Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an AI Writer account, we collect:

• Username — A display name you choose during registration.
• Email address — Used for account identification, password recovery, and optional notifications.
• Password — Securely hashed and stored on our server. We never store or have access to your plaintext password.

1.2 Content You Provide

• Uploaded files — Documents you upload for translation, summarization, or processing (PDF, Word, Excel, PPT, TXT).
• User input text — Topics, instructions, and any text you type into the App.
• Language preferences — Your selected source and target languages.

1.3 Referral Information

• Referral code — A unique code generated for your account, used to invite other users.
• Referral activity — We track how many users signed up using your referral code and the bonus tokens earned, to operate the referral rewards program.

1.4 Notification Preferences

• In-app notification settings — Your preferences for receiving token alerts, referral updates, and system announcements. These are stored on our server and tied to your account.

1.5 Usage & Token Data

• Token balance and usage — Your remaining tokens, daily usage counters, and token transaction history are tracked server-side to enforce fair usage limits and provide referral rewards.
• Message counts — The total number of AI requests you have made.

1.6 Automatically Collected Information

• Device information — Device type, operating system version, and device language setting (used solely for auto-detecting your preferred language).
• Authentication tokens — JWT session tokens are stored locally on your device to keep you signed in.

1.7 Information We Do NOT Collect

• No location data or GPS coordinates
• No contacts, camera, or microphone access
• No advertising identifiers
• No cookies or tracking pixels in the App
• No third-party analytics or behavioral tracking services
• No biometric data
• No payment or financial information

2. How We Use Your Information

We use the information you provide for the following purposes:

1. Account Management — Your email, username, and password are used to create and maintain your account, authenticate your sessions, and enable password recovery.
2. AI Processing — Your topic text or uploaded document content is sent to our backend server, which forwards it to the AI service provider for document generation, translation, or summarization. Only the content text is transmitted; your email or personal identifiers are not included in AI prompts.
3. Image Search — Keyword searches are sent to Pexels API to find relevant stock images for your documents. No personal data is included in these requests.
4. File Generation — Your content is used to produce PDF, Word, PowerPoint, and Excel files, which are stored exclusively on your device.
5. Token Management — Your token balance and daily usage are tracked to enforce fair usage limits, process daily token claims, and award referral bonuses.
6. Referral Program — Your referral code and referral activity data are used to operate the referral rewards system, track eligible referrals, and credit bonus tokens.
7. In-App Notifications — Your notification preferences are used to deliver relevant system messages, token alerts, and referral updates within the App.
8. Language Detection — Your device language setting is read locally to auto-select your preferred output language. This is never transmitted.
9. Service Configuration — Remote feature flags and maintenance settings are fetched from our server to manage App availability and features.

3. Authentication & Account Security

AI Writer uses a custom authentication system hosted on our secure backend:

• Password security — Your password is cryptographically hashed before storage. We never store or transmit plaintext passwords.
• Two-Factor Authentication (2FA) — Optional TOTP-based two-factor authentication is available for enhanced account security.
• JWT Sessions — Authentication sessions use JSON Web Tokens transmitted over HTTPS. Tokens are stored locally on your device and automatically refreshed.
• Session management — You can log out at any time, which invalidates your session token.
• Password recovery — If you forget your password, a secure reset process using your registered email and a one-time nonce is available.

4. Referral System & Data

AI Writer offers a referral rewards program. When you participate:

• A unique referral code is generated for your account.
• When another user registers using your referral code, we record the referral relationship (your account linked to the new user).
• We track the number of successful referrals, your referral tier, and tokens earned from referrals.
• The username (not email) of referred users may be visible in your referral dashboard.
• Referral data is used solely for operating the rewards program and is not shared with third parties.

5. In-App Notifications

AI Writer delivers notifications through an in-app messaging system:

• Notifications are fetched from our server when you open the App.
• We do not use Firebase Cloud Messaging (FCM), Apple Push Notification Service, or any third-party push notification service.
• Notification content may include token alerts, referral updates, system announcements, and maintenance notices.
• You can mark notifications as read, delete them, or configure preferences in your account settings.
• No device tokens or push identifiers are collected.

6. Data Retention

• Account data (username, email, hashed password) is retained for as long as your account is active. You may request deletion at any time.
• Referral data is retained for the lifetime of your account to maintain accurate reward records.
• Notification history is retained on our server and can be deleted by you within the App.
• Token usage data is retained for fair-use enforcement and resets daily.
• Generated files are stored only on your device. They are never uploaded to our servers.
• Uploaded content is processed in-memory and is not stored after the processing session ends.
• AI API requests — Content sent to the AI API is processed in real-time without conversation history. We do not retain your AI prompts or responses on our server.
• Local preferences (theme, language, onboarding status) are stored on your device and can be cleared at any time.

7. Data Sharing and Selling

We do not sell, rent, trade, or share your personal data with any third parties.

The only data transmitted externally is:

• Document content text sent to our backend server for AI processing (via HTTPS). The server forwards it to the AI provider without your personal identifiers.
• Image keyword searches sent to Pexels API (via HTTPS) — no personal data included.

8. Data Security

We implement the following security measures:

• Encryption in transit — All data transmitted between the App and our server uses HTTPS/TLS encryption.
• Password hashing — User passwords are cryptographically hashed before storage.
• JWT authentication — Secure, time-limited authentication tokens with automatic refresh.
• API key protection — All server communication is authenticated with API keys to prevent unauthorized access.
• Two-Factor Authentication — Optional TOTP-based 2FA provides an additional layer of account security.
• Local storage — Generated files and preferences are stored exclusively on your device.
• Minimal permissions — The App requests only INTERNET and ACCESS_NETWORK_STATE permissions. No dangerous permissions (camera, location, contacts) are requested.
• Remote kill switch — Our server can remotely disable the App in case of a security incident to protect user data.

9. Server & Infrastructure

AI Writer's backend server is hosted on Cloudflare Workers, a serverless platform. This infrastructure processes:

• Account registration, login, and authentication requests.
• AI content generation requests (forwarded to the AI provider).
• Token balance and usage tracking.
• Referral system operations.
• In-app notification delivery.
• App configuration and feature flag management.

Cloudflare may process request metadata (IP addresses, timestamps) in accordance with their own privacy policy. We do not log or store your IP address.

10. Third-Party Services

10.1 AI Processing Provider

AI Writer uses a third-party AI API to generate, translate, and summarize content. When you use these features:

• Your topic text or uploaded document content is sent through our server to the AI provider.
• No personal identifiers (email, username, account ID) are included in AI requests.
• The AI response is used to create your documents and is not stored after file generation.

10.2 Pexels Image API

• Only keyword search terms are sent to Pexels (e.g., "business meeting", "technology").
• No personal data is included in image search requests.
• Images are licensed under the Pexels License.

10.3 Cloudflare

Our server and website are hosted on Cloudflare infrastructure. Cloudflare may collect standard web server metadata in accordance with their privacy policy.

11. Your Rights

You have the following rights regarding your data:

• Right to Access — You can view your account information (username, email, token balance, referral data) within the App at any time.
• Right to Deletion — You can request deletion of your account and all associated data by contacting us. You can also clear all local data via Android Settings.
• Right to Correction — You can update your username and password through the App's settings.
• Right to Portability — All generated files are in standard formats (PDF, DOCX, PPTX, XLSX) and can be freely transferred.
• Right to Withdraw Consent — You may stop using the App and log out at any time. You may request account deletion to remove all server-side data.
• Right to Object — You can configure notification preferences to limit communications.

12. Children's Privacy

AI Writer is not designed for or directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If you believe a child has created an account, please contact us immediately and we will delete the account.

13. International Users

AI Writer is available worldwide. By using the App, you acknowledge that your data may be processed by servers and AI services in jurisdictions outside your own. We ensure all transmissions are encrypted.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, features, or applicable laws. When we make material changes:

• The "Last Updated" date at the top of this page will be revised.
• Significant changes may be communicated through the App's notification system or this website.

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

• Privacy inquiries: smartaiwriter@proton.me
• General support: smartaiwriter@proton.me

We aim to respond to all privacy-related inquiries within 30 days.