1. Introduction

Welcome to Twik ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Twik – AI Writing Companion (the "App"). 

By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our App.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we collect:

- Email address (from your Google account)

- Name (from your Google account)

- Profile picture (from your Google account)

- User ID (unique identifier created by our authentication system)

How it's collected: Through Google Sign-In OAuth integration with Supabase Authentication.

Purpose: To create and manage your account, authenticate your identity, and personalize your experience.

2.2 Subscription and Payment Information

When you purchase a premium subscription through Google Play Billing, we collect:

- Purchase token (unique identifier from Google Play for your purchase)

- Product ID (which subscription plan you selected: monthly, 6-month, or yearly)

- Order ID (Google Play transaction identifier)

- Subscription status (active, cancelled, expired, grace_period, on_hold, paused, revoked)

- Subscription dates (start date, end date, trial end date if applicable)

- Auto-renewal status (whether your subscription automatically renews)

- Trial usage status (whether you've used a free trial)

How it's collected: Automatically when you complete a purchase through Google Play, and through real-time notifications from Google Play about subscription changes.

Purpose: To manage your subscription, provide premium features, process renewals, and handle cancellations.

2.3 Text Data for Grammar Correction

What we collect:

- Text content you explicitly submit for grammar correction

- Selected tone preference (General, Professional, Sarcastic, Gen Z, etc.) - Premium feature

When we collect it:

- ONLY when you explicitly request grammar assistance by:

  1. Adding "#" to the end of your text, AND

  2. Tapping the floating correction button that appears

Important: We do NOT automatically collect or monitor your typing in other apps. Text is only processed when you explicitly trigger a correction request.

Purpose: To provide AI-powered grammar correction and text improvement suggestions.

2.4 Usage and Analytics Data

We collect the following usage information:

- Daily API usage count (number of grammar corrections per day for free tier users)

- API usage logs including:

  - Which endpoint was called (e.g., grammar-check)

  - Tone selected (if premium user)

  - Character count of text processed

  - Whether you were a premium user at the time

  - Timestamp of the request

- App version and device information (Android version, device model) for compatibility and bug fixes

- Basic app usage statistics (features used, errors encountered) to improve functionality

Purpose: To enforce rate limits for free users, monitor service costs, improve app performance, and fix bugs.

2.5 App Settings and Preferences

- Your app configuration settings

- Tone preferences (for premium users)

- Accessibility service preferences

- Battery optimization settings

Purpose: To remember your preferences and provide a personalized experience.

3. How We Use Your Information

3.1 Core App Functionality

- Authentication: To identify you, maintain your account, and keep your settings synchronized

- Grammar Correction: To send your text to AI services for processing when you request it

- Subscription Management: To verify your premium status, unlock premium features, and manage subscription lifecycle

- Rate Limiting: To enforce daily limits for free tier users (10 corrections per day)

3.2 AI Processing

Free Tier Users:

- Your text is sent to Google's Gemini 2.0 Flash Lite API for grammar correction

- Limited to 10 corrections per day

- Only "General" tone available

Premium Users:

- Your text is sent to OpenAI's GPT-4o-mini API for grammar correction

- Unlimited corrections

- All tone options available (General, Professional, Sarcastic, Gen Z, etc.)

Processing Details:

- Text is sent securely over HTTPS

- Text is processed in real-time and not stored by the AI services beyond their standard processing

- We do not send your text to both services simultaneously

 3.3 Service Improvement

- Analyze app performance and identify bugs

- Understand feature usage to improve the app

- Monitor API costs and optimize service delivery

- Provide customer support when you contact us

3.4 Legal and Security

- Comply with legal obligations

- Prevent fraud and abuse

- Enforce our terms of service

- Protect user safety and security

4. Third-Party Services and Data Sharing

4.1 Google Services

Google Sign-In:

- Used for secure authentication via OAuth

- Google processes your authentication according to their privacy policy: https://policies.google.com/privacy

Google Play Billing:

- Processes subscription purchases and payments

- Sends real-time notifications about subscription changes (renewals, cancellations, etc.)

- Google Play's privacy policy applies: https://policies.google.com/privacy

Google Gemini API (Free Users):

- Processes your text for grammar correction when you request it

- Google's data processing terms apply: https://policies.google.com/privacy

4.2 OpenAI (Premium Users)

OpenAI GPT-4o-mini API:

- Processes your text for grammar correction when you request it (premium users only)

- OpenAI's privacy policy applies: https://openai.com/policies/privacy-policy

4.3 Supabase (Backend Services)

Supabase provides:

- User authentication and account management

- Secure cloud database for storing your profile, subscription, and usage data

- Edge Functions that process grammar correction requests and verify subscriptions

- Infrastructure and security for our backend services

Data Storage:

- Your account information, subscription data, and usage logs are stored in Supabase's secure cloud infrastructure

- Supabase's privacy policy applies: https://supabase.com/privacy

4.4 No Sale of Personal Data

We do NOT:

- Sell your personal information to third parties

- Trade or rent your data

- Share your text content with advertisers

- Use your data for marketing purposes beyond our own app improvements

4.5 Data Sharing Exceptions

We may share your information only in these limited circumstances:

- Legal Requirements: If required by law, court order, or government regulation

- Service Providers: With trusted service providers (Supabase, Google, OpenAI) who help us operate the app, subject to strict confidentiality agreements

- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

- Protection of Rights: To protect our rights, property, or safety, or that of our users

5. Data Security

5.1 Encryption

- In Transit: All communications with our servers and third-party services use HTTPS/TLS encryption

- At Rest: Sensitive data stored in Supabase is encrypted using industry-standard encryption

- API Keys: Stored securely in Supabase Edge Functions environment variables, never exposed to client apps

5.2 Access Control

- Authentication Required: All API requests require valid user authentication

- Row-Level Security: Database uses Row-Level Security (RLS) policies so users can only access their own data

- Service Account Security: Google Play verification uses secure service account credentials stored in encrypted environment variables

5.3 Data Minimization

- We only collect data necessary for app functionality

- Text is only processed when you explicitly request it

- Usage logs contain minimal necessary information (endpoint, tone, character count, timestamp)

- No background monitoring or automatic data collection

5.4 Security Measures

- Regular security audits of our backend infrastructure

- Secure coding practices and input validation

- Rate limiting to prevent abuse

- Monitoring for suspicious activity

6. Your Privacy Rights

 6.1 Access Your Data

You can:

- View your profile information in the app settings

- See your subscription status and details in the app

- Check your daily usage count (free tier users)

6.2 Control Your Data
You can:

- Sign Out: Disconnect your Google account from the app

- Delete Account: Contact us to request account deletion

- Manage Subscription: Cancel or modify your subscription through Google Play Store settings

- Revoke Permissions: Disable accessibility service or overlay permissions in Android settings

6.3 Data Portability

- Your Google account data remains under Google's control

- Your subscription data is stored in Supabase and accessible through the app

- App settings can be backed up through Android's backup services

- Contact us if you need a copy of your data in a portable format

6.4 Deletion Rights

Local Data:

- Uninstalling the app removes all locally stored data from your device

Server Data:

- Contact us at twikappai@gmail.com to request deletion of:

  - User profile data

  - Subscription records

  - API usage logs

  - Authentication records

Retention Exceptions:

- Some data may be retained for legal compliance (e.g., transaction records for accounting)

- Subscription data may be retained to prevent fraud and handle refunds

- Anonymized usage statistics may be retained for service improvement

- We will anonymize data where possible if full deletion is not feasible

7. Accessibility Service Usage

7.1 Why We Use It

Our app uses Android's Accessibility Service to:

- Detect trigger character: Monitor when you type "#" at the end of text to show the correction button

- Display floating button: Show the grammar correction button overlay on your screen

- Replace text: Insert corrected text when you select a suggestion

7.2 What We Monitor

- Text input fields: We only monitor text when you're actively typing in input fields

- Trigger detection: We look for the "#" character at the end of text to show the button

- No background monitoring: We do not monitor or store text unless you explicitly request correction

 7.3 Data Protection

- Local processing: Text detection and trigger recognition happen locally on your device

- No automatic collection: Text is never automatically sent to our servers

- Explicit consent: Text is only processed when you tap the correction button after typing "#"

- No storage: We do not store or log the text you type unless you request correction

 7.4 Required Permissions

The app requires these Android permissions:

- Accessibility Service: To detect text input and show the correction interface

- Display over other apps: To show the floating correction button

- Internet access: To communicate with grammar correction services

- Battery optimization exemption: To keep the service running for quick access

You can revoke these permissions at any time in Android Settings, which will disable the app's functionality.

8. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at twikappai@gmail.com, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including:

- United States: Where Supabase, Google, and OpenAI operate their services

- European Union: Where Supabase may operate data centers

- Other regions: Where our service providers have infrastructure

These countries may have different data protection laws than your jurisdiction. We ensure that:

- Service providers (Supabase, Google, OpenAI) comply with applicable data protection regulations

- Data transfers are protected by appropriate safeguards

- We comply with GDPR, CCPA, and other applicable privacy laws

10. Data Retention

 10.1 Account Data

- Active accounts: Retained while your account is active

- Deleted accounts: Deleted within 14 days of account deletion request, except where legal retention is required

10.2 Subscription Data

- Active subscriptions: Retained for the duration of your subscription

- Cancelled subscriptions: Retained for up to 7 years for accounting and legal compliance

- Purchase tokens: Retained to prevent fraud and handle refunds

10.3 Usage Logs

- API usage logs: Retained for up to 90 days for cost monitoring and debugging

- Analytics data: Aggregated and anonymized data may be retained longer for service improvement

10.4 Text Data

- Submitted text: Not stored on our servers after processing

- AI services: Subject to Google's and OpenAI's respective data retention policies:

  - Google Gemini: https://policies.google.com/privacy

  - OpenAI: https://openai.com/policies/privacy-policy

10.5 Legal Requirements

Some data may be retained longer if required by:

- Law enforcement investigations

- Legal proceedings

- Regulatory compliance

- Fraud prevention

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

- In-App Notice: Posting a prominent notice in the app

- Email Notification: Sending an email to your registered email address (for significant changes)

- Updated Date: Updating the "Last Updated" date at the top of this policy

Continued Use: Your continued use of the App after changes become effective constitutes acceptance of the updated policy.

Material Changes: For material changes (e.g., new data collection, new third-party sharing), we will provide at least 30 days' notice before changes take effect.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: twikappai@gmail.com  

Support Email: contact.twikapp@gmail.com

Response Time: We aim to respond to privacy inquiries within 30 days.

 13. Compliance

This Privacy Policy is designed to comply with:

- Google Play Store Privacy Policy Requirements

- Android App Privacy Requirements

- General Data Protection Regulation (GDPR) - European Union

- California Consumer Privacy Act (CCPA) - California, USA

- Children's Online Privacy Protection Act (COPPA) - United States

- Other applicable regional privacy laws

 14. Your Consent

By using our App, you consent to:

- The collection and use of information as described in this Privacy Policy

- The processing of your text by AI services (Gemini for free users, OpenAI for premium users) when you request grammar correction

- The storage of your data in Supabase's cloud infrastructure

- The receipt of real-time subscription notifications from Google Play

Withdrawal of Consent: You can withdraw consent at any time by:

- Uninstalling the app (removes local data)

- Contacting us to delete your account (removes server data)

- Revoking app permissions in Android Settings

Note: Withdrawing consent may limit or disable app functionality.

Contact : twikappai@gmail.com

Last Updated: 15 Nov 2025