Mobile app privacy policy

The short version

The mobile app is a thin client for avoidaiwriting.com. The only information it sends to our servers is the data you type in: an email address (when you check or buy credits) and the text you ask us to audit. There is no analytics SDK, no advertising ID, no tracking pixel, no third-party data sharing.

Payments are handled by Stripe inside an in-app browser. Stripe receives your card details directly; the app never sees them.

What the app sends to our servers

• Email address. Sent to /api/credits when you check your credit balance, and to /api/checkout when you start a Stripe purchase. We store your email alongside your credit balance so we can refill it after a successful Stripe webhook.
• Audit text. Sent to /api/audit only when you press the audit button. We forward it to Anthropic's Claude API for analysis and return the result to your device. The full input and result are saved to your account history at avoidaiwriting.com/history so you can revisit past audits. You can delete individual audits or your entire history at any time from that page, and turn off audit saving for future audits via the account toggle there (per-audit override on the audit form). Storage is Vercel KV (Upstash), encrypted at rest. We do not run a scheduled purge — audits remain until you delete them or close your account.
• Stripe payment metadata. When a purchase succeeds, Stripe sends us a webhook containing your email, session ID, and credit pack purchased — no card details. We use this only to credit your account.

What the app stores on your device

• React component state held in memory while the app is open (current text, last result, current credit count). Nothing is written to persistent storage in v1.
• Standard Expo / React Native runtime caches managed by the OS. We do not write any app-controlled data to AsyncStorage or the keychain.

Permissions the app requests

• Network access. Granted by default on both platforms. Required to reach avoidaiwriting.com for audits, credit checks, and token supply data.
• iOS LSApplicationQueriesSchemes: phantom. Listed in the app's Info.plist so the app can detect and deep-link to the Phantom wallet app. In-app crypto burns are not enabled in this version; the entry is in place for a future release.

The app does not request location, contacts, camera, microphone, photos, calendar, notifications, or any other sensitive permission.

What we don't do

• No analytics, telemetry, or crash reporting that sees your content.
• No advertising identifiers (IDFA, GAID) collected.
• No third-party tracking SDKs.
• No data shared with brokers or ad networks.
• No accounts or sign-in required.
• Your text is not used to train any model — neither ours nor a third party's.

Children

The app is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact the email below and we will delete it.

Your rights

To request deletion of the email address and credit balance associated with your account, email support@fernwillowholdings.com from that address. We will process the request within 30 days.

Changes to this policy

If this policy changes, the updated version will be posted at this URL. Material changes that affect how user data is handled will be accompanied by a new version of the app shipped to the App Store and Google Play.

Last updated: May 3, 2026.

Data controller

The $avoid mobile app is published by Fernwillow Holdings LLC, a Washington limited liability company. Fernwillow Holdings LLC is the data controller for personal data the app collects.

Mailing address:
5729 Littlerock Rd SW Ste 107 PMB 252
Tumwater, WA 98512-7386
United States

Contact email: support@fernwillowholdings.com

Contact

Questions about the mobile app's data practices: email support@fernwillowholdings.com, reach out via @avoidaiwriting on X, or post in Telegram.