Fineword Privacy Policy

Last updated: 11 November 2026

Fineword is a macOS app that rewrites what you type, and what your AI tools send under your name, into shorter and clearer messages. This policy explains what personal data Fineword handles, why, who receives it, and what you can do about it. It covers the Fineword app, the Fineword service at api.fineword.ai, and the website at fineword.ai.

1. Who we are

Fineword is provided by June AI Apps LTD, a company incorporated in Israel ("we", "us"). We are the controller of the personal data described here.

• Registered address: [REGISTERED ADDRESS]
• Company number: [COMPANY NUMBER]
• Privacy and support contact: support@fineword.ai
• Data protection officer: [DATA PROTECTION OFFICER NAME AND CONTACT, OR "NOT APPOINTED"]
• EU representative (GDPR Article 27): [EU REPRESENTATIVE NAME AND ADDRESS]
• UK representative (UK GDPR Article 27): [UK REPRESENTATIVE NAME AND ADDRESS]

2. The short version

• Fineword reads only the text field you are typing in, and only in apps you have not excluded.
• The text being reviewed is sent for a rewrite. We do not store it, log it, or use it to train AI models.
• Your text passes through our servers on its way to the AI model and is discarded when the rewrite finishes.
• We do not sell personal data, show ads, or track you across sites.

3. What the Accessibility permission lets Fineword read

Fineword needs the macOS Accessibility permission. macOS grants that permission broadly: an app that holds it can read and change the contents of other apps' windows. Fineword uses it for these things only:

• Reading the focused text field. Fineword reads the text field that has keyboard focus in the frontmost app, its selection, and its position on screen (to place the suggestion next to it). If you have selected text, only the selection is reviewed.
• Identifying the app. Fineword reads the name and bundle identifier of the frontmost app, to apply your exclusions and to tell the AI model where the text is being written (for example "Slack").
• Writing the rewrite back. When you accept a suggestion, Fineword replaces your text in the field. If an app does not allow that, Fineword pastes the rewrite through the clipboard and then restores what the clipboard held; if the app does not confirm the paste, the rewrite is left on the clipboard for you to paste.

Fineword does not read:

• password fields or search fields;
• any app on your exclusion list (terminals, code editors and password managers are excluded by default, and you can add others in Settings);
• anything outside the focused text field, such as the rest of a conversation, other windows or your files;
• anything at all while it is paused or turned off.

Text longer than 1,000 words or 8,000 characters is not sent.

You can withdraw the permission at any time in System Settings › Privacy & Security › Accessibility. Fineword then stops reading and rewriting text.

4. What data we process

4.1 The text you write and the rewrites

What is sent. When Fineword reviews text, it sends: the text being reviewed, the name of the app it was written in, whether it is a message or a prompt to an AI app, and the phrases in it that Fineword flagged as reading like AI.

Secrets are held back. Before text leaves your Mac, Fineword replaces secrets it recognises with placeholders and restores them in the rewrite on your Mac. It recognises them by fixed patterns: private key blocks, passwords inside URLs, values after labels such as "password:" or "API key =", bearer tokens, and tokens with well-known prefixes. This is pattern matching, not a guarantee: a password written in an ordinary sentence is not recognised.

Where it goes. The request goes to our servers, which forward it to the AI model and stream the rewrite back. The phrases that read like AI are detected on your Mac and again on our servers. The text and the rewrite exist on our servers only in memory while the request runs. We do not write them to a database, a log, an analytics system or an error report.

Messages your AI tools send. If you turn on Fineword for an AI tool (such as Claude Code, Cursor, Claude Desktop or VS Code), messages that tool sends through a supported Slack or email connector pass through Fineword on your Mac first and are rewritten the same way. Links, mentions and code are replaced with placeholders before the rewrite and restored afterwards.

Other people's data in your text. Your messages may contain personal data about other people, such as names or the content of a conversation. We process it only as part of the text, to produce the rewrite, on the same terms as the rest of the text. You are responsible for having the right to share it.

4.2 Data kept on your Mac only

The following stays on your Mac and is not sent to us:

• Settings: your preferences, excluded apps, and which AI tools are turned on.
• Typing rhythm: the time gaps between your recent edits, used to decide when you have paused. No text is kept.
• Fingerprints of recent rewrites: a one-way hash of each of the last 50 rewrites Fineword wrote, so it does not review its own work again. The text cannot be read from the hash.
• Recent AI messages: the last 100 messages your AI tools sent through Fineword, with the original and the sent text, in ~/Library/Application Support/Fineword/agent-messages.json. You can clear this list in Settings.
• Usage counters: how many suggestions were shown and accepted, and how many words were saved. You can reset them in Settings.
• Your sign-in session, stored in the macOS Keychain.
• Backups of AI tool configuration files that Fineword changed when you turned a tool on, in ~/Library/Application Support/Fineword/config-backups.
• Diagnostic entries in the macOS system log, which record technical events (app identifiers, text lengths, error codes), never text.

The app contains no analytics, advertising or crash-reporting software.

4.3 Account data

If you create a Fineword account, we process:

• your email address;
• your name and profile picture link, if the sign-in provider (Apple or Google) supplies them;
• an identifier linking your account to your Apple or Google sign-in, and the tokens those providers issue to us at sign-in;
• one-time sign-in codes (stored hashed) when you sign in by email;
• your sessions, each with the IP address and browser or app identifier it was created from;
• your trial start and end dates;
• a one-way hash of your email address, used to give each email address one free trial.

4.4 Subscription and payment data

Payments are handled by our payment provider, which acts as the merchant of record: it sells you the subscription, collects payment and handles tax. We send it your email address and your Fineword account ID to open a checkout. It sends us your customer and subscription identifiers, your plan, the subscription's status, the end of the current billing period and whether it is set to cancel.

We never receive or store your card number or other payment credentials. The payment provider processes your payment details as an independent controller under its own privacy policy, which is shown at checkout.

4.5 Usage and diagnostic data from the service

When you use a Fineword account, our servers record, for each rewrite: your account ID, whether the text was a message or a prompt, whether it was typed or sent by an AI tool, the outcome (rewritten, already clear, error, cancelled), timings, token counts, estimated cost, the word count of the text, and which AI provider answered. We also keep daily totals per account to apply daily limits. None of this includes the text, the rewrite or the app name.

Every request to our servers produces a log line with a request ID, the method, the path, the status and the duration. Our infrastructure provider also processes your IP address to route requests and protect the service. We use IP addresses and email addresses in short-lived counters that limit sign-in attempts. The app sends its version number with each request.

If our servers hit an unexpected error, a technical error report is sent to our error-monitoring provider. Reports exclude request bodies, query strings, cookies, credentials, account details and all AI inputs and outputs; they can include technical request metadata such as the URL path and network headers.

4.6 Emails

We send service emails only: sign-in codes, a notice that your trial is ending, a notice that a payment failed, and a confirmation that your account was deleted. We do not send marketing email.

If you email us, we keep your message and address to answer you.

4.7 Website data

The website fineword.ai sets no cookies and contains no advertising or analytics scripts. Our hosting provider processes your IP address and browser details to deliver and protect the site. The site loads its fonts from Google Fonts, so your browser connects to Google and Google receives your IP address.

The sign-in pages at api.fineword.ai use strictly necessary cookies that last for the sign-in only, and a bot check (Cloudflare Turnstile) that examines browser signals to tell people from automated traffic.

5. Why we process data, and our legal bases

We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not build advertising profiles.

You are not under a legal duty to give us personal data. Providing it is your choice, but Fineword cannot rewrite text it does not receive, and the Fineword service needs an account.

6. Who receives personal data

We share personal data only with the providers that help us run Fineword, and only what each one needs.

Anthropic and Amazon Web Services handle your text under their own commercial terms and privacy policies, which govern how long they keep it and how they may use it.

We may also disclose data when the law requires it, to establish or defend legal claims, or to a successor if our business is sold or merged, in which case this policy continues to apply to your data.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

7. International transfers

We are based in Israel, and our providers operate in the United States and other countries. Your data is therefore processed outside your own country.

Israel is covered by adequacy decisions of the European Commission and the United Kingdom. For transfers from the EEA, the UK or Switzerland to countries without an adequacy decision, we rely on the European Commission's standard contractual clauses and the UK addendum to them, or on the recipient's certification under the EU–US Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of the safeguards at support@fineword.ai.

8. How long we keep data

Our payment provider keeps transaction records for as long as tax and accounting law requires.

Deleting your account. You can delete your account from the app or by emailing support@fineword.ai. An active subscription must be cancelled first. Deletion removes your account, sessions, trial, subscription records and usage totals, and we send a confirmation email. The hash of your email address stays, and usage metrics and logs that carry your account ID expire on the schedules above.

9. Security

• All connections to our servers and to Anthropic use TLS encryption.
• Your sign-in session is stored in the macOS Keychain.
• Sign-in codes are stored hashed, expire after 10 minutes and stop working after five wrong attempts.
• Sign-in is rate-limited and protected by a bot check.
• Our logs, metrics and error reports are built to exclude text.
• Recognised secrets are replaced with placeholders before text leaves your Mac.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

10. Your rights

You can exercise any right below by emailing support@fineword.ai. We answer within one month (GDPR and UK GDPR), 45 days (California) or 30 days (Israel), unless the law allows longer. We may need to confirm your identity first. Exercising a right is free, and we will not treat you worse for doing so.

Because we do not store your text, we cannot retrieve, correct or delete past text or rewrites: there is nothing held to act on.

EEA, UK and Switzerland

You have the right to:

• access your personal data and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict our processing;
• receive your data in a portable format;
• object to processing based on legitimate interests, including the uses marked that way in section 5;
• withdraw consent where we rely on it;
• complain to a supervisory authority: the authority in your country of residence, or in the UK the Information Commissioner's Office (ico.org.uk).

California

Under the CCPA as amended by the CPRA, California residents have the right to know what personal information we collect, use and disclose; to receive a copy; to have it corrected or deleted; and not to be discriminated against for exercising these rights. You may use an authorised agent, who must show written permission from you.

In the last 12 months we have collected these categories of personal information: identifiers (email address, account ID, IP address), commercial information (subscription records), internet or network activity (usage and diagnostic data), and the contents of text you submit for rewriting, which we do not retain. We collect them from you and your device, for the purposes in section 5, and disclose them to the service providers in section 6. We do not sell or share personal information, and we do not use sensitive personal information for purposes other than providing the service.

Israel

Under the Privacy Protection Law, 5741-1981, as amended by Amendment 13, you have the right to review the personal data we hold about you and to ask us to correct or delete data that is inaccurate, incomplete, unclear or out of date. If we refuse, we will tell you why, and you may apply to the court. You may also complain to the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority).

11. Children

Fineword is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email support@fineword.ai and we will delete it.

12. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change materially affects how we handle your personal data, we will tell you in the app or by email before it takes effect.

13. Contact and complaints

Questions, requests and complaints: support@fineword.ai, or by post to June AI Apps LTD, [REGISTERED ADDRESS].

If our answer does not satisfy you, you can complain to your data protection authority as described in section 10.