WriteRight Privacy Policy
Last updated: May 17, 2026
WriteRight ("App") is operated by Komnitez LLC ("we", "us", "our"), a limited liability company organized in the United States. WriteRight provides grammar‑ and spell‑checking assistance on Android devices. Your privacy is important to us. This Policy explains what personal data we collect, how we use it, and the choices you have.
1. Scope
This Policy applies to all users of WriteRight and any related services. It does not cover third‑party websites, services, or integrations we do not control.
2. Data We Collect
| Category | What We Collect | Purpose | Legal Basis ¹ |
|---|---|---|---|
| Account Data | Email address, Google account ID, basic profile name (if you sign in with Google). | • Create and manage your account • Sync settings across devices |
Contract (Art. 6 (1)(b) GDPR) |
| App Settings | Language preferences, feature toggles, UI options (stored in our Supabase database). | Provide a personalised experience and restore settings on new devices. | Contract / Legitimate Interests |
| Correction Input | Text you type in real time (captured by the Accessibility Service). | Sent (anonymised) to our backend, which forwards it to a large‑language‑model provider (e.g., OpenAI or Cloudflare Workers AI) to generate corrections, then discarded. We never store this text. | Performance of service |
| Usage Analytics | Aggregated event counts (e.g., feature usage, session length) stored in our Supabase database. | Improve features, understand stability issues, prioritise development. | Legitimate Interests |
| Crash Logs | Anonymised error messages, device model, Android version. | Diagnose and fix stability issues. | Legitimate Interests |
| Advertising Data | Advertising ID, coarse device/locale information, ad interaction events. Collected only when you interact with a rewarded ad inside the App. | Serve and measure rewarded video ads via Google AdMob. See Google's Privacy & Terms. | Consent / Legitimate Interests |
| Payment Data | Handled solely by Google Play and our subscription provider (RevenueCat). We receive only a purchase token and subscription status. | Manage subscriptions, unlock Pro features. | Contract |
¹ Applicable for EU/EEA users. For other regions, similar consent/contract principles apply.
3. How We Use Your Data
- Provide core functionality – generate grammar corrections and display them on screen.
- Synchronise settings across your authenticated devices.
- Maintain and improve the App via analytics and crash reporting.
- Handle subscriptions and verify entitlement through Google Play.
- Communicate with you: operational emails (e.g., password reset, account deletion confirmation). Marketing emails are sent only with your explicit consent and include an opt‑out link.
4. Data Sharing & Third‑Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication (email magic link, Google sign‑in), user database, edge functions. | Email address, Google account ID, app settings, aggregated usage events. |
| OpenAI and Cloudflare Workers AI | Generate text corrections. | Anonymised text snippets; no account identifiers. Text is not stored by us or, per their policies, by the provider for training purposes. |
| Google AdMob | Serve rewarded video ads when you choose to watch one in exchange for additional usage credit. | Advertising ID, coarse device/locale information, ad interaction events. See Google's AdMob policies. |
| Google Play Billing and RevenueCat | Subscription processing and entitlement verification. | Purchase token, subscription status, anonymised user identifier. |
We do not sell or rent your personal data.
5. International Data Transfers
Our backend services are hosted on Supabase and Cloudflare infrastructure, primarily in the United States. Data may therefore be transferred to and processed in the US. Both providers participate in the EU‑US Data Privacy Framework; additional safeguards such as Standard Contractual Clauses apply where required.
6. Data Retention
- Account & settings – retained until you delete your account. We reserve the right to remove inactive accounts after a future retention period (to be announced).
- Analytics & crash logs – kept for up to 24 months, then aggregated or deleted.
- Correction input – discarded immediately after a response is received from OpenAI (typically < 1 second).
7. Your Rights
Depending on your jurisdiction (e.g., GDPR in the EU, CCPA in California), you may have rights to:
- Access or download a copy of your data.
- Request correction or deletion.
- Object to or restrict processing.
- Withdraw consent (e.g., marketing emails).
How to exercise:
- Use the in‑app Delete Account button (when implemented), or
- Email privacy@writeright.io with your request. We may verify your identity before processing.
8. Children's Privacy
WriteRight is rated for users 18 and older and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child under 18 has provided us personal data, please contact us at privacy@writeright.io and we will delete it promptly.
9. Security
We protect data in transit using HTTPS. Firebase encrypts data at rest by default. Nevertheless, no system is 100 % secure; you use the App at your own risk.
10. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced via an in‑app notice or email. Continued use of the App after changes take effect constitutes acceptance.
11. Contact
For privacy questions, data requests, or concerns, email: privacy@writeright.io
© 2026 Komnitez LLC. All rights reserved.