Privacy & Security

Inkora enforces access with database-level row security — meaning a private book's chapters, characters, locations, and notes are unreachable even through a direct request, not merely unlinked in the app. Visibility settings (see "Stories & Visibility") are the real, enforced boundary, not a cosmetic one.

Authentication is handled by Supabase Auth. Your password is never stored in plain text or visible to anyone, including Inkora's own team.

Private books, chapters, characters, notes, and worldbuilding stay private regardless of any Community feature — nothing in Discover, Stories, or a public profile can surface content from a book you haven't explicitly made Community or Public.