Privacy & Data Ethics

🔒 Your Privacy Matters

Writeo is a study tool. Your writing isn't shared with other learners. Your essays and assessment results are private and only accessible to you.

👶 Children's Privacy & Age Guidelines

Writeo is designed to be safe for users of all ages. Because Writeo uses an opt-in server storage model where no data is stored on servers by default, Writeo doesn't collect personal information from children. This means COPPA (Children's Online Privacy Protection Act) requirements don't apply to Writeo's default usage.

For children under 13: Writeo can be used safely by children under parental guidance. By default, all data stays on the child's device and is never sent to our servers. We recommend parents:

• Review the privacy policy with their child
• Understand that server storage is opt-in only
• Monitor their child's use of the service
• Help their child understand how to use the tool safely

For users 13-16 in the European Union: If you opt in to server storage, parental consent may be required depending on your jurisdiction. By default (no server storage), no consent is needed.

Note: Writeo is an educational tool designed to help learners improve their writing. We encourage safe, responsible use by learners of all ages, with appropriate parental guidance for younger users.

📝 How We Store Your Writing

By default, Writeo doesn't store your data on servers. Your privacy is a priority.

When you submit an essay for feedback:

• Default (no server storage): Your results are stored only in your browser's localStorage. This means your data stays on your device and is never sent to our servers for storage.
• Optional server storage: You can choose to enable server storage when submitting. If you opt in, your essay and assessment results are stored securely on our servers for 90 days, allowing you to access your results from any device.
• Your writing is never publicly accessible
• We don't store your data unless you explicitly opt in

Note: Even when server storage is enabled, your data is processed only to provide immediate feedback and is automatically deleted after 90 days.

🍪 Cookies & Browser Storage

Writeo does not use HTTP cookies. We do not set, read, or store any cookies on your device. This means you do not need to accept or manage cookie preferences when using Writeo. There is no cookie consent banner because there are no cookies to consent to.

While we don't use cookies, Writeo does use browser storage APIs to provide functionality:

• localStorage: Used to store your essay results and progress data locally on your device. This data never leaves your device and is not sent to our servers unless you explicitly opt in to server storage.
• sessionStorage: Used temporarily during your session to maintain application state. This data is cleared when you close your browser tab.

These storage mechanisms are different from cookies and do not require consent under GDPR, CCPA, or other privacy regulations. They are essential for the service to function and allow you to save your essay results locally, track your progress across sessions, maintain your draft history, and remember your preferences.

Your Control: You have full control over browser storage. You can clear localStorage and sessionStorage at any time through your browser settings. Clearing browser data will remove all locally stored results and progress. You can use browser privacy/incognito modes if you don't want any data stored.

Note: If you clear browser storage, you will lose access to locally stored results. If you've opted in to server storage, your results will still be accessible via the submission ID for 90 days.

🤖 AI & Third-Party Services

Writeo does not use your writing to train or improve AI models without your explicit consent.

Your essays are used only to:

• Provide you with immediate feedback
• Track your progress across drafts
• Show you your writing history

Third-Party AI Services & Data Processors: Your text is sent to third-party services for analysis. These services act as data processors and are bound by data processing agreements:

• OpenAI API (GPT-4o-mini model) - Used for generating AI feedback and teacher-style comments. OpenAI processes your text but does not retain it for training purposes. See OpenAI's privacy policy for details.
• Groq API (Llama 3.3 70B model) - Used for generating AI feedback and teacher-style comments when Groq is selected as the provider. Groq processes your text but does not retain it for training purposes. See Groq's privacy policy for details.
• Cloudflare Workers AI - Used for relevance checking via embeddings (to verify your answer addresses the question). Cloudflare processes data in accordance with their privacy policy and terms.
• Modal - Hosts essay scoring models and LanguageTool for grammar checking. Modal processes your text for scoring but does not retain it.

Data Controller vs. Data Processor: Writeo acts as the data controller, and these third-party services act as data processors. All processors are contractually bound to:

• Process data only for the purpose of providing feedback
• Not retain your data for training or other purposes
• Maintain appropriate security measures
• Comply with applicable data protection laws

These services process your text to provide feedback, but they do not retain your data for training purposes. Your text is not shared with other users or publicly accessible.

If we ever want to use anonymized writing samples for research or model improvement, we will ask for your explicit opt-in consent first.

🔐 Data Access & Sharing

Your data is private and secure:

• Only you can access your essays and assessment results
• Your writing is not shared with other users
• Your data is not used for advertising or marketing
• We do not sell or rent your personal information

🚫 Do Not Sell My Personal Information (CCPA)

Writeo does not sell your personal information. We do not sell, rent, or trade your personal data to third parties for monetary or other valuable consideration.

Under the California Consumer Privacy Act (CCPA), California residents have the right to opt out of the sale of personal information. Since Writeo does not sell personal information, no opt-out is necessary. However, if you have concerns or questions, please contact the project maintainer via Discord server.

⚖️ Non-Discrimination (CCPA)

We will not discriminate against you for exercising your privacy rights under the California Consumer Privacy Act (CCPA) or any other applicable privacy laws.

This means:

• We will not deny you goods or services for exercising your privacy rights
• We will not charge you different prices or rates for exercising your privacy rights
• We will not provide you a different level or quality of services for exercising your privacy rights
• We will not suggest that you may receive different treatment for exercising your privacy rights

Your service quality and access will remain the same regardless of whether you choose to exercise your privacy rights.

🚨 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we are committed to:

• Immediate assessment: Investigating and containing the breach as quickly as possible
• Notification: Notifying affected users within 72 hours (as required by GDPR) or as soon as reasonably possible
• Transparency: Providing clear information about what happened, what data was affected, and what steps we're taking
• Remediation: Taking steps to prevent future breaches and mitigate any harm

Note: Because Writeo uses an opt-in server storage model, most users don't have data stored on servers. This significantly reduces the risk of data breaches. However, if you've opted in to server storage and a breach occurs, you will be notified through the contact information you've provided or via the Discord server.

If you believe your data may have been compromised, please contact the project maintainer immediately via the Discord server.

🗑️ Data Retention

By default, Writeo doesn't store your data on servers. Your results are stored only in your browser and can be cleared at any time by clearing your browser data.

If you opt in to server storage:

• Assessment results: Stored for 90 days, then automatically deleted
• Your essays and submissions: Stored for 90 days, then automatically deleted
• Questions and answers: Stored for 90 days as part of your submission history

Browser storage: Results stored in your browser (localStorage) remain until you clear your browser data or manually delete them. You have full control over this data.

📧 Contact & Support

If you have questions about your privacy or want to exercise your rights (access, deletion, etc.), please contact the project maintainer. I'm committed to being transparent and helpful.

Support: Join the Discord server for support and questions.

Privacy Requests: For formal privacy requests (data access, deletion, etc.), please use the support channel in the Discord server or contact the project maintainer directly through Discord.

Note: Writeo is designed as a learning tool. We prioritize your privacy and the security of your writing data.

✅ Your Rights

You have the right to:

• Access your stored writing and assessment data
• Request deletion of your data
• Opt out of any research or model improvement programs
• Export your writing and progress data

🛡️ Our Commitment

Writeo is designed with privacy and ethics in mind. We follow the principles of:

• Transparency: We're clear about how we use your data
• Fairness: Automated decisions are advisory, not final
• Conservatism: We prioritize precision over coverage in feedback
• User control: You stay in control of your data and can request deletion at any time