Privacy Policy

Last updated: July 11, 2026

1. The short version

• Your rewrite text in Local mode never leaves your device. Local rewrites run entirely on-device and make no network calls for the rewrite itself.
• No account is needed to start. Wrivio creates an anonymous session on first launch. Adding an email address is optional; it keeps your credits and plan across devices and reinstalls.
• Cloud rewrites are transient. In Cloud mode (the default), your text is sent to our AI infrastructure provider over an encrypted connection, through our own backend, only at the moment you request a rewrite and solely to produce that rewrite. We do not store it after the rewrite completes. Prefer zero transmission? Switch to Local mode.
• Diagnostics are opt-in, anonymous, and cloud-only. They never include your text and never run in Local-only usage.
• We never sell your data, and we never use your text to train models.

This is the honest, complete version: Wrivio is private, not anonymous. We keep the strong promise that matters (your Local-mode content stays on your machine) while being upfront about the account and optional, minimal telemetry that a paid product needs.

2. Who we are

Wrivio (“we”, “us”) is the data controller for the personal data described here. For privacy questions or to exercise your rights, contact our support team. (Our full legal entity and registered address are available on request via support.)

3. What we collect, and why

3.1 Session & account data

On first launch Wrivio creates an anonymous session (a random account identifier with no name or email attached), which lets us enforce fair usage limits and keep your credits. If you later choose to create an account, we additionally collect your email address and a securely hashed password (handled by our authentication provider, Supabase). This is used to authenticate you, sync your plan across devices, and contact you about your account (e.g. password resets). Legal basis: performance of a contract.

3.2 Cloud-mode rewrite content (only when you request a rewrite)

In Cloud mode (the default engine), the text you ask Wrivio to rewrite, your chosen tone instructions, and, if you enable Styleprint, your style profile are transmitted over HTTPS to our backend, which forwards them to our AI infrastructure provider to generate the rewrite. Nothing is transmitted until you explicitly request a rewrite, and this never happens in Local mode. We do not retain this content after the rewrite is returned, and it is not used to train any model. Legal basis: performance of a contract (producing the rewrite you request). The active engine is always visible in the app, and you can switch to Local mode at any time.

3.3 Billing data

Payments are processed by Lemon Squeezy, which acts as the Merchant of Record. Card details are entered on Lemon Squeezy's hosted checkout and never touch Wrivio. We receive only a subscription/licence status, a customer identifier, and renewal/period dates so we can unlock Pro. Legal basis: performance of a contract; compliance with tax/accounting obligations.

3.4 Opt-in diagnostics (anonymous, Cloud-only)

If, and only if, you turn on “Share anonymous diagnostics” in Settings (default off), Wrivio may send minimal, anonymous usage events (e.g. that a rewrite completed, the app version, your OS) and crash reports (a sanitized stack trace). These never include your rewrite text, and the diagnostics path is unreachable in Local-only usage. Legal basis: your consent.

3.5 Reports about generated responses

If you choose Report response after a rewrite, Wrivio sends the displayed AI-generated response, your selected reason, the app version, and the engine used so we can review potentially inappropriate output. The report screen shows the exact response before it is sent, and it never includes your original input. Reporting is optional and user-initiated. Legal basis: our legitimate interest in preventing harmful output and improving product safety.

3.6 Device identifier

Wrivio generates a random per-install identifier used for abuse-prevention and to attach diagnostics (when enabled). It is not your identity and is not shared with third parties for advertising.

3.7 Abuse prevention for free preview rewrites

To stop automated abuse of the free preview, we count how many preview rewrites come from a single internet connection each day. We do not store your IP address to do this: the address is combined with a secret value and converted into an irreversible fingerprint, and only that fingerprint and a daily counter are saved. The counters are short-lived and are not used to identify you, profile you, or build a history of your activity. Signed-in accounts are not counted this way. Legal basis: our legitimate interest in protecting the service from abuse.

4. What we do NOT collect

• The text you rewrite in Local mode; it never leaves your device.
• Any telemetry or usage data when diagnostics are off or you are using Local-only.
• Your keystrokes, screen contents, or clipboard beyond the text you explicitly submit for a rewrite.
• Payment card details (these go directly to Lemon Squeezy).

5. Processors & international transfers

We share data only with the service providers needed to run Wrivio:

• Supabase: authentication and account database (project hosted in the EU, Frankfurt).
• AI infrastructure provider: generates Cloud-mode rewrites; receives only your submitted text + prompt at the time of the rewrite, under terms that prohibit using it to train models. (Named on request.)
• Lemon Squeezy: payments, invoicing, and EU VAT as Merchant of Record.

Some providers may process data outside the EEA. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

Account data is kept while your account is active and deleted (or anonymized) within a reasonable period after you delete your account, subject to legal retention duties for billing records. Cloud-mode rewrite content is not retained after the rewrite completes, unless you explicitly submit that response in a content report. Anonymous diagnostics are retained only in aggregate.

7. Your rights (GDPR)

If you are in the EEA/UK you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time (e.g. by turning off diagnostics or switching back to Local mode). You may also lodge a complaint with your local data protection authority. To exercise any of these, contact our support team.

8. Children

Wrivio is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We will update this page when our practices change and revise the “Last updated” date above. Material changes affecting Cloud mode or diagnostics will be surfaced in-app.

10. Contact

Questions? Contact support.