Scope and contact
Ink & Glow is developed by ODERYN Studio for adults aged 18 or over. This notice covers the app and its consultation, booking and community features. For privacy questions or requests, email oderynstudio@gmail.com. The separate ODERYN website privacy notice covers this introduction website.
Account and service information
When you register, we process your account identifier, display name, birth date for the age check, city, email, language, selected interests and optional contact phone number. Sign-in methods depend on the deployed build and configuration. Email/password sign-in stores a password hash; Google, X and Apple sign-in require separate activation and are not enabled for the current closed test. Email verification and automatic password-reset messages require a configured mail service, which is not enabled for this test. Use the support contact when a sign-in or recovery option is unavailable. The current version does not provide phone/SMS OTP sign-in. We record consent choices and account settings.
Consultations, visits and sensitive information
We process the briefs, reference and body-placement photos, messages, quotes, booking times, visit status, cancellation records, transfer evidence, reviews and reports you submit. The booking flow asks about relevant allergies, skin conditions and procedure consent. These answers and some photos can reveal sensitive information. Share only what is needed for the consultation; do not upload unrelated medical records, identity documents, passwords or complete payment-card details into chats.
Allergy and skin-condition notes are optional. When you submit the request, the selected artist can read these notes and the procedure-consent record to prepare the consultation and service. Closing or anonymising an account does not by itself erase every project, booking, message or stored file. Follow the account/data deletion guidance to request removal of remaining records.
Artist information and payment records
Artist applications may include portfolio and studio photos, an identity-document image, contact information and bank account details. Operations staff use the submitted identity image to compare the artist's name with the bank account holder; this is not government identity verification. Guests pay the artist directly. Ink & Glow records agreed amounts, transfer evidence, the artist's confirmation and return-of-deposit status; it does not receive, hold or transfer the money.
Visibility and recipients
Public profiles, portfolios, designs, community questions, answers and reviews are visible to visitors. Your consultation is available to the artist and shop team members whose roles allow them to handle it, and to operations staff when needed for support or a report. Guests choosing bank transfer receive the artist's bank details for that booking. Uploaded images can be served through direct image links; a consultation image should not be treated as a secure medical-document channel. Identity-document images use a separate access-controlled storage path when object storage is configured.
Optional camera, translation and notifications
Try-on photos are processed on your device until you choose to attach or upload them. You can use a selected photo instead of granting camera access. When you request chat translation, selected message text is sent to the configured translation service; the current model integration is xAI, with a limited phrase fallback when it is not configured. If you enable notifications, web or mobile push identifiers are stored so the configured push provider can deliver them. You can revoke camera and notification permissions in your device or browser settings.
Service providers and purposes
Account, consultation and booking records are processed to provide the service, manage access, help prevent abuse and respond to support and privacy requests. The current closed-test environment uses Cloudflare Workers for hosting, Cloudflare R2 for image storage, and a dedicated Supabase database in Singapore (ap-southeast-1). Optional sign-in, email, translation and push providers process data only when their integrations are enabled. Providers and hosting arrangements can differ between test and released versions; data may be processed outside your country. The app does not offer advertising or cross-app advertising tracking. Optional marketing consent is recorded separately.
Retention and deletion
Account and service records remain while needed to provide the service. The current in-app deletion flow removes or replaces selected profile details, revokes sign-in sessions and linked sign-in records, and clears saved items and notification identifiers. It does not by itself erase every consultation, booking, report or stored image. Some records remain linked to an account identifier and must not be described as fully anonymous. To request deletion of remaining personal data, email support; we will explain what can be removed, any records that must be retained, the reason and the expected handling period. See https://oderyn.com/en/ink-glow/delete-account.
Your choices, security and changes
You may request access, correction, deletion, restriction of processing or withdrawal of consent by emailing support. We may ask for information necessary to verify that the request is yours; never send an OTP or password. Withdrawing optional consent does not undo processing already performed. Public content or copies saved by another person may remain outside our control. We limit access according to service roles, but no system provides absolute security. Material changes will be dated on this page.