Privacy Policy

Last updated: May 5, 2025

At Lorewell, your privacy is important to us. This policy explains what information we collect, how we use it, and how we keep it safe.

1. What We Collect

• Email address (for account creation and sign-in)
• Writing content you create or upload (chapters, notes, Lorebook entries)
• Usage data for performance monitoring and product improvement
• If you sign in using a third-party provider (like Google): a unique user ID, and optionally your name and profile image

2. How We Use Your Data

Your data is used solely to provide and improve the Lorewell experience, including:

• Saving your work across sessions
• Providing AI-assisted completions and feedback
• Generating and maintaining your Lorebook
• Offering versioning and draft recovery
• Personalising your experience (e.g. displaying your name or avatar, if available)

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract:

  To provide the services you've signed up for, such as saving your work, authenticating your identity, and enabling AI-assisted features.

• Consent:

  When you explicitly allow us to use optional data (like your name or profile image), or when using AI features that share your text with third-party services.

• Legitimate interests:

  For improving Lorewell's performance, ensuring service reliability, and protecting against misuse — balanced against your privacy rights.

4. AI Completions and Data Sharing

When you request an AI suggestion or review, your writing content is sent to Google's AI services (e.g., Gemini) for processing.

Importantly, your content is not used by Google to train their models.

We use these services only for real-time generation in your writing session.

5. Storage and Security

Your content is stored securely using Google Firebase, including Firestore for data and Firebase Authentication for login. We follow best practices to safeguard your information.

6. Payments

We use Stripe to handle all payment processing. When you subscribe to a paid plan, your payment details are securely processed by Stripe.

Lorewell does not store or access your credit card or payment information.

7. Cookies

Lorewell uses cookies for functionality and security. These include:

• Cloudflare (third-party):

  Required for security and traffic protection.

• Google (third-party):

  Required for authentication and platform security.

• Stripe (third-party):

  Required for secure payment handling and fraud detection.

• First-party cookies:

  Used to support secure payment processing during checkout.

8. Data Retention

We retain your data while your account is active. If you request deletion of your account, your data is deleted immediately.

9. International Data Transfers

Some data, including that of EU/UK users, may be processed or stored in the United States, where our infrastructure providers (such as Google and Stripe) are located. We use standard contractual clauses or equivalent legal safeguards to protect your data during these transfers.

10. Age Requirements

Lorewell is not intended for users under the age of 16. If you are under 16, you may not create an account or use our services.

11. Automated Decision-Making

Lorewell does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Data Ownership

You retain full ownership of all content you write in Lorewell. We do not claim any rights to your intellectual property.

13. Third-Party Services

We use the following third-party services:

• Google Firebase

  – for authentication and storage

• Google AI (Gemini)

  – for completions and review feedback

• Stripe

  – for secure payment processing

• Cloudflare

  – for site performance and security

14. Your Rights Under GDPR

If you are located in the EU or UK, you have the right to:

• Access your personal data
• Request correction or deletion of your data
• Restrict or object to certain types of processing
• Export your data in a portable format
• Withdraw consent at any time (where applicable)

You can exercise these rights by contacting us at privacy@lorewell.net.

15. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through the app or via email.

16. Contact Us

For general questions, you can email us at support@lorewell.net.

For privacy-specific inquiries, email privacy@lorewell.net.

17. Data Controller

Lorewell is the data controller responsible for your personal data. You can contact us with any questions at privacy@lorewell.net.

18. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO): https://ico.org.uk.