Privacy policy

Who we are

HumanGPT – AI Humanizer Text ("HumanGPT") is operated by Evolution Games GmbH, Breiteharthstr. 14, 35232 Dautphetal, Germany ("we", "us"). We decide how and why the personal data described here is processed, which makes us its controller. You can reach us at evolutiongamesapps@gmail.com.

This policy covers the HumanGPT iPhone app, the online services behind it and this website.

What we collect and why

Text you humanize or check

When you tap Humanize, the app sends your text and your settings (tone, strength, text type, language, whether to keep formatting and, on Pro, your voice sample) to our backend. The backend runs in the EU, in Google Cloud's europe-west1 region in Belgium. It passes your text to Replicate, our AI processing provider, which runs Anthropic's Claude models to write the rewrite and to run a fact-check pass that compares the rewrite with your original. Text you check with the AI-likeness estimate, and sentences you rewrite one at a time, are processed the same way. Your text is used only to produce the results you ask for. Before the app sends text to our AI provider for the first time, it explains this and asks for your permission; until you agree, no text is sent.

For each rewrite, our backend keeps a record for 30 days. It holds the result (the rewritten text and the list of changes, which quotes short excerpts of your original), your settings, the number of words charged, the AI model used and how many AI tokens it consumed. The record lets a retry after a dropped connection return the same result without charging you twice, and it helps us detect and investigate abuse. After 30 days it's deleted automatically.

The quick pattern highlights you see while you edit are worked out on your iPhone and don't leave the device. We don't use your text to train AI models, and we don't read it unless you send it to us for support or we have to investigate a specific abuse case.

Your documents

Each time you humanize, the app saves the text as a document in your account, stored in Cloud Firestore in the EU. A document holds a title taken from its first line, the text type, your original text, the current version and up to 10 earlier versions, the tone, the language, the latest AI-likeness estimate, the word count, timestamps and whether it was last edited on iPhone. Documents sync between the app and your account, so they're there when you come back or sign in on another iPhone. Only your account can read them.

When you delete a document, or your account, the document is deleted immediately.

Files, photos and links you import

Photos and camera scans are read on your iPhone with Apple's on-device text recognition and aren't uploaded. Text files, PDFs and Word documents are read on your iPhone where possible (PDF and Word import are part of Pro). If the app can't read a PDF or Word file on the device, it uploads the file to our storage (Cloud Storage for Firebase, EU), our backend extracts the text, and the file is deleted right after extraction. If the text is never extracted, for example because the import was interrupted, the file is deleted automatically within two hours. Uploads are limited to 10 MB, and only your account can access them.

When you import from a link, the app sends the address to our backend. The backend downloads the Google Doc or web page, extracts the readable text and returns it to the app. A Google Doc has to be shared as "Anyone with the link" for this to work. The import doesn't store the downloaded text on our servers; it goes into your editor, and from there the rules for documents above apply. We keep a short-lived count of your recent imports to enforce rate limits.

Your account and sign-in

The first time you open the app, it creates an anonymous account with Firebase Authentication. It's identified by a random user ID, and we don't ask for your name, email address or phone number.

Signing in with Apple or Google is optional. If you do, your anonymous account is linked to that sign-in and we receive the details the provider shares, usually your name and email address. With Sign in with Apple you can hide your email address, in which case Apple gives us a relay address. We store your name, email address and which sign-in providers are linked. If you sign in with an account that already exists in HumanGPT, the documents from your anonymous account are moved into it and the anonymous account is deleted.

Onboarding answers and settings

During onboarding the app asks what you're writing (for example essays or emails), what bothers you most about AI text and which language you prefer. We store these answers with your account, along with your app language and the platform you first used, to choose example texts and tailor what the app shows you.

Usage, limits and abuse prevention

For each account our backend keeps your plan and subscription status, the words and runs you've used today and this week, how many AI-likeness checks you've made today, lifetime totals, whether you've used the free demo run, and timestamps. A rate-limit record holds the times of your recent requests and daily counts for humanize runs, checks and imports. If an account uses an unusually large number of words in one week, we record a flag so we can check for misuse such as reselling access.

We use this to enforce plan limits, prevent abuse and keep costs under control. We also keep daily totals across all users (requests, words and AI tokens). Those totals contain no user ID.

Purchases

Apple processes all payments, so we never see your card details. We use Qonversion to manage subscriptions. Qonversion receives your HumanGPT user ID, the purchase information Apple provides for the app (such as the product, purchase and renewal dates, trial status, price and currency) and basic technical data such as app version, device model, operating system version and locale. Qonversion tells our backend when a subscription starts, renews, is cancelled, is refunded or ends, and our backend stores your current subscription status with your account: whether it's active, the product, the billing period, whether it's a trial, the expiry date and whether it will renew.

If you installed the app after tapping an Apple Search Ads ad, Qonversion may also receive Apple's attribution data, which says which ad campaign led to the download. Apple provides this data without identifying you.

App integrity checks

Firebase App Check uses Apple's App Attest so our backend can confirm that a request comes from a genuine copy of the app on a real device. It doesn't identify you.

Analytics and crash reports

The app uses Google Analytics for Firebase to understand, in aggregate, how the app is used, for example how many people finish onboarding, open the subscription screen or humanize a text. Events can include details such as the number of words, the tone, the text type and whether you have Pro. They never include the text you write, import or humanize. Events are recorded with a random app instance ID, your device model, operating system, app version, language and an approximate location (country or region) derived from your IP address.

Firebase Crashlytics collects a report when the app crashes: the state of the app at the time, a stack trace, your device model, operating system, app version and an installation ID. Reports may be linked to your user ID so we can fix problems you tell us about.

You can turn usage analytics and crash reports off at any time in Settings > Share usage analytics.

When you first open the app, iOS asks whether HumanGPT may track you (App Tracking Transparency). If you allow it, the app gives Qonversion your device's advertising identifier (IDFA), and Google Analytics for Firebase may use it too, so we can measure which of our ads, for example on Apple Search Ads, led to installs, trials and purchases. Your texts and documents are never used for this. If you don't allow it, the app can't read the advertising identifier and works exactly the same. You can change your choice at any time in iOS Settings > Privacy & Security > Tracking.

Server logs

Our backend writes technical logs, such as errors, timings, word counts and the user ID involved, to Google Cloud Logging, which keeps them for 30 days. We use them for troubleshooting and security. They don't contain the text you submit.

This website

This site is a set of static pages served by Firebase Hosting. It sets no cookies, runs no analytics or tracking scripts and loads nothing from other companies' servers. Like any web server, Firebase Hosting processes your IP address and browser details to deliver the pages and protect against abuse.

Emails to support

If you email us, we use your email address and your message to answer you, and we keep the conversation for as long as we need it to help you and handle any follow-up.

How long we keep it

If you remove the app without deleting your account first, your account and documents stay on our servers. If you signed in with Apple or Google, you get them back by signing in again. If you didn't, a new install can't reach the old anonymous account; email us and we'll help you delete it.

Service providers

These companies process personal data for us under contracts that limit what they can do with it.

Their own policies: Firebase, Replicate, Anthropic, Qonversion and Apple.

Where data is processed

Our backend runs on Google Cloud in the European Union: Cloud Functions and Cloud Storage in Belgium (europe-west1) and Cloud Firestore in a European multi-region. Replicate and Anthropic are based in the United States, so text you send for AI processing is processed there. Google (for Authentication, Analytics and Crashlytics), Qonversion and Apple may process data in other countries as well.

When personal data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards the law recognizes, such as the EU-US Data Privacy Framework where the recipient is certified under it, or the European Commission's Standard Contractual Clauses.

Legal bases

If you're in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)) to produce the rewrites and estimates you ask for, store and sync your documents, import files and links, run your word allowance, provide the Pro features you pay for, link your sign-in and answer support requests.
• Legitimate interests (Art. 6(1)(f)) to prevent abuse and fraud and keep the service secure and affordable (rate limits, App Check, misuse flags, the 30-day result records and server logs), to fix crashes, to understand app usage in aggregate and to tailor examples to your onboarding answers. You can object to this processing; see Your rights.
• Consent (Art. 6(1)(a), and § 25 TDDDG for access to your device) to use the advertising identifier for ad measurement when you allow tracking in the iOS prompt. You can withdraw it at any time in iOS Settings.
• Legal obligations (Art. 6(1)(c)) where the law requires us to keep or disclose data, for example tax records.

What we don't do

• We don't show ads, in the app or on this site.
• We don't sell your personal data or share it for targeted advertising.
• We use your device's advertising identifier only to measure our own ads, and only if you allow tracking in the iOS prompt.
• We don't use your text to train AI models.
• We don't make automated decisions about you that have legal or similarly significant effects. The AI-likeness estimate describes a text, not you.

Your rights

Depending on where you live, you can ask us for a copy of your personal data, including an export of your documents, and you can ask us to correct it, delete it, send it to you in a portable format, or restrict or stop processing it. Where we rely on your consent, you can withdraw it at any time. You can also complain to a data protection authority, for example the one where you live. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

Residents of California and other US states with privacy laws have similar rights to know, correct and delete their data, and the right to opt out of its sale or sharing. We don't sell or share personal data. We won't treat you differently for using any of these rights.

The quickest way to delete everything is in the app. For anything else, email evolutiongamesapps@gmail.com. Because accounts can be anonymous, we may ask for details that help us find your data and confirm it's yours, such as the email address you signed in with or your subscription receipt.

Deleting your data

One document: swipe it away in the Documents list. It's deleted from your account immediately.

Everything: in the app, open Settings and tap Delete account. On our servers this deletes all your documents, your stored rewrite results, any uploaded files, your rate-limit record and misuse flag, and your profile with its usage counters and subscription status. Your sign-in account is deleted last.

Deletion doesn't reach the daily totals for all users (they have no user ID), server logs (deleted after 30 days), analytics events and crash reports (deleted when their retention period ends) or purchase records held by Apple and Qonversion. To ask Qonversion to delete purchase data linked to your account, email us.

Security

Data travels over encrypted HTTPS connections. Our database rules let each account read only its own data, limit what the app may write, and reserve subscription and usage fields for our backend. API keys and other secrets are kept in Google Secret Manager, and App Check helps keep scripts and modified copies of the app out.

No system is perfectly secure. If a breach affects your personal data, we'll notify you and the authorities as the law requires.

Children

HumanGPT isn't directed to children under 13, and we don't knowingly collect personal data from them. If you're under the age at which you can consent to data processing yourself in your country (between 13 and 16 in the EU and the UK), use the app only with a parent's or guardian's permission. If you think a child has given us personal data, email us and we'll delete it.

Changes to this policy

We'll post any change on this page and update the date at the top. If a change materially affects how we use your data, we'll also tell you in the app before it takes effect.

Contact

Evolution Games GmbH
Breiteharthstr. 14, 35232 Dautphetal, Germany

Email: evolutiongamesapps@gmail.com

More company details are in our legal notice.