Privacy Policy

1. Scope and the short version

This policy covers the NeoWriter apps for iPhone, iPad, and Mac, including their optional integrations, and support communications with Genjux, the independent developer publishing under the GenjuxApps name.

Not operating a data-collection backend is different from saying that no data is ever processed outside your device. Apple, your chosen cloud or AI providers, recipients of exports, and the email service used for support may process data when you use those services.

This website stores your selected site language locally in your browser under genjuxapps.locale. The preference is not separately sent or used for analytics or tracking; no separate analytics or preference upload is introduced. Ordinary requests for /zh/... pages naturally disclose the requested URL to the hosting provider. This website preference is separate from NeoWriter's native-app data and settings.

2. What stays on your device

NeoWriter stores your writing, images, organization, and writing history on your device as workspace files. Local indexes and preferences help the app display and edit that content. Appearance settings, such as themes, typography, and imported fonts, stay on each device.

Cloud account credentials, WebDAV passwords, and AI API keys are kept in the device's Keychain and used to authenticate with the service you configure. They are not sent through a NeoWriter-operated proxy.

Sync encryption protects what is transmitted; it does not encrypt the workspace files on your device. Your device's data protection and backup settings are separate from NeoWriter's sync encryption.

3. Optional sync and cloud accounts

You can write without enabling sync. If you enable workspace sync, you choose iCloud, Dropbox, OneDrive, or a configured HTTPS WebDAV server as the destination. NeoWriter seals writing-history packs, announcements, and image contents before sending them. Account recovery and workspace-key envelopes also travel to the selected destination so that another device can recover access.

Encryption does not hide everything about these transfers. The destination can observe account and authentication information, object identifiers, sizes, network information, and request timing. The provider or server operator handles that information under its own practices. Enabling sync can authorize later automatic transfers; it is not a prompt for every upload.

Cloud-drive sign-in uses the provider's own authentication service; NeoWriter keeps the credentials needed for an authorized connection in Keychain. WebDAV uses the server, folder, and credentials you configure. Do not enter credentials for a server you do not trust.

Your account recovery key covers all workspaces in that account. Keep it somewhere you can access without this device. Replacing a recovery key does not revoke earlier recovery keys. A recovery key is not a promise that every lost or deleted item can be recovered. We do not hold a developer key that can recover your encrypted content.

4. Optional AI and what is sent

Writing does not require AI. On-device AI and external AI are different processing modes.

On device: where available, the on-device writing assistant uses Apple's on-device language model, which processes that request's text on your device without sending it to an external AI provider. It is distinct from AI with your own key and from model or language-resource downloads. Device, operating-system, language, and model availability can limit these features. Apple's separate Writing Tools may use Private Cloud Compute and are covered by Apple's disclosures.

External AI: when you use AI with your own API key, the selected provider receives the readable source text and instructions disclosed for that request, the selected model, and the credential needed to process it. Configurable providers include Anthropic, OpenAI, DeepSeek, OpenRouter, Grok, Google AI Studio, and a custom OpenAI-compatible endpoint; a custom endpoint's operator is a recipient too.

These requests go directly to the configured recipient, not through a NeoWriter AI proxy. They are separate from encrypted workspace sync: the provider needs readable input to respond. It can associate traffic with your account or API key and see network and request information. Its retention and use of requests are governed by its own terms and settings, not by NeoWriter's sync controls.

API keys are kept in device-only Keychain storage. Review the destination and the displayed request scope before sending sensitive text, and use a restricted, revocable key where your provider supports one. Disabling sync does not disable external AI requests, and cancelling a request cannot retract what a provider has already received.

5. Device services and imported content

Photo selection lets you choose images for the app. Text recognition uses Apple's Vision framework on the selected image. Read-aloud passes the text to Apple's speech synthesizer. Translation uses Apple's installed-language Translation service.

Imported images and text become part of your workspace; they can then be included in sync, exports, or an AI request whose disclosed scope includes them. Choosing local processing does not make later transfers private by itself.

NeoWriter does not include advertising or third-party analytics trackers. System features, permissions, and services are governed by your device settings and Apple's disclosures; using an operating-system service is distinct from uploading a report to the developer.

6. Exporting, sharing, and Mac capture

An export creates a file from the content you choose. Document exports can include images; a workspace export can contain more than a single document. The system share menu lets you choose a recipient or destination. Exported files are not protected by NeoWriter's sync encryption merely because the source workspace uses it; the app or service you share with handles the exported copy under its own practices.

On Mac, Quick Capture and Services create local workspace content from what you enter or select. Those actions do not themselves send it to an external service; the resulting content can later follow the sync, export, or AI routes described above.

7. Apple purchases

NeoWriter is not yet listed on the App Store as of this policy's date. This section explains the purchase integration when purchases are offered through Apple; it is not an announcement of availability or pricing.

Apple processes in-app purchases through StoreKit. NeoWriter uses verified transaction and entitlement information to enable purchased features, including the free trial, and to restore purchases. The developer does not receive your payment-card details through this flow. Apple's handling of purchase and billing information is separate from the app's local entitlement handling.

8. Diagnostics and support

NeoWriter contains local diagnostic logging for failures and operations. The operating system may also handle diagnostic information according to your device settings.

On Mac, Report a Bug lets you preview a message, device and app details, a local diagnostics log, and available MetricKit reports. Sending or sharing the report is your choice; this flow does not upload it to the developer automatically. The mail app or sharing destination receives the report when you choose to send or share it.

If you choose to email support, we receive your sender address, message, and any screenshots, diagnostic files, or other attachments you include. We use that information to respond, investigate the issue you reported, and handle related follow-up. Email is processed and stored by the developer's email provider and mailbox.

Send only what is needed. Avoid including private writing, recovery keys, API keys, or cloud credentials. A public issue is visible to others and is not a private support channel. See Support for a minimal report checklist.

9. Retention and deletion

Different copies need to be managed separately:

• Writing history and Trash: these retain earlier or deleted content for recovery. Removing a document from the current view is not a promise that every historical or remote copy is erased immediately.
• Deleting the app: this does not by itself delete copies on other devices, cloud destinations, exported files, or information already sent to an AI provider, and it is not a promise that Keychain credentials or device backups are erased. On Mac, the app's container data may remain on the computer.
• iCloud: NeoWriter's private CloudKit records are distinct from ordinary iCloud Drive files. Deleting an iCloud Drive folder should not be treated as deletion of that CloudKit data. Use the appropriate app-specific iCloud storage controls where available, or contact support for guidance.
• Dropbox, OneDrive, WebDAV, and exports: remove unwanted copies at their actual destinations, considering their retention and recovery settings.
• External AI requests: copies or logs already held by a provider are governed by that provider's retention and deletion options.

Support correspondence is kept for handling your request and related follow-up, subject to applicable record-retention obligations. You may ask us to delete correspondence we hold; we will explain any information that must be retained. Provider-managed backups and retention are subject to the email service's policies.

We do not sell support information or use it for advertising. Disclosure may be necessary to the email service that handles the correspondence, to respond to a legal obligation, or to establish or defend a legal claim.

10. Choices and privacy requests

You can write on your device without enabling external AI or sync. You can change or disable integrations and decide whether to send a support report. Changing these settings does not automatically erase copies already delivered to another destination.

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of personal information. Contact [email protected] about information held in support correspondence. We may need proportionate information to identify the relevant request, but do not send unrelated identity documents or secrets unless a necessary, appropriate process has been agreed.

We cannot independently access or erase your private cloud account or an AI provider's records. Requests about those services may need to be made to the relevant provider. Depending on your location, you may also have a right to complain to the relevant privacy authority.

11. Age ratings and external services

No App Store age rating has been confirmed for NeoWriter, which has not yet been listed. External AI providers and other services may impose their own age and account requirements.

If you are a parent or guardian and believe a child has provided personal information through support, contact us so the request can be handled under applicable law. Chosen external services may process data in different countries; review their data-region and transfer terms before sharing material.

12. Changes and contact

We will update the date on this page when the policy changes. Where required, material changes will be accompanied by appropriate notice or consent. A website policy update does not itself grant permission for a new external AI destination or broader text scope.

For questions or privacy requests, email [email protected]. Read the Terms of Use for information about using the app and third-party services.