Privacy Policy

Account information. You sign in with your email address, or with Apple or Google. We collect your email address to create and secure your account and to associate your content with it.

Content you save. The material you save — notes, links, photos, screenshots, voice recordings, videos, scans, and uploaded files — along with the project it belongs to. We also store what our systems derive from it to make it findable: transcripts of audio, descriptions and text extracted from images, text extracted from documents, link previews (title, description, author, site name, a thumbnail, and where available an embed), and a numeric search index (embedding).

How you use Cache. Your search queries and the basic app activity needed to return results and answers.

Connected cloud content. If you connect a cloud drive (such as Google Drive) and choose folders to sync, we access the files in those folders to import their contents into your library. We request read-only access and never modify your cloud files. You can disconnect at any time.

Technical data. Basic technical information needed to operate the service (for example, request logs and device or app information).

We do not collect your contacts, precise location, or advertising identifiers. Cache contains no ads and no third-party advertising or analytics trackers.

• Photos and media — so you can save images and files.
• Camera — so you can take a photo and save it directly.
• Microphone — so you can record voice notes.

Each is used only when you choose to use that feature.

We use your information solely to provide and operate Cache: to store your library, power search, generate overviews and answers grounded in your own saves, transcribe audio, describe images, extract document text, sync connected folders, and keep your account working. We do not sell your personal information, and we do not use the content of your saves or connected files for advertising.

When you connect Google Drive, Cache requests read-only access to your Drive (the drive.readonly scope) for the sole purpose of indexing and syncing the folders you select so their contents become searchable and available within your library.

Cache’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide or improve the sync feature, to comply with applicable law, or as part of a merger or acquisition. We do not allow humans to read your Google data except with your consent, to comply with law, or where processing is aggregated or anonymized for internal operations.

We share limited data with trusted providers strictly to deliver Cache, under agreements that limit their use of it. They process your content on our behalf, not for their own advertising. These include:

• Supabase — database, file storage, and authentication.
• Vercel — hosting.
• Anthropic — AI features: overviews, answers, and image and document understanding.
• Voyage AI — the search index and ranking.
• Groq — audio transcription.
• Supadata — video transcripts.
• Microlink and Jina AI — when you save a link, that URL is sent to fetch its title, description, and image.
• Google — Drive sync and sign-in, when you use them.
• Apple — Sign in with Apple, when you use it.
• Resend — email.

These providers receive only what is necessary to perform their function. We do not sell your data to anyone.

Your data is stored on Supabase infrastructure, and access is scoped to your account through row-level security, so other users cannot read your saves. Data is encrypted in transit (TLS). Credentials for connected cloud accounts (OAuth tokens) are encrypted at rest with AES-256 and are accessible only to the backend services that perform the sync. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard measures.

Your content stays until you delete it. You can delete individual items at any time inside the app, which removes them and their derived text from your library. You can disconnect a cloud provider at any time, which stops syncing and deletes the stored access credentials.

To delete your account and all associated data, see how to delete your account, or email hello@withrewrite.com. To ask for access to or an export of your data, contact us and we will help.

Cache is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

We may update this policy from time to time. Material changes will be reflected by updating the date at the bottom of this page.

Questions or requests? Email us at hello@withrewrite.com.