, and in any case no more than 30 days |
| Generated designs and stencils | While your account is open, or until you delete them |
| Prompts | 12 months, then deleted |
| Account and email address | While your account is open, then 30 days after deletion |
| Billing records | As long as tax law requires, typically 6 years |
| Technical logs | 90 days |
9. Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the personal data we hold about you,
- Correct anything that is wrong,
- Delete your account and its data,
- Restrict or object to certain processing,
- Export your data in a portable format,
- Withdraw consent for photo uploads at any time, without affecting past processing.
Write to support@lucaschwandt.shop. We answer within 30 days and never charge for it. If you are in the UK or the EEA and think we have got it wrong, you can complain to your national data protection authority — but please tell us first so we can fix it.
We do not sell or “share” personal information as those terms are defined under California law, and we do not use it for cross-context behavioural advertising.
10. Children
Inkaro is for adults. It is not directed at anyone under 18 and we do not knowingly collect data from them. If you believe a minor has created an account, write to us and we will delete it.
11. Cookies
Inkaro sets only what it needs to work. There is no advertising tracking. The detail is in the Cookie Notice.
12. Security
Traffic is encrypted in transit with HTTPS. Stored files are encrypted at rest. Access to production systems is limited to the people who need it. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority as the law requires.
13. Changes
If we change this policy in a way that materially affects you, we will email account holders before it takes effect. The date at the top always shows the current version.
14. Contact
Inkaro
lucaschwandt.shop
support@lucaschwandt.shop
Privacy requests answered within 30 days.