Privacy Policy

1. Who we are

iograf is operated by iograf Ltd ("we", "us", "our"). We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law. Our contact for data protection matters is: legal@iograf.com.

2. What data we collect

We collect the following categories of personal data:

• Account data: your email address and a nickname you choose during onboarding.
• Writing data: the text content you write in your sessions, including titles, locations, and dates you optionally attach to entries.
• AI interaction data: when you use the Professor feature, your writing is sent to Anthropic's Claude API. Anthropic processes this data according to their own privacy policy. We store the AI's response alongside your entry for your reference.
• Usage data: session activity timestamps and word counts, used solely to generate your personal progress statistics.
• Technical data: authentication tokens managed by Supabase (our database and authentication provider).

3. Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b) GDPR): to provide you with the iograf service, including saving your writing, generating progress statistics, and enabling AI feedback.
• Consent (Article 6(1)(a) GDPR): where you have explicitly agreed to our Terms and Conditions at signup.
• Legitimate interests (Article 6(1)(f) GDPR): to maintain the security and integrity of the service.

4. How we use your data

• To authenticate you and maintain your session.
• To store and retrieve your writing sessions.
• To send your writing to Anthropic's Claude API when you request Professor feedback.
• To display your personal writing statistics (word counts, session history, progress).
• To display finished entries on the community map, if you choose to make them visible.
• To respond to support requests or legal enquiries.

5. AI processing disclosure

iograf uses Anthropic's Claude API to power the Professor feature. When you request feedback, your writing text is transmitted to Anthropic's servers for processing. This constitutes a transfer of personal data to a third-party processor. Anthropic acts as a data processor on our behalf. We have entered into appropriate data processing agreements with Anthropic in accordance with Article 28 GDPR. Anthropic's privacy policy is available at anthropic.com/privacy.

In accordance with the EU AI Act (Regulation (EU) 2024/1689), Article 52, we disclose that the Professor feature is an AI system. The professor personas are fictional characters. You are interacting with an AI, not a human.

6. Data sharing and third parties

We do not sell your personal data. We share data only with:

• Supabase: our database and authentication provider. Supabase processes data on servers in the EU/EEA.
• Anthropic: for AI feedback processing, as described above.
• Legal authorities: where required by law or court order.

7. Community visibility

If you mark a writing session as "finished" and enable the visibility toggle, a summary of that entry (title, location, and excerpt) may appear on the public community map. You can disable this at any time from your session settings. Disabling visibility removes the entry from the community map immediately.

8. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all your data (sessions, iterations, AI interactions, profile) is deleted from our systems within 30 days. Authentication records held by Supabase may take longer to purge from their infrastructure.

9. Your rights

Under the GDPR, you have the following rights:

• Right of access: to request a copy of your personal data.
• Right to rectification: to correct inaccurate data.
• Right to erasure ("right to be forgotten"): to delete your account and all associated data. You can do this directly from the iograf application via the burger menu → Delete account.
• Right to data portability: to export your writing as .txt via the Export function in the app.
• Right to object: to processing based on legitimate interests.
• Right to lodge a complaint: with your national data protection authority.

To exercise any of these rights, contact us at legal@iograf.com.

10. Cookies

iograf uses only essential cookies for authentication purposes. We do not use tracking or advertising cookies. See our Cookie Policy for details.

11. Children

iograf is not intended for users under 16 years of age. By creating an account, you confirm that you are at least 16 years old. If we become aware that a user under 16 has created an account, we will delete the account promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email or by a prominent notice in the application. The date at the top of this page reflects the date of the most recent update.

13. Contact

For any data protection enquiries, contact us at legal@iograf.com.