legal

Privacy Policy

Last updated May 22, 2026

This Privacy Policy explains how Free Association collects, uses, and protects information when you use our website and writing studio.

1. Information we collect

• Account information: username, email address, display name, and authentication data managed through Supabase Auth.
• Writing content: document titles, body text, version snapshots, and related metadata stored in your account.
• Billing information: subscription status, Stripe customer identifiers, and payment-related records processed by Stripe. We do not store full payment card numbers on our servers.
• Usage and technical data: browser type, device information, IP address, and service logs needed to operate, secure, and troubleshoot the platform.
• Local preferences: theme, typography, layout, and editor settings stored in your browser via localStorage.

2. How we use information

• Provide account access, cloud sync, autosave, exports, and subscription management.
• Process optional AI requests you initiate, such as outline generation, journal prompts, or proofreading suggestions.
• Send transactional messages related to account creation, billing, or service changes when applicable.
• Protect the service against abuse, fraud, and unauthorized access.

3. AI processing

When you use AI features, the relevant text you submit may be sent to our configured AI provider (such as Google Gemini, OpenAI, OpenRouter, or a local Ollama instance in self-hosted setups) solely to generate a response for you. Do not submit sensitive personal information you do not want processed by those providers.

4. Service providers

We use trusted third parties to operate Free Association, including:

• Supabase for authentication and database storage.
• Stripe for subscription checkout and billing events.
• AI providers for optional writing assistance features.
• Hosting and infrastructure providers that serve the application and static assets.

These providers process data on our behalf according to their own terms and privacy policies.

5. Cookies and local storage

We use browser storage to keep you signed in, remember editor preferences, and maintain session state. You can clear this data through your browser settings, though doing so may sign you out or reset local preferences.

6. Data retention

We retain account and document data while your account remains active. Billing records may be kept as needed for accounting, tax, and dispute resolution. If you request account deletion, we will delete or anonymize personal data unless we must retain certain records by law.

7. Security

We use industry-standard measures such as encrypted transport, access controls, and row-level security for user-owned data. No online service can guarantee absolute security, so please use a strong password and protect your login credentials.

8. Your choices

• You can export your writing from within the app.
• You can cancel your subscription through Stripe.
• You can request account deletion or data questions by contacting us.

9. Children

Free Association is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes

We may update this policy from time to time. Material changes will be posted on this page with a revised “Last updated” date.

11. Contact

Privacy questions or requests can be sent to cmichaeldev@gmail.com.