WriteRight Privacy Policy

Last updated: June 5, 2025

WriteRight ("App"), developed by Linus Komnick ("we", "us", "our"), provides grammar‑ and spell‑checking assistance on Android devices. Your privacy is important to us. This Policy explains what personal data we collect, how we use it, and the choices you have.

1. Scope

This Policy applies to all users of WriteRight and any related services. It does not cover third‑party websites, services, or integrations we do not control.

2. Data We Collect

Category	What We Collect	Purpose	Legal Basis ¹
Account Data	Email address, Google UID, basic profile name (if you sign in with Google).	• Create and manage your account • Sync settings across devices	Contract (Art. 6 (1)(b) GDPR)
App Settings	Language preferences, feature toggles, UI options (stored in Firebase Firestore).	Provide a personalised experience and restore settings on new devices.	Contract / Legitimate Interests
Correction Input	Text you type in real time (captured by the Accessibility Service).	Sent (anonymised) to OpenAI API to generate corrections, then discarded. We never store this text.	Performance of service
Usage Analytics	Firebase Analytics events (e.g., feature usage, session length).	Improve features, understand crashes, prioritise development.	Legitimate Interests
Crash Logs	Anonymised stack traces, device model, Android version.	Diagnose and fix stability issues.	Legitimate Interests
Payment Data	Handled solely by Google Play. We receive only a purchase token and subscription status.	Manage subscriptions, unlock premium features.	Contract

¹ Applicable for EU/EEA users. For other regions, similar consent/contract principles apply.

3. How We Use Your Data

Provide core functionality – generate grammar corrections and display them on screen.
Synchronise settings across your authenticated devices.
Maintain and improve the App via analytics and crash reporting.
Handle subscriptions and verify entitlement through Google Play.
Communicate with you: operational emails (e.g., password reset, account deletion confirmation). Marketing emails are sent only with your explicit consent and include an opt‑out link.

4. Data Sharing & Third‑Party Services

Service	Purpose	Data Shared
OpenAI API	Generate text corrections.	Anonymised text snippets; no account identifiers. Text is not stored by us after API response.
Google Firebase Authentication	Account sign‑in (email/password, Google).	Email address or Google UID.
Google Firebase Firestore	Store user settings.	Settings data (non‑textual, no content typed).
Google Firebase Analytics & Crashlytics	Usage statistics and crash logs.	Device information, anonymised event data.
Google Play Billing	Payment processing.	Purchase token and subscription status.

We do not sell or rent your personal data.

5. International Data Transfers

Our backend services are hosted in Firebase US‑Central 1 (United States). Data may therefore be transferred to and processed in the US. Firebase participates in the EU‑US Data Privacy Framework; additional safeguards such as Standard Contractual Clauses apply where required.

6. Data Retention

Account & settings – retained until you delete your account. We reserve the right to remove inactive accounts after a future retention period (to be announced).
Analytics & crash logs – kept for up to 24 months, then aggregated or deleted.
Correction input – discarded immediately after a response is received from OpenAI (typically < 1 second).

7. Your Rights

Depending on your jurisdiction (e.g., GDPR in the EU, CCPA in California), you may have rights to:

Access or download a copy of your data.
Request correction or deletion.
Object to or restrict processing.
Withdraw consent (e.g., marketing emails).

How to exercise:

Use the in‑app Delete Account button (when implemented), or
Email linus.komnick@gmail.com with your request. We may verify your identity before processing.

8. Children's Privacy

WriteRight is a general‑audience app and may be used by users of all ages, including children. The app does not ask for or allow users to submit personal information manually. However, some features (like account creation via Google or email) may result in the collection of limited personal data (e.g., email address) as part of authentication.

We do not knowingly collect additional personal data from children or use collected data for behavioral advertising or profiling. If you are a parent or guardian and believe your child has provided more personal data than described here, please contact us and we will assist you.

9. Security

We protect data in transit using HTTPS. Firebase encrypts data at rest by default. Nevertheless, no system is 100 % secure; you use the App at your own risk.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced via an in‑app notice or email. Continued use of the App after changes take effect constitutes acceptance.

11. Contact

For privacy questions, data requests, or concerns, email: linus.komnick@gmail.com