Last updated: 7 August 2026
This website is operated by:
Nicholas Flatt (sole proprietor / Einzelunternehmer)
Vale de lama 1
8300-026 Silves
Portugal
NIF: 323483186 — VAT exemption applies; no VAT shown
Email: hello@inkleaf.shop
Phone: +351 920 568 221
Portugal's Electronic Complaints Book is available at livroreclamacoes.pt.
Consumers may contact the Centro de Informação, Mediação e Arbitragem de Conflitos de Consumo do Algarve (CIMAAL) at consumidoronline.pt. CIMAAL covers consumer disputes connected with the Algarve and, under its 2026 rules, cross-border consumer disputes where the supplier is based in its area. The official list of authorised Portuguese consumer dispute-resolution bodies is published by the Direção-Geral do Consumidor. For a cross-border purchase within the EU, Iceland or Norway, the European Consumer Centre in the consumer's country can help identify the appropriate route. The former EU Online Dispute Resolution platform closed on 20 July 2025 and is no longer available.
This policy explains what data is processed when you visit inkleaf.shop or use the Reader, the membership or the Pattern & Perspective Reader. The controller is Nicholas Flatt, sole proprietor in Portugal, at the address shown in the Legal Notice above.
You upload a filled-in page from a planner or journal. The page is sent to an AI model (Anthropic Claude) and you receive a short observational text in return. Inkleaf does not keep the image in its own database. Anthropic may retain API inputs and outputs for up to 30 days under its standard commercial retention policy. No account is required.
Your uploaded image or PDF. The file is routed through a Cloudflare Worker to Anthropic's commercial API. Inkleaf does not save the uploaded file in its own database. Anthropic states that standard API inputs and outputs are deleted from its backend within 30 days, except where longer retention is required for legal or usage-policy enforcement. The content of your page — including handwritten entries — is processed to generate the reading.
Not used to train AI models. Your uploaded page is processed to generate the requested reading. Anthropic states that inputs and outputs sent through its commercial API are not used to train its models by default (Anthropic Privacy Policy). Inkleaf does not use your page for training, advertising or user profiling.
Your email address (optional). After a reading, you can choose to have the result sent to an email address. This is optional — the reading works fully without it. If you enter an address, it is used once to deliver that email via Resend and is not stored by Inkleaf afterwards. If you additionally opt into the short email series on somatic planning, your address is stored with MailerLite (our newsletter provider) — but only after you confirm via a separate confirmation email (double opt-in). Every series email contains an unsubscribe link; you can also withdraw consent at any time via hello@inkleaf.shop. The legal basis for the series is your consent (Art. 6(1)(a) GDPR); for the one-time delivery it is Art. 6(1)(b) GDPR.
Your IP address. Your IP address is used for rate limiting (maximum 5 readings per hour). This limit resets automatically and is held in temporary memory only — it is not stored in a database and is not logged persistently by Inkleaf.
Website analytics. Inkleaf currently does not use a dedicated analytics service. Our hosting and security providers may still process technical request data where this is necessary to deliver and protect the website.
Inkleaf Membership — saved readings (optional). If you create a member account and give consent, we store your email address, consent record, generated reading text and the selected template. The uploaded image is not saved with the member record. Saved readings remain until you delete your data or ask us to delete it. Cancelling the paid membership ends premium access at the end of the billing period; it does not by itself erase the account or saved readings. Authentication uses a token stored in your browser. Accounts used with an earlier version may also contain a numerical embedding; new readings are no longer sent to an embedding provider.
The reading text is itself personal data. Even though we do not store the uploaded image, the stored reading can describe you — for example recurring exhaustion, sleep difficulties, or mood patterns — and is therefore treated as personal data in its own right.
Patterns over time (profiling). For members, the stored readings are compared over time to surface recurring patterns. This constitutes profiling within the meaning of Art. 4(4) GDPR. It is used solely to present you an observational reflection; there is no automated decision-making producing legal or similarly significant effects within the meaning of Art. 22 GDPR.
What this service is — and is not. Inkleaf Reading is an observational reflection tool. This service is not medical, psychological, therapeutic or crisis support. It does not provide diagnoses, treatment recommendations or professional advice.
The requested reading and the paid membership are processed under Art. 6(1)(b) GDPR. Optional storage, the email series and processing that may include special-category data rely on your consent under Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR. Hosting security, rate limiting and the secure delivery of the website rely on our legitimate interests under Art. 6(1)(f) GDPR. Billing records are retained where required by law under Art. 6(1)(c) GDPR.
Your data is transmitted to the following third parties as part of providing this service:
Some service providers are based in the United States or may process data there. Where GDPR requires transfer safeguards, the relevant provider's EU Standard Contractual Clauses or an applicable adequacy mechanism are used. The linked provider notices explain their locations and safeguards. Supabase storage for the Reader and Pattern & Perspective Reader is configured in the EU; this does not prevent individual subprocessors from operating internationally.
You have the right to:
The free Reader does not save the uploaded page in Inkleaf's database. If you opted into the email series, you can unsubscribe through the link in every email. For account, membership and Pattern & Perspective data, you may use the deletion and export controls in the respective product or write to hello@inkleaf.shop.
Reader members: if you have a member account, you can erase everything yourself at any time — open the “Member” panel on the Reading page and choose “Delete my data”. This permanently removes your stored readings, any embeddings, your member record, and your account. This also withdraws the consent on which the storage was based. You can also request erasure by email at hello@inkleaf.shop without using the button. The deletion removes the active records used by the service. Hosting providers may retain limited technical metadata or backup copies for their own documented retention periods; these are not available through the normal service and are deleted or overwritten according to the provider's schedule.
Pattern & Perspective Reader: your text is sent to Anthropic for AI-assisted structuring and analysis only after your explicit consent. Your text, structured fields and analyses are stored with Supabase in Ireland. In the app, the two people in the pair can see the shared content; Supabase and Anthropic process it technically. Your own perspectives remain until you delete them. Deleting your contribution leaves the other person's contribution intact and removes the shared analysis for that event. Cancelling membership ends premium access but does not automatically delete the separately recorded perspectives.
Statutory retention. Where the law requires it — for example accounting and tax retention obligations in connection with payments — we may have to retain certain billing-related records even after a deletion request. Such records are kept only for as long as legally required and are not used for any other purpose. Payment data itself is processed by PayPal, not stored by Inkleaf.
To exercise your rights, contact: hello@inkleaf.shop
The supervisory authority for data protection in Portugal is the
Comissão Nacional de Proteção de Dados (CNPD).
Website: cnpd.pt
You have the right to lodge a complaint with the CNPD if you believe your data has been
processed unlawfully.
Separately from Inkleaf Reading, we operate INKLEA, a printables and digital-planner shop. To publish INKLEA's own content to Pinterest, we use a private, self-hosted scheduling tool called Inklea Postiz Scheduler, built on the open-source software Postiz.
What this tool does. Inklea Postiz Scheduler connects to INKLEA's own Pinterest business account(s) and is used exclusively to schedule and publish INKLEA's own product pins (images, titles, descriptions and links) to INKLEA's own Pinterest boards. It is an internal business tool — it is not made available to the public and does not act on behalf of any Pinterest user other than INKLEA.
Data processed. To do this, the tool stores and processes:
What it does not do. The application does not collect or store Pinterest passwords or session cookies (authentication happens exclusively through Pinterest's official OAuth login flow). It does not sell, share or use Pinterest account data for advertising, profiling or any purpose other than operating INKLEA's own scheduling.
Legal basis. Processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in operating INKLEA's own social media presence, and on the authorization INKLEA grants via Pinterest's OAuth consent screen.
Retention. The OAuth token and connected account data are retained for as long as the Pinterest account remains connected, and deleted when disconnected.
Third-party processor. Pinterest, Inc. (San Francisco, USA) — under Pinterest's own Privacy Policy: policy.pinterest.com/en/privacy-policy.
Contact. hello@inkleaf.shop
If this policy changes materially, the updated version will be published on this page with a revised date. Outside the optional email series, no contact information is collected, so users are not notified individually of changes.
This page was last updated: 7 August 2026