Privacy & Legal

Last updated: 1 June 2026

Legal Notice

This website is operated by:

Nicholas Flatt
Vale de lama 1
8300-026 Silves
Portugal

Privacy Policy

This policy explains what data is processed when you use Inkleaf Reading, and on what legal basis. Inkleaf is operated by a private individual in Portugal and is subject to the General Data Protection Regulation (GDPR).

1. What Inkleaf Reading does

You upload a filled-in page from a planner or journal. The page is sent to an AI model (Anthropic Claude) and you receive a short observational text in return. The image is not stored after processing. No account is required.

2. Data processed

Your uploaded image or PDF. The file is transmitted to Anthropic's API for processing and is not stored by Inkleaf after the reading is returned. The content of your page — including handwritten entries — is processed by Anthropic as part of this service.

Not used to train AI models. Your uploaded page is processed only to generate your reading. It is sent through Anthropic's commercial API, which by default does not use inputs or outputs to train its models (see Anthropic's Privacy Policy). Inkleaf does not retain your image, and does not use it for any training, analytics, or profiling purpose.

Your IP address. Your IP address is used for rate limiting (maximum 5 readings per hour). This limit resets automatically and is held in temporary memory only — it is not stored in a database and is not logged persistently by Inkleaf.

No cookies. No tracking. This site does not use cookies, analytics tools, tracking pixels, or session recording. Nothing is stored in your browser beyond what is needed to display the page.

3. Legal basis (GDPR Art. 6)

The legal basis for processing your uploaded image and IP address is Art. 6(1)(b) GDPR — processing is necessary to perform the service you requested (the Reading).

4. Third-party processors

Your data is transmitted to the following third parties as part of providing this service:

Anthropic, PBC (San Francisco, USA) — AI processing of your uploaded image. Data transfer to the USA under Standard Contractual Clauses (SCCs). Anthropic Privacy Policy.
Cloudflare, Inc. (San Francisco, USA) — Proxy routing your request to Anthropic. Cloudflare processes your IP address in transit. Cloudflare Privacy Policy.
Netlify, Inc. (San Francisco, USA) — Website hosting. Standard web server access logs may include your IP address. Netlify Privacy Policy.

5. International data transfers

Anthropic, Cloudflare, and Netlify are based in the United States. Data transfers to the USA take place under Standard Contractual Clauses (SCCs) adopted by the European Commission, as described in each provider's privacy policy linked above.

6. Your rights (GDPR Art. 15–22)

You have the right to:

Access the personal data held about you (Art. 15)
Correction of inaccurate data (Art. 16)
Erasure of your data ("right to be forgotten") (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing (Art. 21)

Because Inkleaf Reading does not store your image or reading after it is returned, most of these rights apply only to your IP address, which is held temporarily in memory and not retrievable or linked to you individually.

To exercise your rights, contact: hello@inkleaf.shop

7. Supervisory authority

The supervisory authority for data protection in Portugal is the Comissão Nacional de Proteção de Dados (CNPD).
Website: cnpd.pt
You have the right to lodge a complaint with the CNPD if you believe your data has been processed unlawfully.

8. Changes to this policy

If this policy changes materially, the updated version will be published on this page with a revised date. We do not notify users individually of changes, as no contact information is collected.

This page was last updated: 1 June 2026