Privacy Policy
Last updated: January 2, 2026
InAktu ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension and related services.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (securely hashed)
- Account preferences
Usage Data
We may collect information about how you use our extension:
- Features accessed and frequency of use
- Error logs for troubleshooting
- Browser type and version
Content You Provide
Depending on which modules you use, we may process:
- Text for translation or AI processing
- Audio files for transcription
- Stock symbols or currency preferences for tracking
2. How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Process your requests (translations, transcriptions, etc.)
- Improve and optimize the extension
- Send important service updates
- Respond to your inquiries and support requests
3. Data Storage and Security
Your data is stored securely using industry-standard practices. We use:
- HTTPS encryption for authentication and user data synchronization
- Secure cloud infrastructure (Cloudflare Workers + Supabase)
- Hashed passwords - we never store plain text passwords
Note on third-party services: Some module features make direct API calls from your browser to third-party services (OpenAI, Groq, Google, CoinGecko, etc.). These calls use the service provider's standard encryption. One service (ip-api.com for IP geolocation) uses HTTP rather than HTTPS.
We retain your data only as long as necessary to provide our services or as required by law. You can request deletion of your account and all associated data at any time.
4. Third-Party Services
Our extension integrates with third-party services to provide functionality:
- OpenAI (GPT): AI-powered features including translation, summarization, calendar parsing, and text analysis
- Groq (Whisper): Audio transcription and YouTube video transcription
- ipapi.co: IP geolocation for Session Info and World Clock modules
- Google APIs: Places, Geocoding, and Timezone services for location-based features
- CoinGecko: Cryptocurrency price data
- ExchangeRate-API: Currency exchange rates
- Wikipedia & Wiktionary APIs: Encyclopedia and dictionary lookups
- Free Dictionary API: Word definitions
- Grokipedia: AI-enhanced encyclopedia content
- YouTube oEmbed: Video metadata retrieval
Each third-party service has its own privacy policy governing the use of your data. All communications with these services use HTTPS encryption.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data only:
- With your consent
- To comply with legal obligations
- To protect our rights or safety
- With service providers who assist in operating our services (under strict confidentiality agreements)
6. Your Rights
You have the right to:
- Access: Request a copy of the data we hold about you
- Rectification: Correct inaccurate or incomplete data
- Deletion: Request deletion of your data
- Portability: Receive your data in a structured format
- Withdraw consent: Opt out of data processing where applicable
To exercise these rights, contact us at [email protected].
7. Cookies and Local Storage
Local Storage Only (never leaves your device)
The following data is stored exclusively on your device:
- Temporary UI state (active panel, selected text)
- Session authentication token (synced across your Chrome browsers via Google)
- Local cache of your data for offline access
Cloud Storage (for logged-in users)
When you create an account and log in, the following data is synced to our servers (Supabase) to enable cross-device access:
- Account information (email, name, avatar)
- Subscription and payment status (via Stripe)
- API usage counts per module (for plan limits)
- Prompt history and scores (Prompt Tool)
- Calculator history
- Stock and cryptocurrency watchlists
- World clock reference cities
- Time tracker entries and projects
- Transcription history (Dictaphone)
- Module settings (enabled/disabled modules)
Using InAktu Without Cloud Sync
You can use the extension without an account, in which case all data remains local to your browser and is never transmitted to our servers. This provides maximum privacy but means your data will not sync across devices or be backed up.
Third-Party Data Transmission
When you use certain modules, data is sent directly from your browser to third-party services:
- AI features: Text you submit for translation, summarization, or analysis is sent to OpenAI or Groq
- Transcription: Audio recordings are sent to Groq for speech-to-text conversion
- Location features: City names are sent to Google APIs; your IP address may be sent to ip-api.com
- Market data: Stock symbols are sent to Finnhub; cryptocurrency queries to CoinGecko
This data is processed by those services according to their respective privacy policies and is not stored on InAktu servers.
8. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Website: www.inaktu.com/contact