Privacy Policy

Rephrase · Effective 2026-10-25

Rephrase rewrites what you mean into several ways you can actually send it, and explains what someone else's words likely mean. You can use it free without an account.

At a glance

1. Information we process

Text you submit

When you tap Generate, the text in the input box is sent to our server, which forwards it to a third-party language model provider for processing. We do not save your text in our database. Our application logs record only technical fields such as character count, detected language, latency, result status and a random request ID. We do not use your text to train our own models.

Random device ID (no account)

The web app creates a random identifier in your browser's local storage on first use. It is not your name, phone number, advertising ID, or a cross-site identifier. We use it only to count how many runs this device has used today, enforce the daily limit, and link a report you submit.

Google account (optional)

You can use Rephrase without signing in. If you choose Sign in with Google, Google gives us a signed identity token. We verify it and store:

• your Google account identifier (a stable, opaque ID — not your password);
• your email address and whether Google has verified it;
• your display name and profile picture URL, if available.

We use these fields only to operate your account, keep your daily usage consistent across devices, and respond to support or deletion requests. We never post to Google, read your Gmail, or access other Google data. We do not use Google user data for advertising, to train AI models, or sell it. Rephrase's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Session token

After Google sign-in, our server issues its own signed session token. It is stored in your browser's local storage and expires after 30 days. It contains an internal account ID, not your Google token. Signing out removes it from this browser.

IP address and user agent

Like any internet service, our servers receive the IP address and client headers of each request. We use them for rate limiting, abuse prevention, security and troubleshooting. Access logs are kept for no more than 30 days and are not used for advertising or profiling. Our application logs do not include your IP address.

Reports

If you report a generated output, we store the reason, timestamp, request ID, the output's request reference, your device ID or account ID, and any note you add. We use this to review the output and improve safety.

Stored only in your browser

Your recent results, selected recipients, tone, output language and other preferences are saved in your browser's local storage. They are not uploaded to us. Clearing site data or using the in-app Clear button removes them from this browser.

2. What we do not collect

• No account is required to use the core service.
• We do not ask for your name, phone number, contacts, precise location, photos, or government ID.
• We do not use advertising SDKs, sell personal information, or track you across other websites.
• We do not read your clipboard unless you paste into the input box yourself.
• We do not collect payment information because Rephrase is currently free.

3. Third parties

• Language model provider. Your submitted text is processed by a third-party model provider under its own terms, which govern whether the provider retains or uses it to improve its models. We review those terms when selecting and changing providers.
• Google. If you choose Google sign-in, Google processes the authentication under Google's Privacy Policy. The Google Identity Services script is loaded only when sign-in is available.
• Hosting and network providers. Our server host and Cloudflare process requests to deliver the service, protect it from abuse, and keep it available. Cloudflare may collect aggregate, cookie-less traffic measurements.

We do not sell your information, share it for advertising, or share it with anyone else except when required by law or necessary to protect the service and its users.

4. Cookies and local storage

We do not use advertising cookies, tracking pixels, or cross-site advertising identifiers. The web app stores the following in your browser's local storage:

• a random device ID used for guest daily limits;
• your session token and basic profile if you sign in with Google;
• your interface/output language, tone, recipient selection and other preferences;
• your recent results, kept only in this browser.

Cloudflare may set a security cookie to distinguish automated traffic. Cloudflare Web Analytics, when enabled, provides aggregate, cookie-less measurements and is not used to build advertising profiles. You can clear local storage through your browser's site settings; doing so signs you out and resets local history, and guest usage may be counted as a new device.

5. How long we keep things

• Submitted text: not stored in our database; it exists only in memory while the request is processed.
• Daily usage (random device ID or account ID, date, count): deleted after 30 days by an automatic cleanup job.
• Account profile (Google ID, email, name, picture): kept while your account exists. Deleting your account removes these fields.
• Access logs (including IP): no more than 30 days.
• Abuse reports: 180 days, then deleted automatically. If you delete your account, the report is detached from your account and device IDs, and any note you added is removed; the rest is kept only as an anonymized safety record.
• Browser history and preferences: controlled by you; removed when you clear them or clear site data.

6. Your choices and rights

• Use without an account: you can use Rephrase without signing in at any time.
• Sign out: remove the session token from this browser from the account menu.
• Delete your account: use the account menu, or follow the steps on the account deletion page. This removes your Google link, profile fields and account usage records and cannot be undone.
• Clear local data: delete individual results or all local history in the app, or clear site data in your browser.
• Access, correction, portability, restriction or objection: email us and we will help. Where applicable law gives you these rights, we will respond within the time required by that law, normally within 30 days.
• Complaint: you may contact your local data protection authority. We would appreciate the chance to resolve your concern first.

7. Children

Rephrase is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us and we will delete it.

8. AI-generated content

All output is generated by AI for wording reference only. It may be inaccurate or inappropriate, and it is not legal, medical, financial or professional advice. You can report any output from the result card.

9. Security and international processing

We use HTTPS for all traffic, keep model credentials on the server, limit access to production systems, and rotate or delete data as described above. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards offered by those providers, such as standard contractual clauses, and we limit processing to what is necessary to provide the service.

10. Changes to this policy

If our practices change, we will update this page and the effective date above. Material changes will be announced in the app where practical. Continued use after an update means you accept the revised policy.

11. Contact

Questions, requests or complaints: [email protected]. Please include the email address linked to your account if your request concerns an account.