Effective October 15, 2026 · Rewrite for Mac (beta) and Rewrite for iPhone
The short version: Rewrite reads text only when you ask it to, swaps names, numbers and other sensitive details for placeholders on your device, sends the rest to a cloud AI model (Claude or ChatGPT/GPT), and puts your details back on your device. On the Mac, the request goes straight to your own AI account and never touches our servers. On iPhone, it passes through our relay server on its way to the AI, and the relay never stores or logs it. Voice is turned into text on your iPhone and never leaves it.
The next four sections describe the Mac app. Rewrite for iPhone works differently and has its own section below.
Rewrite reads the text field you are working in only at the moment you trigger it (for example, by double-tapping your shortcut), and only the content of that field — or just the portion you highlighted. There is no ambient monitoring, no background recording of keystrokes, and no history of what you typed. Text is held in memory only for the life of the rewrite tooltip and is discarded when it closes. Password and other secure input fields are refused at the operating-system level.
To produce a rewrite, Rewrite sends the invoked text to the AI provider account you connect (ChatGPT or Claude). Before it is sent, sensitive details — names, email addresses, phone numbers, card numbers, SSNs, URLs, IP addresses, and filenames — are replaced on-device with anonymized keys such as [[NAME_1]]. The key map between placeholders and real values never leaves your Mac. The rewritten text comes back, and the real details are restored locally. The app's "What the AI sees" tab shows you the exact payload for every request.
Detection is best-effort, not guaranteed. It relies on pattern matching and on-device machine learning, which can miss sensitive details — unusual formats, uncommon names, context-dependent identifiers — and, like all software, can have bugs. If detection misses something, that text is transmitted to your AI provider unmasked. Use the "What the AI sees" tab to verify any payload before you rely on it, and do not use Rewrite on text you are legally or contractually prohibited from sharing with your AI provider (see the Terms of Use, sections 7, 9, and 10, which govern our responsibility here). Rewrite is not designed for use with regulated data such as protected health information or cardholder data.
Rewrites are processed by the provider you sign into, under your account and that provider's terms and privacy policy (OpenAI's for ChatGPT, Anthropic's for Claude). Rewrite does not operate, proxy, or log that traffic — requests go from your Mac to your provider directly.
_ga) containing a random ID so it can tell a returning browser from a new one; it does not contain your name, email, or anything we could use to identify you, and we never combine it with other data. If you are in the EU, EEA, or UK, that cookie is not set unless you choose "Allow" on the banner we show; if you decline or ignore it, Google receives only cookieless pings that it does not report to us. Your choice is remembered in your browser's local storage so we don't ask again (clear site data to reset it). Advertising features are switched off everywhere. Google processes this data on its servers under Google's privacy policy; like any web request, the pings include your IP address in transit, which Google Analytics 4 uses only to derive a coarse location and does not store. This is website-only: the Rewrite app itself contains no analytics, trackers, or content telemetry. The download counter on the home page increments an anonymous public counter — no personal information is sent with it. Standard web-server request logs (IP address, user agent) may exist transiently on our hosting infrastructure.Rewrite for iPhone is a keyboard. It works like the Mac app, with these differences.
[[NAME_1]]. The placeholder map never leaves your iPhone. The "N hidden from AI" badge and the "What AI Sees" view show exactly what was sent. The same limits of pseudonymization apply.api.rewriteapp.io, on Google Cloud in the United States), which adds Rewrite's own account key and forwards the request to Anthropic (Claude) or OpenAI (GPT); the reply streams straight back. The relay holds your text only in memory while the request is in flight. It never writes text to disk or logs, and it keeps no access logs: each request leaves one line with the time, the kind of request and whether it succeeded. Like any web request, your IP address passes through our hosting infrastructure in transit.If you email us feedback or crash reports, we keep the correspondence so we can fix the problem and follow up. Don't include sensitive text in feedback unless you're comfortable sharing it.
Depending on where you live — for example under the GDPR in Europe or the CCPA in California — you may have rights to access, correct, delete, or export personal data we hold about you, and to object to or restrict its processing. In practice we hold almost nothing: your settings and style data live on your device (deleting the app deletes them), the iPhone subscription record above holds only Apple's transaction ID and a monthly count, website analytics identify a browser by a random cookie ID that we cannot tie to a person, and the only personal data we keep is correspondence you send us. Email support@collectivetheory.com with any such request — including deleting our correspondence with you — and we will honor it. We do not sell or share personal information, and never have. You also have the right to lodge a complaint with your local data-protection authority.
Rewrite is not directed at children under 13, and we do not knowingly collect personal information from them.
If this policy changes — for example, when the beta ends — we will update this page and note the new effective date. Material changes will be called out in the app's release notes.
Rewrite is made and operated by Collective Theory Corp., a Florida corporation, which is the data controller for the limited personal data described in this policy. Questions or requests: support@collectivetheory.com