Privacy Policy

• Account data. Your email address and, if you sign up with email/password, a password (stored and hashed by AWS Cognito — we never see it). If you sign in with Google, we receive your Google email and name.
• Text you submit. The text you paste in to be rewritten, sent to our AI provider to generate the result.
• Usage data. Counts of requests to enforce plan limits. For signed-out visitors we store a one-way salted hash of your IP address (never the raw IP) purely to apply the free daily limit.
• Billing data. If you subscribe, Stripe processes your payment. We store your Stripe customer and subscription IDs and plan status — never your full card details.
• Analytics. If enabled, we use privacy-friendly, cookie-free analytics (Plausible) that record aggregate page views without tracking you across sites.

To provide the service: rewrite your text, authenticate your account, enforce plan limits, process subscriptions, send account emails (email verification and password resets), and keep the service secure and reliable.

Rewrites are generated using Anthropic's Claude models through Amazon Bedrock (in AWS US West / Oregon). Your text is used only to produce your rewrite. It is not used to train AI models, is not shared for advertising, and is not sold. We do not store the text of your rewrites after your request is processed; only short-lived operational logs and the usage counts described above are kept.

• Amazon Web Services — hosting, authentication (Cognito), AI processing (Bedrock), storage (DynamoDB), content delivery (CloudFront), and email (SES).
• Stripe — payment processing and subscription management.
• Google — only if you choose to sign in with Google.
• Plausible Analytics — only if analytics is enabled.

We do not sell your personal information.

Account and subscription records are kept while your account is active. Anonymous usage counters expire automatically within days of the window they cover. Submitted text is processed transiently and not retained after the rewrite is returned. When you delete your account, we remove your profile and entitlement records, except where we must keep limited billing records to meet legal obligations.

You can access, correct, export, or delete your personal data. To delete your account or make a request, email us at support@thedailyscribble.co. Depending on where you live (for example, under GDPR or the CCPA), you may have additional rights, including the right to object to or restrict certain processing and to lodge a complaint with your data protection authority.

We use your browser's local storage to keep you signed in. We do not use advertising or cross-site tracking cookies. Our analytics, if enabled, is cookie-free.

Data is encrypted in transit (TLS) and at rest. Passwords are hashed by AWS Cognito, access to systems follows least-privilege, and the site is served over HTTPS via CloudFront. No system is perfectly secure, but we work to protect your data.

The Daily Scribble is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us personal information, contact us and we will remove it.

We may update this policy as the service evolves. We will change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions about privacy? Email support@thedailyscribble.co.