Privacy Policy

Last updated: 2026-10-17

The short version: the text you select is sent to be rephrased or explained, and then it's gone. We don't store it, we don't read it, and nobody trains a model on it.

This Privacy Policy explains how Tiny Writer AI (“we”, “us”, “our”) collects, uses, stores and shares personal data when you use the Tiny Writer AI desktop app for macOS and Windows and the website tinywriterai.com (together, the “Service”). Tiny Writer AI is a product operated by Coding With Purpose, registered in France. This Policy is written to comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who we are

Coding With Purpose is the data controller for the personal data described here. For any question about this Policy or your data, write to info@tinywriterai.com.

2. What we collect

Your account

Your email address, which you use to sign in with a one-time code, and an internal account identifier. We also record when your account was created, because new accounts get a larger daily allowance for their first few days.

The text you select

When you press a Tiny Writer AI shortcut, the app sends the text you selected to our server over HTTPS, together with what's needed to process it: the action (rephrase or explain), the language, the tone you picked if any, and, when you ask for another version, the previous result. The app only reads your selection when you press a shortcut. It does not read anything else on your screen.

We do not store this text. Our server passes it to the AI model, streams the result back to you, and discards it when the request ends. It is not written to our database or to our logs.

Usage

How many requests you make per day and per month, the days you reach your daily limit, and the service's total AI cost per day. These are counts, not a record of what you wrote. They let us enforce the free-tier limits and keep costs under control.

Subscription

If you subscribe to Pro, the payment is handled by Stripe (see section 6). We keep your plan, your Stripe customer and subscription identifiers, the subscription's status, and the date it's due to end if you cancel. We never see or store your card details.

Feedback and ratings

If you send feedback from the app, we keep your message, the category you chose, and your app version and operating system. When you accept, copy or flag a result, or tell us why you dismissed one, we record that signal along with the action, your app version and your operating system. It does not include the text of the request or the result.

Technical data

Like any online service, our hosting and download providers see your IP address and basic request details when the app or website contacts them, including when the app checks for updates. These records are kept for a limited period for security and troubleshooting.

3. What stays on your device

To grab your selection, the app copies it through your clipboard and then puts back what was there. A result you accept is pasted through the clipboard too, so it stays on your clipboard afterwards, as does a result you copy. On macOS this needs the Accessibility permission, which the app uses only to copy and paste in response to your shortcut. Your sign-in is remembered in the app's own storage on your computer, the way a browser keeps you signed in to a website. The short-lived token the app sends to our server with each request is only ever held in memory. Your settings, such as language and last-used tone, stay on your computer.

4. Cookies and tracking

The website does not set cookies, run analytics, or embed third-party trackers. Neither the website nor the app uses your data for advertising or profiling, and we do not sell your data to anyone.

5. Why we use your data, and on what legal basis

• To provide the Service (performance of a contract, GDPR Article 6(1)(b)): signing you in, processing the text you select, and managing your subscription.
• To keep the Service fair, safe and affordable (legitimate interests, Article 6(1)(f)): usage limits, preventing abuse, and capping our daily AI spend.
• To improve the Service (legitimate interests, Article 6(1)(f)): reading feedback and looking at how often results are accepted or flagged.
• To meet legal obligations (Article 6(1)(c)): keeping the records that accounting and tax law require.

We do not use your text or your data to train AI models, and we do not make automated decisions that have legal or similarly significant effects on you.

6. Who we share it with

We share personal data only with the providers that run the Service, and only what each one needs:

• OpenRouter and its zero-data-retention providers process the text you select to produce the result. Requests are only routed to AI providers that have committed not to keep your text or use it for training.
• Clerk handles sign-in and receives your email address to send your one-time codes.
• Stripe sells the Pro subscription as merchant of record. It collects your payment details and billing address directly, handles tax, and processes that data as an independent controller under its own privacy policy.
• Railway hosts our server, database and website.
• GitHub (GitHub Pages) serves the app's downloads and update checks.

We may also disclose data where the law requires it, or to protect our rights, our users or the public.

7. International transfers

Some of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where that happens, we rely on the European Commission's adequacy decisions (including the EU–US Data Privacy Framework, where the provider is certified) or on Standard Contractual Clauses.

8. How long we keep it

• The text you select: not kept. It is discarded when the request ends.
• Your account, usage counts, feedback and ratings: for as long as you have an account. They're deleted when you ask us to delete your account.
• Subscription and billing records: as long as accounting and tax law require.
• Server and download logs: a limited period, for security and troubleshooting.

9. Your rights

You can ask us to access, correct, delete or export your personal data, to restrict how we use it, or object to processing based on our legitimate interests. To delete your account and its data, or to exercise any of these rights, email info@tinywriterai.com from the address you sign in with. We'll reply within one month.

You can also complain to your data protection authority. In France that's the CNIL (cnil.fr).

10. Security

Traffic between the app, the website and our server is encrypted with HTTPS. Access to our database and providers is restricted to the people who run the Service. No system is perfectly secure, but we keep what we hold to the minimum the Service needs.

11. Children

The Service is not directed at children under 16, and we don't knowingly collect their data. If you think a child has given us personal data, contact us and we'll delete it.

12. Changes to this Policy

If we make material changes, we'll tell you by email or with a notice in the app at least 30 days before they take effect. The “Last updated” date at the top shows the latest revision.

13. Contact

Coding With Purpose, France — info@tinywriterai.com