Privacy Policy
InkDex, published by Heavin Astern LLC · Last updated: August 2, 2026
InkDex is an independent catalog and is not affiliated with, endorsed by, or sponsored by Stampin' Up!®
1. Summary
InkDex helps you search a pre-built catalog of Stampin' Up!® stamp and die sets and track what you own. We collect the minimum needed to run your account and the app. We do not sell your personal information, we do not show ads, and our analytics never receive your search text, your photos, your email address, or your login tokens.
2. Information we collect
You provide
- Account: your email address, a display name, and (for email sign-in) a password, which is stored only as a secure hash by our authentication provider.
- Your collection: the sets you mark as owned or add to your wishlist.
- Requests & corrections: if you ask us to add a missing set or correct an entry, the text you submit and — only if you choose to attach one — a photo.
Collected automatically
- Subscription status: whether you have an active subscription or trial, provided by the app store through RevenueCat. We do not receive your full payment card details; billing is handled by Apple or Google.
- Privacy-safe analytics: aggregate, product-usage events (for example, that a search happened or a screen was viewed) and basic device/app information. These events are designed to exclude raw search text, photos, email addresses, and tokens.
- Diagnostics: crash and error information to keep the app stable.
3. Camera and photos (Scan)
InkDex's Scan feature reads the printed name off a set's packaging on your device using the operating system's built-in text recognition (Apple Vision on iOS, Google ML Kit on Android). Scan photos are processed on your device and are never uploaded to us or anyone else. The only image that ever leaves your device is a photo you deliberately attach to a request to add a missing set — see retention below.
4. Push notifications
When push notifications are enabled and available, InkDex collects an Expo push token and a random app-installation identifier generated on your device. We use them only to deliver updates about catalog requests you submitted — for example, that a set you asked for has been added.
Push notifications are off by default. They are collected only if you turn them on in Profile → Settings and grant your device's notification permission, and you can turn them off again at any time in Settings.
Turning push off stops your account from being eligible for catalog-request notifications. Separately, the app attempts to remove that installation's push token. Those are two different things: the preference is what governs delivery, and token cleanup is a best-effort step that may not complete immediately.
Delivering a notification involves Expo and your platform's push service — Apple Push Notification service on iOS or Firebase Cloud Messaging (Google) on Android.
Notification content is deliberately generic. Notifications do not contain the text of your catalog request, your email address, account identifiers, tokens, or other sensitive information.
When you turn push off or sign out, InkDex attempts to remove that installation's push token. If that cleanup cannot complete — for example, because the device is offline or the network or push provider fails — the token can remain until a later reconciliation, until it is replaced, until the push provider reports it as no longer valid, or until you delete your account.
Deleting your account removes the push tokens and notification preferences linked to your account. A small technical record is retained to reject outdated registration attempts from that device. That record contains no account identifier; it remains associated with the random installation identifier, and it is kept solely to prevent stale registrations.
5. How we use information
- To create and operate your account and sync your collection across your devices.
- To provide search, scan, wishlist, and catalog features.
- To confirm your subscription/trial and unlock paid functionality.
- To review catalog requests and corrections you submit.
- To notify you about your own catalog requests, if you have enabled push notifications.
- To keep the app secure, stable, and improving, using privacy-safe analytics and diagnostics.
6. Service providers (processors)
We share information only with providers who process it on our behalf to run the service:
- Supabase — authentication, database, and storage (your account, collection, and any request photos).
- RevenueCat and the Apple App Store / Google Play — subscription management and billing.
- PostHog — privacy-safe product analytics (no raw query text, photos, email, or tokens).
- Cloudinary — delivery of catalog images (these are catalog images, not your photos).
- Expo, and Apple Push Notification service or Firebase Cloud Messaging (Google) — delivery of push notifications, when you have enabled them.
- Vercel and Cloudflare — hosting and delivery of this website.
7. Data retention
- Account & collection data: kept while your account exists; removed when you delete your account.
- Request photos: stored privately and deleted 30 days after the related request is resolved (added, declined, or duplicate), and immediately if you delete your account.
- Scan photos: never stored — processed on your device only.
- Push tokens & notification preferences: kept while push is enabled. Turning push off stops delivery immediately; removal of the token itself is attempted and, if it cannot complete, the token may remain until a later reconciliation, replacement, provider invalidation, or account deletion. A technical record associated with the random installation identifier, containing no account identifier, is retained to reject outdated registrations from that device.
8. Your rights and choices
You can access and update your collection in the app at any time. You can delete your account and all associated data:
- In the app: Profile → Settings → Delete Account.
- From the web, without the app: submit a request at inkdex.heavinastern.com/delete.
Depending on where you live, you may have additional rights (such as access, correction, portability, or deletion). To exercise them, contact us at support@heavinastern.com.
9. Children's privacy
InkDex is intended for adults and is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children.
10. Security
We use industry-standard measures, including encrypted connections, row-level security scoping your data to your account, and secure credential storage on your device. No method of transmission or storage is perfectly secure.
11. International users
InkDex is operated from the United States; your information may be processed there and by the providers listed above.
12. Changes
We may update this policy; we will revise the "last updated" date and, for material changes, provide notice in the app or by email.
13. Contact
Heavin Astern LLC · support@heavinastern.com