Legal
Privacy policy
This policy explains what Ainur Design collects, why, and what you can do about it. It covers the Ainur Design apps for Android and iOS, the Studio, and design.ainurhq.com.
Who we are
Ainur Design is made by Ainur, a product and design studio. Ainur is responsible for the data described here. Questions go to support@ainurhq.com.
The short version
- You can read the Journal without an account. We then keep nothing about you beyond the standard web server log of the request.
- With an account we keep what we need to run it: your name, email, sign-in details and what you do in the app (saved articles, reading progress, feedback on designs).
- No advertising, no selling of data, no third-party analytics or tracking SDKs.
- You can download your data and delete your account at any time.
What we collect
Account
- Name and email address, to sign you in and show who wrote a comment. Reader accounts give these when signing up; client and staff accounts are created by Ainur when you are invited.
- Password, stored only as an Argon2id hash. We cannot read it.
- Two-step sign-in, if you turn it on: the secret for your authenticator app (encrypted) and one-time recovery codes (stored as hashes).
- Signed-in devices: device name, platform, IP address and the time of last use, so you can see your devices and sign one out. A device session ends after 30 days without use.
Journal (all accounts)
- Articles you save, how far you read an article, the topics you pick and the authors you follow. We use them for your Library and the "For you" list, nothing else.
Design reviews (client accounts only)
- Comments and replies you write on a design, with the screen and spot you pinned.
- Screenshots of a design screen, only when you attach one to a comment.
- Voice notes, only when you record one. The app asks for microphone access the first time.
- Your decision on a version (approved or changes requested).
- Usage of a design: which design and screens you opened, time on each screen, and the test tasks you ticked. Ainur uses this to improve the design for your company. It is not used for advertising.
Security records
- A log of security events such as sign-ins, failed sign-ins, password changes, downloads of a design and changes made by staff, with time and IP address. We keep it to protect accounts and investigate misuse.
What we do not collect
Location, contacts, calendars, photos outside the app, health or financial data, browsing history or advertising IDs. The apps contain no crash-reporting or analytics SDKs from other companies.
Notifications
If push notifications are enabled in a later version, we store a device token to send you replies and new design versions. You can turn notifications off in your phone's settings.
Where the data lives
On Ainur's servers in the European Union (Germany). Data travels over HTTPS only. Designs are delivered through download links that expire after a few minutes and are tied to your account.
Who can see it
- Ainur staff, to run the service and answer feedback.
- For client accounts: other people of your own company who have access to the same design see your comments and decisions.
- Nobody else. We do not sell or share personal data. We only hand data over when the law requires it.
How long we keep it
We keep account data while your account exists. When you delete your account, your personal data is removed; see Delete your account for exactly what happens. Comments a client wrote on a company's design stay with that design, shown as "Deleted user".
Your rights
- See and download your data: in the app under Account, or ask us.
- Correct it: edit your name in the app, or ask us.
- Delete it: in the app (Account → Delete account), on design.ainurhq.com/delete-account, or by email.
- Object or complain: write to us first. You can also complain to your data protection authority.
Children
Ainur Design is not meant for children under 16 and we do not knowingly collect their data.
Changes
When this policy changes, we update the date below and tell signed-in users in the app if the change matters.
Last updated: 22 October 2026