Privacy notice
Your conversations deserve clear boundaries.
This notice explains what ImproveMyReply collects, why we use it, where it goes, and the choices you have. It applies to the current web app and will be updated before new data uses are introduced.
Last updated: September 1, 2026
The short version
We do not sell or rent personal information.
We do not use personal information for targeted advertising.
Private message content is not routine product analytics.
You control whether to add screenshots or voice recordings.
Information we collect
Account information
When you sign in with Google, we receive an account identifier, email address, name, profile image, and authentication details needed to keep you signed in.
Conversation and draft content
We process the messages, draft replies, context, goals, tone and length choices, and other text you submit. We also save the reply options and explanations the service generates.
Screenshots and voice recordings
If you choose these features, the raw screenshot or recording is sent to our current AI service provider for text extraction or transcription. Voice is limited to three cumulative minutes per generation cycle across all voice fields, using duration verified from the recording by our server. ImproveMyReply does not add the raw file to its database. Extracted or transcribed text can become part of a saved rewrite when you generate one.
Product and usage information
We record credit claims and use, rewrite timestamps, and content-free helper events such as the feature used, input size, success or failure, and time. These events are linked to your account while retained, but do not include the screenshot, recording, transcript, or message text.
Purchase and support information
If you buy credits, we record the product, amount, currency, purchase-agreement version, Stripe transaction identifiers and status, fees, refunds, disputes, and the email associated with your account. Stripe collects and processes your card details on its hosted checkout page; ImproveMyReply does not receive or store your full card number or card security code. If you contact us, your email provider and ours process the message you choose to send.
Browser and technical information
We use authentication cookies. Drafts, writing preferences, and your light, dark, or system theme choice are stored in your browser. The theme choice is not sent to us. Our hosting, authentication, database, and security providers may also process standard connection information such as IP address, browser or device details, request times, and diagnostic logs.
How we use information
- Authenticate your account and provide the service.
- Generate, save, display, and delete your rewrite sessions.
- Manage free or purchased credits and feature limits.
- Process purchases, first-purchase bonuses, refunds, disputes, fraud checks, reconciliation, and financial records.
- Diagnose failures, secure the app, prevent abuse, and provide support.
- Understand feature adoption and reliability using product events and aggregated trends so we can improve the app.
- Send product news or offers only if you separately opt in to marketing emails. Creating an account is not marketing consent.
- Comply with law and enforce our agreements.
The limit on “improving the product”
We may use content-free usage events and aggregated trends to improve features, reliability, limits, and the user experience. We do not routinely inspect private conversation or draft text, and we do not use it to train our own models.
If we offer an optional quality-improvement program, we will ask for your separate, express permission before the Privacy Officer or another specifically authorized reviewer reads selected messages, drafts, or generated replies. A reviewer may record themes and aggregate insights to improve the service. We will not include your account ID or email address in the review queue, but the text itself may still identify you or another person and remains personal information while it is reviewed. Declining or later withdrawing this permission will not prevent you from using the core service.
We will ask for additional, separate permission before using content for personalization, a testimonial, marketing, or model training. We will not contact another person mentioned in your submission.
Free accounts that opt in receive one additional rewrite credit with each daily check-in while their permission remains active. Standard credits and the core service remain available without opting in. You can opt out or rejoin at any time. Opting out stops future research bonuses and future submissions from entering optional research; bonus credits already granted remain available until used or expired.
We may access content when you ask us to investigate a support problem, when reasonably necessary to address fraud, security, or misuse, or when required by law.
When information is shared
We disclose information only as needed to operate the service, protect people and the app, complete a business transaction, or comply with law. Current service providers include:
Vercel
Production hosting, request routing, firewall and security controls, and short-lived runtime logs. Submitted content passes through Vercel only as needed to serve the request.
Data practicesAI service provider (currently OpenAI)
Reply generation, screenshot text extraction, and voice transcription.
Data practicesStripe
Hosted checkout, payment processing, refunds, disputes, and transaction reconciliation when you choose to buy credits.
Data practicesVercel may process submitted content in transit plus standard connection and diagnostic details such as IP address, browser information, request path, timing, and status. We use these providers to supply the stated services, not to build targeted-advertising profiles from app content.
Our current AI service provider is OpenAI. OpenAI states that API inputs and outputs are not used to train its models by default. ImproveMyReply sends generation requests with application-state storage disabled. OpenAI may still retain customer content in safety and abuse-monitoring logs for up to 30 days, or longer when legally required or reasonably necessary to protect its services or others. If the AI service provider changes, we will update this notice before the new provider processes app content.
How long information is kept
Saved rewrites and generated replies
Until you delete the rewrite or your account is deleted, subject to limited backup, legal, fraud-prevention, or security retention.
Raw screenshots and voice recordings
Not intentionally saved in our application database after the request. Our current AI service provider may retain API content for safety and abuse monitoring as described below.
Hosting and security logs
Vercel runtime logs are kept for one day. We do not intentionally write submitted messages, drafts, screenshots, recordings, or transcripts to those logs. A limited security record may be kept longer when needed to investigate an incident or meet a legal obligation.
Content-free product usage events
Account-linked event records are kept for up to 12 months, then deleted. We may keep aggregate statistics that no longer identify or single out a user for longer.
Purchase agreements and financial records
Generally kept for six years from the end of the last relevant tax year for accounting and legal obligations. We may keep a record longer when a legal hold or other law requires it.
Draft saved in your browser
Until you start a new draft, clear the site data, or remove it through your browser controls.
Writing and appearance settings saved in your browser
Until you change the setting, clear the site data, or remove it through your browser controls.
Your choices and rights
- Screenshots, microphone access, and voice recording are optional. You can type or paste text instead.
- You can delete individual saved rewrites in the app.
- You can start a new draft, change writing or appearance settings, sign out, or clear the app's local data through your browser controls.
- You may request access, correction, a portable copy, or deletion of personal information associated with your account. We may need to verify your identity first.
- You may withdraw optional consent. Withdrawal does not affect processing already completed and may make an optional feature unavailable.
Information about other people
A conversation may contain another person's information. Share only what you are permitted to share and what the feature needs. Remove unnecessary full names, phone numbers, addresses, financial details, health details, intimate images, and other highly sensitive identifiers before submitting content.
Security and international processing
We use access controls, encrypted network connections, private database rules, and service credentials intended to protect personal information. No system is completely secure. Our providers may process information outside your province or country, including in the United States, where it can be subject to local law.
Age limit
ImproveMyReply is for adults aged 18 and older. By creating an account or using the service, you confirm that you are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.
Changes to this notice
We will update the date above when this notice changes. If a change introduces a materially different use of personal information, we will provide prominent notice and seek new consent when required before the new use begins.
Contact and privacy requests
Contact the Privacy Officer for ImproveMyReply with questions, complaints, or requests about your information.
helpmereply.dev@gmail.com