Privacy Policy

Last updated: 13 November 2026

This policy explains what the Draftproof app for iPhone ("the app") does with your information. The app is operated by the Draftproof team ("we", "us").

The short version

• You do not create an account. We do not ask for your name, email or phone number to use the app.
• The text you check is sent to our server only to produce your report. Our server does not save it.
• Your reports and the papers you checked are stored on your device only.
• We do not sell your data, show ads, or track you across other apps and websites.

Text you check

What is sent. When you run a check, the app sends the text of your paper to our server over an encrypted connection. Files you import and pages you scan with the camera are turned into text on your device first; the file or photo itself is not uploaded.

How it is processed. Our server passes the text to OpenAI, our analysis provider, through its API, with the request marked not to be stored. For the similarity check, short phrases from your text are searched on the web and our server reads the public pages that are found, then compares them with your text.

What we keep. Your text is held in memory while the check runs. The result stays in memory for up to six hours so that repeating the same check can be answered without running it again. Neither is written to disk or to our logs, and we do not use your text to train AI models. Your text is not added to any database that other people's papers are compared against.

What stays on your device. Reading text from files and photos, the citation check, writing statistics and building PDF reports all run on your device. Nothing from them is sent to us.

Reports

Reports and the text you checked are saved on your device so you can open them again. They are not uploaded to us and are not synced to other devices. You can delete them at any time in the app, or by deleting the app.

Information our server records

• Install identifier. The app creates a random identifier for your installation and sends it with each check. We store only a scrambled (hashed) form of it, with a record of how many reports it has used, to apply the free allowance and daily limits and to prevent abuse. It identifies an installation, not a person.
• Network address. Like any internet service, our server and our network provider (Cloudflare) receive your IP address. We store a hashed form with daily counts for abuse prevention. Standard server logs hold the address, time, request path and app version for a limited period, for security and troubleshooting.
• Technical figures. For each check we log its type, word count, whether it succeeded, how long it took and its processing cost. These logs never contain the text you checked.

Analytics

We use PostHog to understand how the app is used and to fix problems. It receives:

• events such as screens opened, a check started or finished, its word count, duration and a broad score range, errors, and paywall and purchase events;
• device and app details such as device model, iOS version, app version, language and approximate region derived from your IP address;
• a random identifier for the app installation.

Analytics never includes the text you check, file names, or your reports. We do not use the advertising identifier and we do not track you across apps or websites owned by other companies.

We also use our own configuration service to show in-app announcements. On launch the app tells that service its name and version.

Purchases

Subscriptions are sold and billed by Apple through your Apple Account. We never see your card or payment details. When you run a check as a subscriber, the app sends Apple's signed proof of your subscription to our server so it can confirm your plan. That proof holds the product, dates and transaction identifiers, never payment details, and our server does not store it.

Support messages

If you use "Contact support" in Settings, the name, email address and message you enter, together with the app version, are sent to our support mailbox so that we can reply. The name and email are also remembered on your device to save retyping.

Who we share information with

Only the service providers that make the app work, each for the purpose described above:

• OpenAI: analysing the text you check.
• Cloudflare: delivering and protecting our server.
• PostHog: analytics.
• Apple: subscriptions.
• Our email provider: support messages.

Some of these providers process information in the United States and other countries. We may also disclose information if the law requires it or to protect the service against abuse.

How long we keep information

• Text you check: not stored (in memory for up to six hours).
• Hashed usage records: kept while needed to apply limits and prevent abuse.
• Analytics data: kept according to the retention settings of PostHog.
• Support messages: kept while needed to handle your request and for our records.

Your choices and rights

• Delete your reports in the app, or delete the app to remove everything stored on your device.
• Depending on where you live, you may have the right to access, correct or delete personal information, or to object to its use. Because the app has no accounts, we usually cannot link data to you personally; a support message is the exception. To make a request, use Settings, then "Contact support", or write to contact@heytech.work.

Children

The app is not directed to children under 13, and we do not knowingly collect personal information from them.

Security

Connections to our server are encrypted. Text you check is not stored, and identifiers are stored only in hashed form. No system is perfectly secure, so please do not submit information you are not comfortable processing through an online service.

Independence

The app is an independent product. It is not affiliated with, endorsed by or connected to any school, university, publisher or other originality-checking service, and it does not use any account you may hold with one. This policy covers the app only.

Changes

We may update this policy. The date at the top shows the latest version, and the current policy is always available in the app under Settings.

Contact

Questions about privacy: open the app, go to Settings and choose "Contact support", or write to contact@heytech.work.