Rewritly is a writing assistant. You trust it with your words, so we've built it to keep as little as possible and to be completely open about what it does keep. This page explains it in plain language.
The short version
- We never store what you write. Your text passes through our server to the AI model and back, and is not saved, logged or read by anyone at Rewritly.
- We never sell your data or use it for advertising.
- We don't use your text to train AI.
- You can see or delete everything we have about you. Email sunilkm2610@gmail.com and we'll send it or delete it.
- We never see your card details. Payments are handled by Dodo Payments.
1. Who we are
Rewritly ("Rewritly", "we", "us") is operated by [Company legal name], Jaipur, India 302012. For anything about privacy, email sunilkm2610@gmail.com.
2. Your text
When you ask Rewritly for help (fix grammar, improve, shorten, change tone or write something new), the app sends the text you chose and your request to our server. Our server adds its instructions and forwards it to an AI model, then streams the reply straight back to you.
- Text is only sent when you ask. Rewritly doesn't watch or upload what you type in the background.
- We do not save your text or the AI's reply on our server or in our database, and we don't write them to our logs.
- Rewritly ignores password fields and stays hidden in code editors, terminals and password managers.
The AI models we use
We send requests through OpenRouter, which routes them to a model from Anthropic (Claude) or OpenAI. If one model is unavailable, the request automatically goes to the other. These companies process your text only to produce the reply. We've set our account so our requests aren't used to train their models. They may keep requests for a short time for abuse and safety monitoring, as their own policies describe:
Don't use Rewritly for text you aren't allowed to share with these services.
3. What we do keep
To run accounts, the free trial and billing, we keep the following. Nothing else.
| What | Why |
|---|---|
| Account: your email address, how you signed in (email link, Google or Apple), and the name and profile photo Google or Apple share | To sign you in and contact you about your account |
| Trial and plan: when your trial ends, your plan, its status and renewal date, and the Dodo Payments customer and subscription IDs | To know whether Rewritly should work for you |
| Signed-in devices: a scrambled (hashed) copy of each device's sign-in token, the app version, and when it was last used | To keep each computer signed in and let you sign it out |
| Usage counts: for each request, the time, the action (such as "fix" or "shorten"), the model that answered, the size in tokens, the cost, how long it took, and whether it worked | To prevent abuse, control costs and improve speed and reliability. These records contain no text. |
| Network information: your IP address, held in memory for about an hour | Rate limiting, to stop abuse. It isn't saved to our database |
On your computer
The Rewritly app keeps your settings (theme, shortcuts, icon), a random device ID and your sign-in token in a settings file on your own computer. On our website, your browser keeps your sign-in session and the email you entered, so you don't have to type it again. We don't use advertising or tracking cookies, and we don't use analytics tools.
Accessibility permission (Mac)
On a Mac, Rewritly asks for Accessibility permission. It uses it only to find your text cursor, read the text you ask it to work on, and paste the result back. Nothing is read in the background.
4. Payments
Payments are processed by Dodo Payments, which sells Rewritly subscriptions to you as the merchant of record and handles taxes. Your card or bank details go directly to Dodo Payments and never reach us. We only receive your plan, its status, renewal dates and Dodo's customer and subscription IDs.
5. Who we share data with
We only share data with the services that make Rewritly work, and only what each one needs:
- Supabase: sign-in and our database (account, plan, device and usage records above). Privacy policy
- OpenRouter, Anthropic and OpenAI: the text you send, only to produce the reply (see section 2)
- Dodo Payments: your email and the plan you choose, to take payment
- Google or Apple: only if you choose to sign in with them
- Our hosting provider, which runs our server
We don't sell or rent your data, and we don't share it with advertisers. We'd only disclose data if the law requires it, and we'd tell you unless we're legally prevented.
6. Your rights: we're fully open
Email sunilkm2610@gmail.com from the address on your account and we will:
- Send you a copy of everything we hold about you
- Correct anything that's wrong
- Delete your account and all data linked to it
- Answer any question about how your data is handled
We reply within 30 days, usually much sooner, and it's free. If you live in the EU, UK, California or another place with privacy laws, you have these rights by law. We give them to everyone. You can also complain to your local data protection authority.
7. How long we keep data
- Your text: not kept
- Account, plan and devices: until you delete your account
- Usage counts: until you delete your account. We may delete older records sooner
- Billing records: Dodo Payments keeps these as tax law requires
When you delete your account, your account, plan, device and usage records are deleted from our database.
8. Security
Here's what we do to protect your data:
- Everything between the app, our website and our server is encrypted (HTTPS).
- The AI service keys live only on our server, never in the app.
- We store only a scrambled copy of each device's sign-in token. Even with access to our database, someone couldn't use it to sign in as you.
- Our database can't be reached from the public internet without our server's secret key.
- Your text is never stored, so there's no archive of your writing that could leak.
No online service can promise perfect security, but if we ever discover a breach affecting your data, we'll tell you promptly.
9. Children
Rewritly isn't meant for children under 13 (or the minimum age in your country). We don't knowingly collect their data. If you think a child has an account, email us and we'll delete it.
10. International transfers
Our service providers may process data in the United States and other countries. Where the law requires, they use approved safeguards such as standard contractual clauses.
11. Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll email you before they take effect.
12. Contact
Questions or requests: sunilkm2610@gmail.com
[Company legal name], Jaipur, India 302012