Privacy Policy

Last updated: August 2026

This policy describes how Schreibly ("we", "us") processes personal data when you use our website and writing-assistance service. It applies to all Schreibly surfaces, including the website, browser extensions, and desktop applications.

1. Who we are

Schreibly is the data controller for the personal data described in this policy. Contact us at hello@schreibly.com for any data-protection enquiry.

2. What data we process and why

2.1 Authentication (Keycloak / OIDC)

When you sign in, your account is managed via Keycloak, our identity provider. We store an account identifier, email address, and display name. The legal basis is contract performance (GDPR Art. 6(1)(b)).

To protect your account, Keycloak also processes active-session metadata — your IP address, browser/device, and the session's start and last-access times. The legal basis for this is our legitimate interest in keeping accounts secure (GDPR Art. 6(1)(f)). You can review these sessions and terminate other active sessions from the Security page in your account, and you may object to this processing at any time (GDPR Art. 21).

2.2 Usage counters

We track word-credit usage tied to your account so we can enforce plan limits and display your remaining balance.

Usage counters do not contain the text you submit for spelling, grammar, style, or other writing checks.

This data is retained for the life of your account. You may request erasure at any time (see section 5). The legal basis is contract performance (GDPR Art. 6(1)(b)).

2.3 Grammar, spelling and writing checks — Schreibly AI

Schreibly performs spelling, grammar, context, style, and other writing checks using language models developed, trained, fine-tuned, evaluated, and improved for the Schreibly writing-assistance service.

We continuously work on improving our language models and their ability to understand and correct written language at different levels of complexity and language proficiency.

Your submitted text is never used to train, fine-tune, evaluate, or improve Schreibly's language models. Model development and model-quality work use separate training and evaluation data that is independent of text submitted by Schreibly users for checking.

Temporary processing of your text

When you request a writing check, Schreibly needs temporary access to the relevant text in order to analyse it and return corrections and suggestions to your application or browser.

Submitted writing is not written to our databases, durable storage, analytics systems, or application logs. It is processed only in volatile working memory for the active checking session.

The active text exists only for as long as it is required to process the current field or session and return the corresponding corrections. When the field or session is closed, or the connection to Schreibly ends, the active text is removed from that session's working memory.

This means that closing or leaving the active page or application causes the associated checking session to end once the client disconnects or closes the corresponding field.

Temporary in-memory check-result caching

To avoid performing the same computation repeatedly, Schreibly may temporarily keep previously calculated check results in volatile server memory.

These caches are addressed using cryptographic hashes derived from the checked content. The submitted full text itself is not stored as a cache key and is not written to persistent storage.

Cached check results may contain the correction information and short text fragments required to identify an issue and present the correction to the user. They are held only in volatile application memory, are not associated with the user's account for training purposes, and are never used as AI-training or fine-tuning data.

No training from user content

Schreibly keeps the operation of the writing assistant separate from the development and training of its language models.

Text entered by users for checking, generated corrections, and individual checking sessions are not added to Schreibly training datasets and are not used to fine-tune our language models.

Improving Schreibly's language models is performed using separately prepared training, validation, and evaluation material rather than content submitted by users while using Schreibly.

2.4 Contact form

When you submit the contact form on our About page, we collect your name, email address, subject, and message. These are forwarded to SendGrid (a Twilio Inc. service based in the United States) solely to deliver your message to our team and to reply. We do not use this data for marketing. The legal basis is our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f)).

SendGrid as a US sub-processor: Where contact-form information is transferred to SendGrid for email delivery, the applicable international data-transfer safeguards must be in place before the production contact form is enabled.

3. Cookies and local storage

Schreibly uses authentication and application storage required to keep you signed in, maintain your session, and remember application preferences such as your selected language.

Depending on the Schreibly client you use, this information may be maintained using secure cookies or application/browser-extension storage.

We do not use advertising or behavioural-tracking cookies.

4. Data retention

Account information, settings, and usage-counter data may be retained for the duration of your account where required to provide the Schreibly service.

Text submitted for writing checks is not persistently stored. Active text is processed temporarily in volatile memory as described in section 2.3 and is removed from the active session when that field/session ends or the connection closes.

Temporary in-memory check-result caches are operational data only. They are not training datasets and are not used to create user profiles.

Contact-form messages are retained only as long as necessary to handle your enquiry and related correspondence.

5. Your rights

Under the GDPR you have the right to access, correct, erase, restrict, or port your personal data, and to object to processing where our legitimate interest is the basis. You also have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights — including requesting erasure of your account or usage information — contact us at hello@schreibly.com. We will respond within the period required by applicable data-protection law.

6. Security

Schreibly applies technical and organisational measures designed to protect personal data and submitted text against unauthorised access, disclosure, alteration, or loss.

Connections between Schreibly clients and Schreibly services are encrypted in transit using TLS.

Schreibly is designed so that text submitted for writing checks remains transient: it is processed in working memory rather than being written to persistent databases or application logs.

Authentication information is handled using the security mechanisms appropriate to each Schreibly client, including secure web sessions and protected browser/application storage where required.

7. Changes to this policy

We may update this policy as Schreibly and its language models evolve. Material changes affecting how personal data is processed will be communicated through the website, application, or by email where appropriate.

Contact / data requests

hello@schreibly.com — for all data-protection requests, erasure requests, or questions about this policy.

German, French, and Arabic versions of this policy are planned so that Schreibly's privacy information can be provided clearly in the languages supported by our service.