Privacy Policy

We store your writing so it syncs across your devices and survives a lost laptop. That is the only reason. We do not sell your data, we do not share it with advertisers, we do not use it to train models, and nobody reads your writing.

• Your writing. Document text and the text of each writing session, saved so you can pick up where you left off and read your history back.
• Writing activity. Session length, word counts, and daily totals — the numbers behind streaks and stats.
• Account details. Your email address, an optional display name, and a securely hashed password. We never store your password itself.
• Settings. Preferences like dark mode, goals, and your time zone, which is synced from your browser so that daily streaks follow your local calendar rather than UTC.
• Operational logs. Short-lived technical records of requests and errors, used to keep the service working.

If you use timetowrite without signing up, this still applies — anonymous accounts are stored the same way, just without an email address attached.

• Sell or rent your personal data or your writing. Ever.
• Use your writing to train machine learning models, ours or anyone else’s.
• Share your writing with advertisers or data brokers.
• Run third-party advertising or tracking scripts in the app.

Running the service means a small number of providers necessarily handle some data on our behalf. They are bound to use it only to provide their service to us.

• Cloudflare — hosting, database, and file storage. Your account data and writing are stored here.
• Stripe — subscription payments. Stripe handles card details directly; we never see or store your card number. We keep only your subscription status and a Stripe customer reference.

Card details are entered on Stripe’s own checkout page and never touch our servers. What we store is limited to what we need to know whether your subscription is active: the plan, its status, the renewal date, and identifiers linking your account to Stripe.

We send transactional email only: address verification and password resets. If you opt in to writing reminders or a progress summary, you can turn them off at any time from your account settings or from an unsubscribe link in the message. We do not send marketing email.

• Your writing is kept until you delete it or delete your account.
• Deleted documents sit in a recoverable state for 30 days before being permanently removed.
• Anonymous accounts that never produced any writing are cleared out periodically.
• Deleting your account removes your documents, sessions, stored text, activity, and settings, and cancels any active subscription.

• Export. Download everything — profile, settings, documents, and full session history with text — from the account page, at any time.
• Correction. Edit your name, email, and settings yourself from the account page.
• Deletion. Delete your account from the account page. It is immediate and permanent.

Depending on where you live you may have further rights over your personal data, including the right to object to processing or to lodge a complaint with a regulator. Email us and we will help.

Traffic is encrypted in transit. Passwords are stored as salted hashes, never as text. Access to production systems is limited to what is needed to operate the service. No system is perfectly secure, so we also give you an export tool — keep your own copy of anything you cannot afford to lose.

timetowrite is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

If this policy changes in a way that materially affects you, we will update the date at the top and, for significant changes, tell you by email.

Questions about your data, or a request you want us to act on: support@timetowrite.app. See also our Terms of Service.