Privacy Policy

Effective October 30, 2026. See also our Terms.

Who we are

Draft Prompt is made by Laronge Intellectual Property Development, LLC, a Florida company. This policy covers the Draft Prompt apps for Mac, Windows, iPhone and Android, Sync (part of Pro Everywhere), and draftprompt.app. Questions go to hello@draftprompt.app.

What stays on your device

• Without an account, everything stays on your computer or phone: your tabs, their text, your attachments and your settings. The only things sent to us are license key checks and update checks (see below).
• Attachment files are never uploaded to our server, with or without Sync. If you turn on the attachments folder, Draft Prompt copies them into a folder in your own cloud drive (iCloud Drive, OneDrive, Dropbox or Google Drive). That provider's privacy policy covers them there, not this one.
• Spelling and grammar checks run on your computer. Your text isn't sent anywhere to check it.
• Scan Text reads a photo's text on your phone. The photo and its text stay there. On iPhone it uses Apple's text recognition, which sends nothing. On Android it uses Google's ML Kit, through Google Play services, which sends Google diagnostics: the phone's model and Android version, the app's name and version, a device identifier, how long it took, the image size and error codes. Never the photo or its text.
• On a phone, the app keeps a copy of your synced tabs so they show offline. It's left out of iCloud and Google backups and deleted when you sign out.

What goes to our server

Only once you sign in. Draft Prompt's server is run on Supabase (more on them below). It stores:

• Your email address, to sign you in with a 6-digit code, and an account ID.
• Your computers and phones: each one's name (your computer's own name, or on a phone whatever you type, starting from "iPhone" or the phone's model), whether it's a Mac, Windows PC, iPhone or Android phone, the app version, when it was last seen, and its sign-in. For computers using the attachments folder: which cloud drive it's in and where the folder sits in it, e.g. Documents/Draft Prompt Attachments.
• Synced tabs, with Pro Everywhere only: each tab's text, color, order, which section it's in, when it was last edited and on which device.
• Sections, with Pro Everywhere only: each section's name, color and order, when it was last edited and on which device. Whether a section is collapsed stays on each device.
• Attachment details, with Pro Everywhere only: each attachment's name, type, size, a checksum to match copies, which computer or phone has the file, where it is in your attachments folder, and for images a small preview (32 KB at most). Not the file itself. A photo attached on a phone stays on that phone; it's saved without its location first.
• Your purchase status: whether you have the full app (Pro Local or Pro Everywhere), since when, where it came from (a license key, Google Play, the App Store, Payhip, or given by us) and when it ends, if it does; whether Sync is active and until when; and if you linked a Pro Local license key, a fingerprint of the key (a SHA-256 hash) and its last 4 characters. Never the key itself. If you're on the free trial, when it ends.
• Free trials of Pro Everywhere: when an account starts one, a SHA-256 hash of its email (in lowercase) and the start date, so each email gets one trial. Not the email itself.
• Payhip records, if you buy Pro Everywhere on draftprompt.app: Payhip's subscription and customer IDs, the email you bought it with, and its status, payment, renewal, cancellation and refund dates; and for each payment or refund, Payhip's transaction ID and its date.
• Google Play and App Store purchase records, if you buy in the Android or iPhone app: which product (Pro Local or Pro Everywhere), the store's purchase token or transaction ID, whether it's a test purchase, its status (active, cancelled, expired or refunded), whether it renews, and its start, paid-through, cancellation and refund dates. You need an account to buy in the app, so the purchase follows you to your other devices.
• Sign-in logs: Supabase keeps the IP address and app details (the app or browser's user agent) of sign-ins in its logs.

We use all of it for one thing: making the apps work. Signing you in, syncing your tabs, showing your devices, and knowing what you've paid for.

License keys, updates and the website

• When you enter a Pro Local license key in the desktop app, it goes to draftprompt.app, which asks Payhip whether it's valid. To limit tries, the server keeps a note of the times of recent tries, filed under a hash of your IP address, not the address. Old notes are cleared out during later license checks.
• The Mac and Windows apps check draftprompt.app for updates. That request includes your IP address and the app's version, like any web request, and our website host can log it.
• The website counts its visits: which page was opened, the name of the website that linked to it (such as reddit.com), and clicks on the download buttons. Only the totals for each day are kept. It uses no cookies, stores nothing on your device, and doesn't keep your IP address or anything else about you.

Who handles your data

• Supabase: our database and sign-in. The sign-in code emails go out through our own mail server at draftprompt.app.
• Payhip and its payment processors, Stripe and PayPal: sales of Pro Local and Pro Everywhere on draftprompt.app, and license key checks. We never see your card details.
• Our website host: draftprompt.app, its mail server, license checks and desktop updates.
• Google, on Android only: ML Kit diagnostics from Scan Text. Google says it doesn't pass them to third parties.
• Google Play: payments made in the Android app. Google handles the payment as its own controller, under its own privacy policy. We never see your card details.
• RevenueCat: tells our server what you've bought in the Android and iPhone apps. It gets your account's random ID (not your email), what you bought and when, and the basic device details its software sends with each request, such as the platform and app version.
• Apple's App Store: payments made in the iPhone app. Apple handles the payment as its own controller, under its own privacy policy. We never see your card details.

They only handle it to provide those services to us.

What we don't do

No ads, no crash reporting, no tracking across apps or websites. The apps send no analytics; the website keeps only the daily visit totals described above. (On Android, Scan Text's ML Kit sends Google diagnostics, as described above.) We don't sell your data or share it with anyone for their own use. We don't look at your tabs unless you ask us to help with a problem.

How long we keep it

• Your account and everything tied to it: until you delete the account.
• Closed tabs and deleted sections: when you close a tab or delete a section, it's marked closed or deleted and kept for 30 days, so other devices hear about it. A daily cleanup then deletes it and its attachment details for good.
• Backups: our database host, Supabase, makes a daily backup and keeps each one for 7 days. Anything deleted, including a deleted account, can stay in those backups for up to 7 days before it's gone for good.
• A removed computer or phone: its record is deleted when you remove it or sign it out.
• License-link tries: used to limit tries to 10 every 10 minutes. Older ones are cleared at your next try.
• Purchase-check tries: when the phone app asks our server to check your Google Play or App Store purchases, the time of each try is kept to limit how often it can ask, and cleared at later tries.
• Sign-in logs: as long as Supabase keeps them.
• Website visit totals: kept as long as they're useful. They're counts only and don't identify anyone.
• Payhip, Google Play and App Store purchase records: kept after an account is deleted, no longer linked to it, for our payment records.
• Free trial records: the email hash and start date are kept for as long as we offer the free trial, including after an account is deleted, so the same email can't get a second trial. They aren't linked to any account.

Deleting your account

In the iPhone or Android app, go to Account, then Delete Account, and type DELETE. Without the app, email hello@draftprompt.app from the address you sign in with and we'll delete it for you.

Deleting your account removes your email, your devices and their sign-ins, your synced tabs and sections, your attachment details and previews, and your purchase status, including your license key fingerprint. Every device is signed out. It can't be undone.

• Payhip, Google Play and App Store purchase records stay, no longer linked to any account.
• Free trial records (an email hash) stay for as long as we offer the free trial, so the same email can't get a second trial.
• Deleting doesn't cancel a subscription. Cancel Pro Everywhere where you bought it (see our Terms), or it renews.
• Files on your devices aren't touched: attachment files, your attachments folder, and tabs already on your computers stay where they are.

If you're in the EU or UK

Who's responsible for your data. Laronge Intellectual Property Development, LLC is the controller of your data. Contact: hello@draftprompt.app.

Why we're allowed to use it.

• Your account, Sync and your purchases: to carry out our contract with you (our Terms).
• Security, including sign-in logs and limiting license key tries: our legitimate interest in keeping Draft Prompt and your account safe.
• Keeping payment records, including after you delete your account: to meet our legal obligations.
• Keeping trial records after you delete your account, so each email gets one free trial: our legitimate interest in preventing misuse of the trial.

Where it's stored. Our database and sign-in run on Supabase in Canada (Montréal). The EU and UK both recognize Canada's privacy law as giving adequate protection to data handled by businesses. Some of your data also goes to the US:

• Us. Laronge Intellectual Property Development, LLC is a US company, in Florida. We collect your data directly from you and protect it as this policy describes, wherever it's stored.
• Supabase is a US company. Its data processing agreement uses the EU Standard Contractual Clauses and the UK Addendum to them.
• Two account actions, linking a license key and deleting your account, may run in the Supabase location closest to you. They pass your sign-in token (and, for linking, your license key) to our database in Canada and keep nothing themselves.
• Our website host, hosting.com (formerly A2 Hosting), is in the US. It hosts draftprompt.app, our mail server, license checks and desktop updates. hosting.com is certified under the EU-US Data Privacy Framework and its UK Extension.
• Stripe, which handles card payments for Payhip, is certified under the EU-US Data Privacy Framework and its UK Extension, with the Standard Contractual Clauses as a fallback.
• RevenueCat is a US company. Its data processing agreement uses the EU Standard Contractual Clauses and the UK Addendum to them.
• Google Play payments are handled by Google as its own controller, under its own privacy policy.
• App Store payments are handled by Apple as its own controller, under its own privacy policy.
• If you pay with PayPal, PayPal handles that payment as its own controller, under its own privacy policy.

Payhip is a UK company and stores its data in the EU. It handles your purchase as its own controller, under its own privacy policy.

Your rights. You can ask us to:

• give you a copy of your data (access)
• correct it
• delete it
• limit how we use it (restrict)
• send it to you in a format you can take elsewhere (portability)
• stop using it where we rely on our legitimate interest (object)
• withdraw your consent, where we've asked for it (today we don't rely on consent for anything)

Email hello@draftprompt.app and we'll answer within one month. To delete your data, you can also delete your account in the app (see Deleting your account).

Complaints. You can complain to the data protection authority in your country, or in the UK to the Information Commissioner's Office (ico.org.uk). We'd like the chance to fix it first, so please email us too.

No automated decisions. We don't make decisions about you by automated means, and we don't profile you.

Children

Draft Prompt isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child has made an account, email hello@draftprompt.app and we'll delete it.

Changes to this policy

If this policy changes, the new version goes on this page with a new effective date. If a change affects what we collect or how we use it, we'll say so in the apps or by email first.

Contact

Laronge Intellectual Property Development, LLC. hello@draftprompt.app