Privacy Policy
Last updated: October 3, 2026
This Privacy Policy explains how Rectifyl ("Rectifyl", "we", "us") collects, uses and protects your information when you use the Rectifyl website at https://rectifyl.com and the Rectifyl mobile app (together, the "Service"). Rectifyl is built and operated by KHAIMA.
Questions or requests: contact@rectifyl.com.
1. Summary
- We collect only what the Service needs: your Google account identity, the texts you ask us to correct, and your learning data.
- We never sell your data, show you ads, or share your writing with other users.
- To correct a text, we send only the text and its language settings to an AI service provider. Your name and email are never sent.
- You can delete any text, or your whole account and all of its data, at any time.
2. Information we collect
| Category | What | Why |
|---|---|---|
| Account | Your Google account's unique identifier, email address, display name and profile picture URL, received when you sign in with Google. | To create your account and sign you in. |
| Preferences | Interface language, theme, the languages you are learning and the language for explanations. | To provide the Service in the way you choose. |
| Your texts | The texts you submit for correction, the corrected versions and the explanations of each change. | To correct your writing and keep your history, which you can review, export or delete. |
| Learning data | Mistake patterns derived from your corrections, practice cards and review progress, course progress and deck subscriptions. | To help you learn from your mistakes. |
| Points | Your points balance and a record of points granted and used. | To run the points system and show you what each correction cost. |
| Technical and usage data | Request logs and, for each correction, operational data such as time, duration, number of AI tokens used and whether it succeeded. These records do not contain your texts. | To operate, secure and improve the Service, prevent abuse and control costs. |
We do not collect your contacts, location, photos, files, microphone or camera data, and we do not use advertising identifiers.
3. How we use your information
- To provide the Service: correcting texts, keeping your history, generating practice from your mistakes, and managing your points.
- To keep the Service secure and reliable: authentication, abuse and fraud prevention, rate limiting and troubleshooting.
- To communicate with you when you contact us.
- To meet legal obligations.
We do not use your texts to train AI models, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. AI processing
When you request a correction, the text, the target language (and variant) and the explanation language are sent to an AI service provider, currently OpenAI, to produce the correction. No account information is included. AI providers process this data on our behalf; according to their API terms, data sent through their APIs is not used to train their models by default. The administrators of the Service can change the AI provider; any provider used is bound by equivalent terms.
5. Service providers
We use the following providers to run the Service. They process data only on our instructions.
- Google Firebase (Google LLC): sign-in (Firebase Authentication) and database storage (Cloud Firestore).
- Railway (Railway Corp.): application hosting.
- OpenAI (OpenAI, L.L.C.): text correction, as described above.
We may disclose information if required by law, or to protect the rights, safety and security of our users and the Service. If Rectifyl is involved in a merger or acquisition, your information may be transferred under this Policy.
6. Retention
- Your account data, texts and learning data are kept until you delete them or delete your account.
- When you delete a text, it is removed together with the mistake examples and practice cards created from it.
- When you delete your account, all of its data is deleted, your Firebase sign-in account is removed, and operational records are anonymized. A record that a deletion took place is kept for accountability.
- Server logs are kept for a limited period for security and troubleshooting.
See the Data Deletion Policy for details.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. In the Service you can at any time:
- Export all your data (website: Settings → Download my data).
- Delete individual texts (History) or your entire account (Settings → Delete my account).
- Change your preferences and learning languages.
For any other request, email contact@rectifyl.com. You may also have the right to complain to your local data protection authority.
8. Cookies and local storage
The website uses a single essential cookie, __session, to keep you signed in and remember your theme and language, and to protect forms against cross-site request forgery. The Google sign-in library stores sign-in state in your browser's storage. We do not use analytics, advertising or tracking cookies. The mobile app stores your sign-in state on your device.
9. Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Database access is restricted to our backend; apps and browsers cannot read the database directly. Access to administration tools is limited and logged. No system is perfectly secure, but we work to protect your information and will notify you of a breach as required by law.
10. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
11. Children
The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it.
12. Changes
We may update this Policy. We will change the "Last updated" date and, for significant changes, notify you in the Service.
13. Contact
Rectifyl, operated by KHAIMA. Email: contact@rectifyl.com.