Legal
Privacy policy
Last updated: 20 October 2026
Draft. This page has not been reviewed yet and may change before GrammarDeck launches.
This policy explains what GrammarDeck collects, why, and what you can do about it. GrammarDeck is run by [Your full legal name], an individual based in India ("we", "us"). It covers the GrammarDeck apps for macOS, Windows, Linux, iPhone, iPad and Android, the GrammarDeck keyboards, the browser extension, and this website.
The short version: we check your text and then forget it. We keep your account, your plan and a daily count of checks. We never sell your data and never use your text to train AI.
1. What we collect
| Data | Why | How long |
|---|---|---|
| Account: email address, name (if your sign-in provider shares it), and a random user ID | To sign you in and give you the same plan on every device | Until you delete your account |
| Text you ask us to check | To find and fix mistakes | Not stored. It is processed in memory and dropped once the fix is returned |
| Plan and usage: Free or Pro, the paid-until date, and how many checks you made each day | To apply the daily limits and show your plan | Until you delete your account |
| Purchase records: plan, price, dates and the payment provider's reference | To turn Pro on, handle refunds, and keep tax records | As long as Indian tax law requires (up to 8 years) |
| App analytics: events such as "check finished" or "fix accepted", with counts, timings and error codes; device type and operating system | To see which features work and where people get stuck | Up to 14 months |
| Crash reports: the error, the app version, device or browser details, and your approximate location (country and city). Not your IP address. | To find and fix bugs | Up to 90 days |
| Server logs: time, request type, response code, text length and IP address | To keep the service running and stop abuse | Up to 30 days |
Analytics, crash reports and logs never contain the text you check. We do not collect card or bank details: the payment providers handle those.
2. Permissions on your device
- macOS Accessibility and Windows UI Automation. These let GrammarDeck read the text you select and paste the fix back. GrammarDeck reads it only when you click the tick, press the shortcut, or use the menu.
- iPhone keyboard "Allow Full Access". iOS requires this before a keyboard can reach the internet. The keyboard sends text only when you tap the check button. It does not record what you type.
- Android keyboard. Android shows a standard warning that any keyboard can see what you type. The GrammarDeck keyboard sends text only when you tap the check button, and does not record keystrokes. It does not check password fields.
3. Who we share data with
We use these service providers. They may process data only to provide their service to us. We do not sell or rent personal data, and we do not share it for advertising.
| Provider | What they do for us | Where |
|---|---|---|
| Google Firebase | Sign-in, plan and usage records, app analytics and crash reports | United States and EU |
| DeepInfra | Runs the AI model (Qwen) that checks your text | United States |
| LanguageTool | Basic grammar and spelling checks, and the backup when the AI is slow | European Union (Germany) |
| Google Gemini | Backup AI check when the main checker is down | United States |
| Sentry | Error reports from the website and the browser extension (never the text you check) | United States |
| Vercel | Hosts this website and the service the apps talk to | United States and worldwide edge network |
| Razorpay | Payments from buyers in India | India |
| Paddle | Payments from buyers outside India (Paddle is the seller of record) | United Kingdom |
| Apple App Store and Google Play | Subscriptions bought inside the phone apps | United States |
| RevenueCat | Checks App Store and Google Play subscriptions for us | United States |
When you pay through Paddle, Paddle is the seller of record and handles your payment under its own privacy notice. Razorpay, Apple and Google do the same for their payments. We may also share data when the law requires it.
The same list, kept up to date, is on our subprocessors page.
4. Where your data is stored
Our providers may store and process data outside India, including in the United States and the European Union. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.
5. Legal basis (for users in the EU and UK)
We process your account, text, plan and purchase data to provide the service you asked for (contract). We use analytics, crash reports and logs because we have a legitimate interest in keeping GrammarDeck working and secure. We keep purchase records because the law requires it.
6. Your rights
You can ask to see, correct, export or delete your data, and you can withdraw consent at any time. People in India have these rights under the Digital Personal Data Protection Act, 2023, and people in the EU and UK under the GDPR. To use them, email privacy@grammardeck.com from the address on your account. We reply within 30 days. The delete your account page explains how to delete everything. Deleting your account removes your account, plan and usage data. We keep purchase records only as long as tax law requires.
If you are not happy with our answer, you can complain to the Data Protection Board of India or to the data protection authority where you live.
7. This website and cookies
This website uses no advertising, tracking or analytics cookies. It sets one cookie to keep you signed in on the account page. The cookie policy lists it, along with the cookies the payment providers set when you pay.
8. Children
GrammarDeck is not meant for children under 13. Users under 18 need a parent or guardian's permission. If you believe a child has given us data, email us and we will delete it.
9. Security
Data travels over encrypted connections (HTTPS). Sign-in is handled by Google Firebase, and only our server can read the account database. No system is perfectly secure, so we also keep as little data as we can.
10. Changes
If we change this policy, we will update the date at the top. For important changes, we will also tell you in the app or by email before they take effect.
11. Contact and grievance officer
[Your full legal name], [Your postal address], Kerala, India. Email: privacy@grammardeck.com.