Privacy policy
Last updated 2026-11-03.
The short version
- We store your essay and its results in your history until you delete them.
- We do not use your essays to train models, and we ask our AI providers not to keep them for training.
- We use Google Analytics and Umami to count visits. Google Analytics sets cookies.
- Payments are handled by Creem. We never see your card number.
- You can delete any essay, or your whole history, yourself.
What we collect
- Account: your Google account email, name and profile picture, through Supabase sign-in.
- Your content: essays, prompts, rubrics you paste, and the grades and notes we produce.
- Usage: your grade balance, plan, and counts needed to apply limits and prevent abuse (for example a hashed IP address for the free rubric generator).
- Payments: which plan you bought and its status, from Creem. Not your card details.
- Visit data: pages viewed, referrer, device and approximate location, from analytics (see Cookies).
Who processes it (our processors)
We use these services to run the site. Each receives only what it needs:
| Service | What it does | What it receives |
|---|---|---|
| Cloudflare | Hosting, database (D1) and delivery | All data we store; request metadata |
| Supabase | Sign-in with Google, session tokens | Your Google email, name, avatar |
| OpenRouter, routing to MiniMax models | Standard grades and the rubric generator | Essay or assignment text, rubric. Requests are sent with OpenRouter's data-collection setting on "deny", which limits routing to providers that do not collect user data (OpenRouter docs, read 2026-11-03). |
| xAI | Deep reviews (Grok models) | Essay text, rubric. xAI states that it does not train on API inputs or outputs without explicit permission (xAI API security FAQ, read 2026-11-03). |
| Creem | Checkout, subscriptions, tax and refunds, as merchant of record | Email and payment details, entered on Creem's pages |
| Google Analytics | Visit statistics | Page views and device data, with cookies |
| Umami | Visit statistics | Page views and device data |
Essays and AI training
We do not use your essays to train or fine-tune models. We send them to the providers above only to produce your grade. For OpenRouter we set data collection to deny. For xAI, see its API security FAQ. We do not sell your data.
How long we keep it
- Essays, results and rubrics: until you delete them, or until you delete your account.
- Billing records: as long as needed for tax and accounting law.
- Analytics data: according to the retention settings of Google Analytics and Umami.
Delete your data
In History you can delete a single grade or your whole history. Deleting removes the essay and its results from our database. To delete your account and all data, email support@hueflo.com from your sign-in address. Providers may keep their own records for a short period under their terms.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your data, and to object to processing. Email support@hueflo.com and we will respond.
Children
The service is for people 13 and older. If you believe a child under 13 has used it, email us and we will delete the account.
Changes and contact
If this policy changes in a way that matters, we will update the date above. Questions: support@hueflo.com. See also the terms of service.