1. Who we are
Recorrect Typing (the “Service”) is an independently operated product. In this policy “we” and “us” mean the operator of the Service, who is the controller of the personal information described below.
You can reach us about privacy at support@rectyping.com. We have not appointed a representative in the EU or UK.
2. Summary
- Your text is not stored. Text you check is sent to our servers and our AI model providers only to generate the correction, and is discarded afterwards.
- Your history stays on your Mac. Past checks are saved locally by the app, not in our database.
- We keep usage metadata, such as character counts, languages and costs, to run plans, prevent abuse and keep the Service reliable.
- We don't sell your data, and we don't use your text to train AI models.
- Payments are handled by Waffo, our Merchant of Record. We never see your full card details.
3. Information we collect
Account information. Your email address, account identifier, role, and when your account was created and last used. We email you one-time sign-in codes; they are stored only as a keyed hash and expire after 10 minutes.
Device and session information. For each device you sign in on: a random device identifier created by the app, the device name, platform, app version and operating system version, plus session records (created, last used, expiry and revocation). We use these to keep you signed in, apply device limits and protect your account.
Usage metadata. For each check: the time, number of characters, writing and explanation languages, detected language, correction mode, credits charged, the AI provider and model used, token counts, estimated cost, response time, number of attempts, error codes, and your app platform and version. Usage metadata never includes the text itself.
Billing information. Waffo processes payments as our Merchant of Record. We receive your Waffo order and payment identifiers, the email address you paid with, plan, billing interval, subscription status and dates, and transaction references. We don't receive or store full payment card numbers.
Feedback and support. If you rate a correction, we store the rating, reason and any comment. The original text and the correction are included only if you explicitly choose to share them. If you email us, we keep the conversation.
Website and acquisition data. When you sign in on our website we set one strictly necessary cookie (“rt”) that holds your refresh token. If you arrive through a tagged campaign, we set a random first-party browser identifier (“rta”) for 30 days and store the landing path, campaign source, medium, campaign, content, term, and Google or X advertising click ID when present. If the same browser completes Google or X sign-in, we associate that campaign record with the account. Cloudflare provides aggregate website analytics and processes technical data such as IP addresses to deliver and secure the Service. We don't store IP addresses or user agents for campaign attribution, use fingerprinting, or use the text you check for attribution.
4. The text you check
When you press the shortcut, the app sends the selected text and your correction settings over an encrypted connection to our servers. We pass the text to an AI model provider to generate the correction and return the result to your app.
- We process the text in memory and don't write it to our database or application logs.
- We use AI providers under terms that don't allow them to train models on your text. Some vendors keep a request for a short period for abuse monitoring where their own terms require it; the current list and their retention terms are published by OpenRouter.
- Instructions inside your text are treated as text to correct, never as commands.
- If you choose to include the text when you send feedback, we store that text and the correction to improve quality. You can ask us to delete it at any time.
5. How we use information
- Provide the Service, including sign-in, corrections, plans, credits and devices.
- Process payments and manage subscriptions through Waffo.
- Prevent fraud and abuse, for example by limiting accounts per device and rate-limiting requests.
- Monitor reliability, cost and quality using aggregated usage metadata.
- Measure which tagged advertising campaigns lead to sign-ins, successful corrections and paid subscriptions.
- Send service emails such as sign-in codes and important account notices.
- Answer support requests and feedback.
- Meet legal obligations and enforce our Terms of Service.
6. Legal bases (EEA and UK)
We rely on performance of a contract to provide the Service you signed up for; legitimate interests to secure the Service, prevent abuse and improve reliability, balanced against your rights; consent when you choose to share text with feedback, which you can withdraw at any time; and legal obligations, for example tax and accounting rules.
7. Service providers
We share information only with providers that help us run the Service, under contracts that limit how they may use it:
- Cloudflare, Inc. — hosting, database, networking and security for our servers and website.
- AI model providers (OpenRouter, Inc., which routes each request to the model vendor that serves it) — generating corrections from the text you check.
- Waffo Pancake and its affiliates — Merchant of Record for payments, invoicing, tax and subscription management.
- Resend, Inc. — delivering sign-in codes and service emails.
We may also disclose information when the law requires it, to protect rights and safety, or as part of a merger or acquisition, in which case this policy continues to apply.
8. International transfers
Our providers may process information outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
9. How long we keep information
- Text you check: not kept after the correction is returned.
- Sign-in codes: expire after 10 minutes and are deleted within a day.
- Sessions: refresh tokens expire after 60 days without use, or when you sign out.
- Account information: kept while your account is active.
- Usage metadata: kept for 12 months for billing, abuse prevention and aggregate reporting. After account deletion it is no longer linked to your email address.
- Acquisition data: the browser identifier expires after 30 days; unclaimed campaign records are deleted after 90 days. Campaign records associated with an account are kept until the account is deleted, after which only anonymous aggregate campaign data remains.
- Feedback that includes text: kept for 12 months or until you ask us to delete it.
- Billing records: kept by Waffo and by us for as long as tax and accounting laws require.
10. Deleting your account
You can delete your account at any time from the Account page on our website. We then cancel active subscriptions, sign out every device, delete your devices and credit grants, and replace your email address with an anonymous placeholder. Usage metadata is kept without a link to your identity for aggregate accounting. The history saved by the app on your Mac isn't affected; you can clear it in the app's settings.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for using these rights. We don't sell or share personal information for cross-context behavioral advertising.
To use these rights, contact support@rectyping.com. We'll respond within the time the law requires. You can also complain to your local data protection authority.
12. Security
We encrypt data in transit, store refresh tokens and sign-in codes only as hashes, keep access tokens short-lived, restrict administrative access and record administrative actions in an audit log. No system is perfectly secure, so please keep your email account secure too.
13. Children
The Service isn't directed to children under 13 (16 in the European Economic Area). We don't knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. If a change is significant, we'll let you know by email or in the app before it takes effect. The date at the top of this page shows when the policy was last updated.
15. Contact
Recorrect Typing. Email: support@rectyping.com.