In short
We never store your writing. Text you check, rewrite, or summarize is processed to give you a result and is not saved in our database or logs.
If you create an account, we keep only what's needed to run it: your name, email address, sign-in details, and a record of how many AI requests you've used. We don't sell personal information, show ads, or use analytics or advertising trackers.
Who we are
LucidGrammar is operated by , (). In this policy, "we" and "us" mean the operator, and "the service" means the LucidGrammar website, its account system, and the Proofread for Windows app.
For privacy questions or requests, use our contact form and choose "Privacy or data request".
Your writing
To give you results, your text has to be sent to the service that analyses it:
- Grammar and spelling checks are sent to LanguageTool. They don't use AI.
- Tone rewrites and summaries are the only features that use AI. Only the text you choose to rewrite or summarize (your selection, or the whole document if nothing is selected) is sent to an AI model provider, and only when you press Rewrite or Summarize.
Your text passes through our server on its way to these services. We don't save it, and it isn't recorded in usage records or activity logs. For each tone rewrite or summary, we record only which tone or summary format was chosen, the output language, the model used, the number of tokens processed, and the time. The providers handle your text under their own terms (see Who receives data).
The editor saves your current draft in your own browser so it's still there when you come back. That copy never leaves your device, and signing out removes it.
Please don't paste passwords, payment details, health information, or other sensitive personal information you don't want processed by these services.
Account information
You can use the editor without an account. If you create one, we collect:
| Information | Why we need it |
|---|---|
| Name and email address | To create and identify your account, and to send verification, password-reset, and security emails |
| Password | To sign you in. We store it only as a salted scrypt hash, never in readable form. |
| Google account ID, name, and email (only if you sign in with Google) | To sign you in with Google |
| Phone, address, city, country, postal code (optional) | Only if you choose to add them to your profile. You can leave them blank or remove them at any time. |
| Request allowance and usage records (tool, tone or format, language, model, token counts, estimated cost, time) | To apply your monthly AI request allowance and show you your usage |
| Account activity (sign-ins, failed sign-ins, and changes to your profile, email, password, or allowance) | To protect your account and help with support |
| Sign-in sessions (stored as secure hashes) | To keep you signed in on the website and in Proofread for Windows |
We use this information only to provide and secure the service. We don't send marketing emails.
Using it without an account
Visitors get a few free grammar sessions and AI requests. To count them, we set a cookie with a random identifier (lg_guest). We store only a hash of that identifier and the number of free uses. To limit abuse, we also count free sessions per IP address. Those counts are kept in server memory for up to 24 hours and aren't saved to our database. See the Cookie Policy for details.
Who receives data
We share data only with the service providers we need to run LucidGrammar:
| Provider | What they receive | Why |
|---|---|---|
| LanguageTool (LanguageTool GmbH, Germany) | Text you grammar-check | Grammar and spelling checking |
| AI model providers: we use one or more of OpenRouter (USA), Cerebras (USA), and DeepSeek (China) | Only the text you choose to rewrite or summarize | Tone rewrites and summaries |
| Google reCAPTCHA (USA) | Browser and device signals on the sign-in, registration, password-recovery, and contact forms | Protecting those forms from bots |
| Google Sign-In (USA) | The sign-in exchange, if you choose "Continue with Google" | Signing you in |
| Our email provider | Your email address and the emails we send you, plus messages you send through the contact form | Delivering account emails and answering you |
| Our hosting and database providers | Account information stored on our servers | Running the service |
We may also disclose information if the law requires it, or to protect the rights and safety of our users or the service.
How long we keep it
- Your writing: not kept.
- Account information, usage records, and activity: until you delete your account.
- Sign-in sessions: 7 days on the website, 90 days in Proofread for Windows, or until you sign out or change your password.
- Email links (verification, password reset): 1 hour, and usable only once.
- Guest usage counts: deleted after 1 year without use.
- Contact-form messages: not stored by the website. They are delivered by email, and we keep them only as long as needed to answer you.
When you delete your account, we remove your profile, sessions, activity, usage records, and allowance history. We keep a record that an account was deleted, without anything that identifies you. Our hosting provider may keep standard web server logs (such as IP address, time, and page requested) for a short period.
Security
All connections use HTTPS. Passwords are hashed with scrypt. Session, email, and sign-in tokens are stored only as hashes, and forms that change your account are protected against cross-site request forgery. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a serious breach where the law requires it.
Your choices and rights
- See and download your data: Account → Profile → Download my data.
- Correct it: Account → Profile.
- Delete it: Account → Profile → Delete your account. Deletion is immediate and permanent.
- Anything else: ask us through the contact form. We may need to confirm it's really you before acting on a request.
Depending on where you live, you may have further rights, such as objecting to or restricting some processing. You can also complain to the privacy regulator where you live. We'd appreciate the chance to resolve your concern first.
International transfers
Some of our providers are in other countries, including the USA, Germany, and China (see Who receives data). Their privacy laws may differ from where you live. We use these providers only to deliver the features you ask for.
Children
LucidGrammar is not intended for children under 16, and we don't knowingly create accounts for them. If you believe a child has given us personal information, please contact us and we will delete it.
Changes to this policy
If we make a significant change, we'll update the date at the top of this page and, where appropriate, let account holders know by email.
Contact us
Questions or requests: use our contact form, or write to , .