Privacy

Polido rewrites text you are typing, so it has to see that text. This page says exactly what it sends, where it goes, what is kept, and what you can switch off. The short version: your text passes through to be rewritten and is not stored, unless you choose to share it.

Who we are

Polido is made by Volt Games, Lda., a company registered in Portugal, which is the controller of the data described here. Questions, requests and complaints go to hello@polido.app.

When you rewrite something

When you double-tap the hotkey, the app sends the text you are rewriting to our service, along with the conversation visible around the field where that helps (for example, the message you are replying to). Our service passes it to Anthropic, whose Claude models write the rewrite, and sends the rewrite back to your Mac.

• We do not store the text or the rewrite. It exists on our service only for the time it takes to answer.
• Anthropic processes it under its commercial terms, which do not allow it to train its models on this data. See Anthropic's privacy policy for how long it keeps requests.
• If you bought Lifetime, the rewrite runs on your own API key, from Anthropic, OpenAI or Google. The key is kept on your computer and sent to our service with each rewrite, used for that one call to that provider, and never stored or logged by us. With an OpenAI or Google key, the text goes to that provider instead of Anthropic, under your own agreement with it, and it bills you for that use.
• If you switch on reading attachments and give the app Screen Recording permission, a rewrite of an AI prompt can include a screenshot of the window around the field, so the rewrite can describe what you attached. This is off by default.

What the service keeps about your install

You do not need an account. The first time the app opens, it is given a random token, stored in your Mac’s keychain. Against that token (kept as a one-way hash), our service stores:

• how many rewrites you have used each month, and your plan or any credits you bought;
• when the app was first opened and when it first rewrote something, so we can tell whether new installs become useful (the first-opened date also decides founding membership);
• which days it was used — day only, never the time or what was written — kept for ninety days;
• a count of rewrites by outcome (finished, undone, failed), by which app they were in, and by kind (chat, email, document, prompt). Counts only, never text;
• if the app crashes, a short summary on its next launch: the error type, where in our code it happened, and the app and macOS versions. Never the crash report itself, and never anything you wrote.

To stop the free allowance being claimed over and over, the number of new installs from one network address each day is counted against a hash of that address, which expires after two days. The address itself is not stored.

Every few hours the app also asks our service whether there is a message for users, such as news of an update, and shows it once. The request carries nothing about you, and nothing is recorded about whether you saw it.

Your numbers, your rules and your writing profile

So that they follow you from one computer to another, and change when you log in to a different account, three things the app shows you are kept on our service: with your account when you are logged in, and with the install’s token when you are not. A copy stays on your computer so the app works offline.

• Counts of your rewrites, for Overview and Insights: per day, how many rewrites you made in each app (for a website in a browser, the site’s name too, such as “ChatGPT”), and how many words went in and came out. Numbers only, never the text of a draft or a rewrite.
• Your personal rules, exactly as you wrote them, with the app each one is for.
• Your writing profile, if learning is on: the description of how you write, the habits it has counted, the words it leaves alone, the tones you picked in each app and the changes it makes most often. Never your drafts: the recent drafts it learns from stay on your computer.

What you used before making an account moves into the first account you log in to on that computer, and into no other. Forget everything, under Your writing, deletes the profile and the counts from our service as well as from your computer; removing a rule deletes it from both. Deleting your account deletes all three with it.

Things you can switch on, and off

• Learn how I write. The app builds a profile of how you write — vocabulary, sentence length, spelling — and keeps it with your account, as described above. To build it, a batch of recent drafts is sent now and then to be summarised; they are not stored, and only the profile comes back. You can read it, or delete it, under Your writing.
• Share how your rewrites go. Adds word counts, the tone you chose, and how long a rewrite took to the counts above. Never text. Anything not yet sent is deleted when you switch it off.
• Help improve the rewrites. Off by default, and the only setting that sends your text to be kept: drafts you keep, with their rewrites, so future versions can be trained on real writing. Rewrites you undo are never sent. Switching it off deletes what you shared.

Payments

Payments are handled by Stripe, which collects your card, email and billing details under its own privacy policy. We receive and keep only what we need to honour the subscription: Stripe’s customer and subscription identifiers, the plan, the number of seats, and a hash of your licence key.

Your account, if you make one

Polido works without an account. You can make one, with your email address and a six-digit code we send to it, or with Google, in which case Google tells us your email address and your name and nothing else. We keep your address, your name if you give one, which of your computers are logged in, and a count of the people you invited and who joined. If your address is at a company’s own domain rather than a personal one like Gmail, we look at that domain to see which companies use Polido, and nothing about you is looked up anywhere else. We email you only when something happens that concerns you: your login code, a welcome when you make the account, a thank-you with your licence key when you subscribe, a note when a friend you invited joins, and one reminder before a month of Pro you earned runs out. Now and then we may also write about your use of Polido, for example to give you extra rewrites when you run out, or to tell you about something new; every one of those has a one-click Unsubscribe link, and after it you get only the emails above. Emails are sent through Resend. A login on this website lasts ninety days from its last use. When a friend installs through your link, their download and first launch are matched the way campaign links are, described below, and their computer is remembered by the same fingerprint the app already sends, so that one computer can join through an invite only once. Sign out at any time; to delete the account, write to hello@polido.app, and its counts, rules and writing profile are deleted with it.

Ads

When we advertise Polido on Meta (Facebook and Instagram), Google, TikTok or Reddit, the site asks whether it may use cookies to measure those ads. If you decline, nothing below happens. If you accept, the site loads those companies’ own scripts (the Meta Pixel, Google Analytics and the TikTok and Reddit Pixels), which set their cookies and see your visit and a click on Download. If you arrived from one of their ads, the ad’s click identifier and those cookies’ IDs are sent to our service with a salted hash of your network address, kept for three days, so the app’s first launch from the same network can be matched to the ad. When it is, our service tells that one company, directly, that the ad led to an install, to a first rewrite and to a payment with its amount, along with the click identifier, your network address and browser, and a one-way hash of the app’s install ID. Never your name, and never anything you wrote. The match is kept for ninety days. You can change your answer at any time with “Cookie settings” at the foot of every page.

One exception about your email. Polido runs on a computer, so a phone gets a “Send to my computer” form instead of a download. If you accepted the cookies and arrived from an ad, and you use that form, the company whose ad it was is told about it with a one-way hash (SHA-256) of your email address, never the address itself, and the hash is kept with the ad’s click for thirty days. If you then sign in to Polido on your computer with the same address, that hash is how the install is matched to the ad, and it’s sent with the install, first rewrite and payment events above. That company can only match the hash to an account it already has with the same address. If you declined the cookies, the form just emails you the link and nothing is shared.

The same applies on a computer. If you accepted the cookies, arrived from an ad, and make a new Polido account on this website within three days, the company whose ad it was is told that an account was made, with the same one-way hash of your email address and the ad’s click. Logging in to an account you already had is never reported.

“Send to my computer”

If you ask for the download link by email on your phone, we keep your address to send that email and one reminder the next day, if you haven’t opened the link by then. The address is deleted once the reminder goes, once you open the link on a computer, or after three days, whichever comes first. It isn’t added to the newsletter or used for anything else.

The newsletter

If you sign up to the newsletter or the launch waitlist on polido.app, we keep your email address, when you signed up, the page you signed up on, and the campaign code if you arrived through one of our campaign links. We use it for that and for nothing else. Entering your address is the sign-up: we send one email to say you are on the list, and every email we send has a one-click Unsubscribe link. You can also write to hello@polido.app. Once you unsubscribe we keep only your address, marked as unsubscribed, so that it is never emailed again. The emails are sent through Resend. The list is never shared or sold.

This website

The site uses no cookies and loads no advertising or analytics scripts unless you accept them (see “Ads” below). Page visits are counted by our own service: which page, the country (from the network), the kind of device, the name of the site that linked you here (such as “Google” or “reddit.com”, never the page or what you searched) or a link’s utm_source, and the name of your internet provider’s network (such as “Comcast”), which is how we tell automated traffic from people. Each is kept only as a daily count. To count visitors rather than visits, a hash of the network address and browser, salted and changed every day, is kept for two days; it cannot follow anyone from one day to the next. To know how many different people visited over several days, each visit also adds a few bits to a statistical summary (a HyperLogLog sketch); it holds no address and no identifier, and nobody can be traced through it. If you join the launch list, your email is kept to tell you about the launch and nothing else.

Some links to the site are campaign links, which we give to people who talk about Polido so we can tell which of them sent visitors. If you arrive through one, its short code is kept in your browser for thirty days and sent along when you download or buy. A download through such a link also leaves a salted hash of your network address for three days, so the app’s first launch from the same network can be counted against that link; the address itself is not stored. All that is ever recorded against a campaign is counts: clicks, downloads, installs, and payments with their amounts. Nothing about who you are.

Who else is involved

• Anthropic, which runs the models that write the rewrites (United States).
• OpenAI or Google, only if you bought Lifetime and use their API key: your rewrites go to them on your key, under your agreement with them (United States).
• Cloudflare, which runs our service and its storage.
• Stripe, for payments.
• Resend, which sends our emails (United States).
• Google, if you choose to log in with Google.
• Netlify, which hosts this website.

Where these providers process data outside the European Economic Area, they do so under the European Commission’s standard contractual clauses or an equivalent safeguard. We do not sell data, and we do not share it with anyone else.

Why we are allowed to

Rewriting your text, counting your allowance and handling your subscription are what you asked for, so we rely on performing our contract with you. Preventing abuse of the free allowance, counting outcomes and crashes to keep the product working, and counting site visits rely on our legitimate interest in running a reliable service, and none of them involves your text. The switches above rely on your consent, which you withdraw by switching them off.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Some of it you can delete yourself: Forget everything under Your writing removes the profile and the counts of your rewrites, on your computer and on our service, and removing a rule removes it from both. For anything else the service holds, email us. On a paid plan, include your licence key so we can find it; a free install is known to us only by a random token we cannot connect to you. You can also complain to the Portuguese data protection authority, the CNPD.

Children

Polido is not meant for anyone under 16.

Changes

If this changes in a way that matters — something new is sent, or something is kept that was not — we will say so in the app’s release notes before it takes effect, and update the date at the top of this page.