Privacy Policy

Last updated: July 11, 2026

1. The short version

• Your rewrite text in Local mode never leaves your device. Local rewrites run entirely on-device and make no network calls for the rewrite itself.
• No account is needed to start. Wrivio creates an anonymous session on first launch. Adding an email address is optional — it keeps your credits and plan across devices and reinstalls.
• Cloud rewrites are transient. In Cloud mode (the default), your text is sent — over an encrypted connection, through our own backend, to our AI infrastructure provider — only at the moment you request a rewrite, solely to produce that rewrite. We do not store it after the rewrite completes. Prefer zero transmission? Switch to Local mode.
• Diagnostics are opt-in, anonymous, and cloud-only. They never include your text and never run in Local-only usage.
• We never sell your data, and we never use your text to train models.

This is the honest, complete version: Wrivio is private, not anonymous. We keep the strong promise that matters — your Local-mode content stays on your machine — while being upfront about the account and optional, minimal telemetry that a paid product needs.

2. Who we are

Wrivio (“we”, “us”) is the data controller for the personal data described here. For privacy questions or to exercise your rights, contact our support team. (Our full legal entity and registered address are provided in the app's About section and on request.)

3. What we collect, and why

3.1 Session & account data

On first launch Wrivio creates an anonymous session (a random account identifier with no name or email attached), which lets us enforce fair usage limits and keep your credits. If you later choose to create an account, we additionally collect your email address and a securely hashed password (handled by our authentication provider, Supabase). This is used to authenticate you, sync your plan across devices, and contact you about your account (e.g. password resets). Legal basis: performance of a contract.

3.2 Cloud-mode rewrite content (only when you request a rewrite)

In Cloud mode (the default engine), the text you ask Wrivio to rewrite, your chosen tone instructions, and — if you enable Styleprint — your style profile are transmitted over HTTPS to our backend, which forwards them to our AI infrastructure provider to generate the rewrite. Nothing is transmitted until you explicitly request a rewrite, and this never happens in Local mode. We do not retain this content after the rewrite is returned, and it is not used to train any model. Legal basis: performance of a contract (producing the rewrite you request). The active engine is always visible in the app, and you can switch to Local mode at any time.

3.3 Billing data

Payments are processed by Lemon Squeezy, which acts as the Merchant of Record. Card details are entered on Lemon Squeezy's hosted checkout and never touch Wrivio. We receive only a subscription/licence status, a customer identifier, and renewal/period dates so we can unlock Pro. Legal basis: performance of a contract; compliance with tax/accounting obligations.

3.4 Opt-in diagnostics (anonymous, Cloud-only)

If — and only if — you turn on “Share anonymous diagnostics” in Settings (default off), Wrivio may send minimal, anonymous usage events (e.g. that a rewrite completed, the app version, your OS) and crash reports (a sanitized stack trace). These never include your rewrite text, and the diagnostics path is unreachable in Local-only usage. Legal basis: your consent.

3.5 Device identifier

Wrivio generates a random per-install identifier used for abuse-prevention and to attach diagnostics (when enabled). It is not your identity and is not shared with third parties for advertising.

4. What we do NOT collect

• The text you rewrite in Local mode — it never leaves your device.
• Any telemetry or usage data when diagnostics are off or you are using Local-only.
• Your keystrokes, screen contents, or clipboard beyond the text you explicitly submit for a rewrite.
• Payment card details (these go directly to Lemon Squeezy).

5. Processors & international transfers

We share data only with the service providers needed to run Wrivio:

• Supabase — authentication and account database (project hosted in the EU, Frankfurt).
• AI infrastructure provider — generates Cloud-mode rewrites; receives only your submitted text + prompt at the time of the rewrite, under terms that prohibit using it to train models. (Named on request.)
• Lemon Squeezy — payments, invoicing, and EU VAT as Merchant of Record.

Some providers may process data outside the EEA. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

Account data is kept while your account is active and deleted (or anonymized) within a reasonable period after you delete your account, subject to legal retention duties for billing records. Cloud-mode rewrite content is not retained after the rewrite completes. Anonymous diagnostics are retained only in aggregate.

7. Your rights (GDPR)

If you are in the EEA/UK you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time (e.g. by turning off diagnostics or switching back to Local mode). You may also lodge a complaint with your local data protection authority. To exercise any of these, contact our support team.

8. Children

Wrivio is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We will update this page when our practices change and revise the “Last updated” date above. Material changes affecting Cloud mode or diagnostics will be surfaced in-app.

10. Contact

Questions? Contact support.