Privacy Policy

Plotscribe is operated by Robert Boyd (“we”, “us”). This policy covers the Plotscribe desktop app, the web app at app.plotscribe.app, the iPhone, iPad and Android apps, Sync, and this website.

• The desktop app works with no account. Worlds you don’t sync never leave your computer.
• An account is needed for Sync, the web app and the phone apps. We keep what it takes to run them: your email, name, sign-in details, the devices you’re signed in on, and your subscription status.
• Synced writing is encrypted before it is stored. Our servers decrypt it to sync it to your devices and collaborators, so this is not end-to-end encryption.
• We don’t sell your data, show ads in the apps, or send your writing to AI services.
• You can export your work at any time and delete your account from the app.

Account. Your email address, name, password (stored as a hash), whether your email is confirmed, and, if you use them, your Sign in with Apple or Google account identifiers. If you answer “how did you hear about us?” when signing up, we keep that answer.

Sessions and devices. For each sign-in we keep the IP address and user agent your device sent, the app and device name, and when it was created and last used, so you can see and sign out of each one in Settings. Sessions expire after 30 days without use.

Billing. Sync is sold through Stripe, which acts as the merchant of record and processes your payment details; we never see your card number. We keep your Stripe customer ID, your subscription’s status and, during a free trial, its start and end dates. If you subscribed through the App Store or Google Play, we keep the store’s transaction or purchase identifiers and the subscription’s status and expiry.

Your writing. When you sync a World, its chapters, characters, notes, plans, media, version history and live collaboration data are stored on our servers, encrypted with a key specific to that World. Our services decrypt them to provide Sync. Some metadata stays readable to us, such as which account owns a World, who belongs to a Workspace, timestamps and sizes.

Workspaces and invitations. The members of Workspaces you belong to, their roles, and the email addresses you invite.

Anonymous desktop usage counts. The desktop app sends at most two counts a day (that it was opened, and that you wrote) with its version, operating system, processor type and install month. It carries no account or device identifier, and we don’t store your IP address with it. It is on by default; turn off “Share anonymous usage counts” in Settings to stop it. The web and phone apps don’t send it.

Downloads and sign-ups. We count desktop downloads by platform and version, and sign-ups by the source you chose, with the country Cloudflare reports. These counts aren’t linked to you.

This website. plotscribe.app uses Google Analytics and the TikTok Pixel, which set cookies and collect information about your visit, such as pages viewed, device and browser details and approximate location, to measure our marketing. The apps don’t use them.

Email and support. Messages you send us, and the emails we send you: confirming your address, resetting your password, and Workspace invitations. We don’t send marketing email.

Worlds you don’t sync, local snapshots and record history, and the web pages you save to Notes stay on your device. Signing out of the desktop app never deletes your files. Signing out of the web app removes its copies from that browser; synced Worlds return when you sign in again.

• To run your account, sync your Worlds, and let you write with the people you invite.
• To bill Sync, including the free trial, and to stop a person getting more than one trial.
• To keep the service secure, for example by showing you where you’re signed in and verifying email addresses.
• To understand, in aggregate, how many people use and download Plotscribe.

• Cloudflare runs our servers, file storage and usage counts.
• PlanetScale hosts our database in the United States.
• Stripe sells and bills Sync as merchant of record.
• Resend sends our emails.
• Apple and Google, if you sign in with them or subscribed through their stores.
• Google Analytics and TikTok, on this website only.

Your data is stored and processed in the United States. We share it with nobody else, except when the law requires it.

• Your account and synced Worlds, until you delete them.
• Version history of synced writing, for one year.
• Anonymous usage counts, for three months.
• When you delete your account, your Worlds and media become inaccessible at once and are purged after 30 days. Your sessions, devices, memberships and invitations are deleted immediately.
• If you subscribed through the App Store or Google Play, we keep the store’s identifier and a one-way hash of your account ID for two years after the subscription ends, to handle refunds. Database backups expire on their own schedule.

• Export your work at any time, whether or not you subscribe.
• Delete your account in Settings in any of the apps. Deleting it cancels a Stripe subscription; cancel an App Store or Google Play subscription in that store.
• Sign out any session from Settings › Where you’re signed in.
• Turn off anonymous usage counts in the desktop app’s Settings, and block this website’s cookies in your browser.
• To access, correct or delete your data, or for any other privacy request, email support@plotscribe.app. Depending on where you live, you may also have the right to complain to a data protection authority.

Plotscribe isn’t intended for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, email us and we’ll delete it.

If we change this policy, we’ll update the date above, and we’ll tell account holders by email or in the app before a significant change takes effect.