Privacy Policy

The short version

The text you rewrite is sent to Google's Gemini API to produce the result. Guests' text is not saved by us; signed-in users' documents are saved in their account until they delete them.
We collect what we need to run your account: your name, email address, a hashed password or your Google sign-in, your plan and your word usage.
We don't sell your data, show ads or use advertising trackers, and we don't train AI models on your writing.
You can delete documents yourself at any time, and you can ask us to delete your whole account.

Who we are#

HumanProse (humanprose.org) is an online writing tool that helps you rewrite English text so it reads clearly and naturally. It is built and run by Hamza AlHelou, an independent developer, with a small team that handles support and payments. In this policy, "HumanProse", "we" and "us" mean the people who run the service, and "you" means anyone who visits the site or uses an account.

This policy explains what information the service handles and why. It describes how HumanProse actually works today. If something changes, we update this page and the date at the top.

What we collect#

Account details

When you create an account with an email address, we store your name, your email address and your password. The password is stored only as a one-way hash, so nobody at HumanProse can read it. We also keep whether your email address is verified, your plan, how many plan words you have used, any word credits you have, when your current plan ends, and when the account was created.

If you choose Sign in with Google, Google shares your name, your email address, a Google account identifier and the address of your profile picture with us. We never see your Google password.

The text you write

Signed-in users. Each rewrite is saved as a document in your account: the original text, the result, the options you chose (mode, tone, vocabulary, length), word counts and simple quality scores. Follow-up tools such as rewrite again, translate or summarise add versions to the same document. If you rate a result with a thumbs up or down, we store that rating. Writing styles you save are kept in your account.
Guests. If you try HumanProse without an account, we do not save your text or the result. To apply the guest trial limit, we place a random identifier in a cookie on your device and keep a hashed form of it with the number of words used.
Imported files. When you import a .txt, .md, .docx or .pdf file into the editor, it is read in your browser. The file itself is not uploaded; only the text you then choose to rewrite is sent.

Payments

We do not process card payments. Plans and word credits are currently paid by bank or e-wallet transfer and checked by our team. To do that we see the details on the payment receipts you upload to verify a payment or send us on WhatsApp, such as the sender's name, the amount, the date and a reference number. We keep a record of the plan or credits added to your account.

Technical and security information

Like most websites, our servers record technical information when you use HumanProse: your IP address, your browser and device type (the user agent), the pages requested, and errors. Your signed-in session is stored with the IP address and user agent it was opened from. We use this to keep you signed in, warn you about sign-ins from a new device, limit how fast requests can be made, block automated attacks and fix problems. Requests that look like attacks, such as scans for other software, can cause an IP address to be blocked for 24 hours.

Counting visits

To understand how many people find HumanProse and sign up, our own server counts visits to public pages by people who are not signed in. It uses no cookies, no browser storage and no outside analytics service. Each visitor is counted at most once a day as a one-way code made from a shortened IP address (the last part removed) and the browser's user agent, mixed with a random key that changes every day and is then deleted, so the code cannot be traced back to you or linked across days. With it we keep the first page you opened, the name of the site that linked to us (not the full address), any campaign tags in the link, the page language, whether the device is a phone or a computer and, when our hosting provider supplies it, the country. When you create an account, the same day's code is stored with it so we can see which visits lead to sign-ups. We only look at these figures in aggregate, and visit records are deleted after 13 months. Browsers that send a Global Privacy Control or Do Not Track signal are not counted.

Messages you send us

If you contact us on WhatsApp or by email, we keep the conversation so we can help you and keep track of payments and requests.

How we use it#

To provide the service: rewriting your text, saving your documents and versions, and applying your plan's word limits.
To send the emails an account needs: email verification, password reset, a welcome message, a notice when you are close to your plan's word limit, a reminder before your plan ends, security alerts about new sign-ins or changes to your email address or password, and confirmation when your plan or credits change.
To send occasional product emails you can unsubscribe from. Every one of them has an unsubscribe link, and unsubscribing does not affect the account emails above.
To verify payments and to answer your support requests.
To keep HumanProse secure and reliable: preventing abuse and fraud, investigating problems and enforcing our Terms of Service.

We do not sell or rent your personal information. We do not show advertising and we do not use advertising or cross-site tracking cookies. We do not use your writing to train AI models.

Authorised members of the HumanProse team can see account details in our administration dashboard, and can open documents when that is needed for support, for investigating abuse or for keeping the service working properly. Access is limited to administrators and protected by a two-step sign-in.

How your text is processed by Google Gemini#

HumanProse does not run its own language model. When you press rewrite, or use a tool such as translate or summarise, the text, the options you chose and our writing instructions are sent over an encrypted connection to the Google Gemini API, and the result is sent back to you. Google processes this content to produce the response under its Gemini API terms. We do not control how long Google keeps request data; please read Google's terms if this matters to you.

Because of this, please do not submit passwords, financial or medical records, or other highly sensitive personal information about yourself or anyone else.

Who processes data for us#

We use a small number of service providers, each only for the job described:

Railway hosts the application and its database in the United States.
Google provides the Gemini API that rewrites your text, and Google sign-in if you choose to use it.
Resend delivers our emails.
WhatsApp (Meta) carries the messages and receipts you send us there.

Our fonts, scripts and images are served from our own site, so a normal page visit does not contact other companies. Because our servers are in the United States, your information is stored and processed there, wherever you live.

How long we keep it#

Account details are kept while your account exists.
Documents and their versions stay in your account until you delete them. Deleting a document moves it to Trash, where you can restore it. Deleting it from Trash removes the document, all its versions and its ratings permanently.
Guest trial records are a hashed identifier and a word count. The cookie on your device expires after 30 days.
Visit counts are deleted after 13 months, and the daily key used to make them is deleted the next day.
Server logs are kept for a limited time by our hosting provider and are used only for security and troubleshooting.
Payment records and the history of plans and credits on an account are kept as long as we need them to answer questions about past payments.

Deleting your account. There is no self-service button yet. To delete your account, contact us from the email address on the account (or on WhatsApp, and we will confirm by email). We will delete the account, its documents, versions, ratings and saved styles promptly, and in any case within 30 days.

Cookies and browser storage#

We use only the cookies the service needs. There are no advertising or analytics cookies.

Name	What it does	How long
`humanprose-session`	Keeps you signed in and remembers form messages between pages.	Until two hours without activity
`XSRF-TOKEN`	Protects forms against cross-site request forgery.	Same as the session
`guest_device_id`	A random identifier that applies the guest trial limit.	30 days
`hp_admin_device`	Administrators only: remembers a trusted device for the two-step sign-in.	30 days

Your browser's local storage keeps a few interface preferences on your device: the language and theme you chose, announcements and tips you have dismissed or already seen, and, if you are not signed in, the writing styles you saved. This information stays in your browser and is not sent to us.

HumanProse can be installed as an app. A service worker stores copies of our styles, scripts, fonts, images and a small offline page on your device so the site loads faster and can show a message when you are offline. Pages with your account or documents are never stored this way. You can remove all of this at any time by clearing the site's data in your browser settings.

Security#

All connections to HumanProse are encrypted with HTTPS. Passwords are hashed, sign-in attempts and requests are rate limited, administrator sign-in requires a code sent by email, and only administrators can open the administration dashboard. No online service can promise perfect security, but we work to protect your information and will tell affected users if we learn of a breach that puts their data at risk.

Your choices and rights#

See and correct your details. You can change your name, email address and password on your account page.
Take your writing with you. You can copy any result, download a document as text, or export it as a Word file.
Delete. You can delete documents yourself, and ask us to delete your account as described above.
Unsubscribe. You can stop product emails with the link in each one.
Ask us. You can ask what information we hold about you, or object to how it is used. We will reply within 30 days.

Depending on where you live, you may have further rights under data protection law, including the right to complain to your local data protection authority. We will respect those rights.

Children#

HumanProse is not intended for children under 13, and we do not knowingly collect their information. If you are under 18, please use HumanProse only with permission from a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy#

If we change how HumanProse handles information, we will update this page and the "Last updated" date. If a change is significant, we will also tell signed-in users by email or with a notice on the site before it takes effect.

Contact us#

For any privacy question or request, message us on WhatsApp at +972 59 236 7313. Please do not send passwords or full payment card details in any message.