Rewritn Log in
Terms Privacy Policy Last updated September 27, 2026
This Privacy Policy explains what information Rewritn collects, how we use it, and the choices you have. It applies to everyone who uses the Service: students, parents and guardians, essay readers, and the consultants who still have accounts here.
Registration details you provide: legal name and email address, however you sign up, plus a username if you sign yourself up. A phone number, when you claim a free review. A parent who signs up may also give, optionally, a phone number, their child’s email and their relationship to the child. If a consultant invites you instead, their intake form asks for a phone number, a grade or graduation year and a school name, and, entirely optionally, and at any age, a school email, a date of birth, a student ID, a program or track, and a parent or guardian’s name and contact. Academic materials you or a provider add: essays, activities, test records, schools, notes, and any grades or transcripts you choose to share. Order records: what you bought, from whom, what it cost, and the identifiers Stripe gives us for the payment. Call recordings, on calls that are recorded, plus the transcript and summary made from them: an hour you buy from a reader is not recorded, and nothing about it is transcribed or written to a call log. Reader applications: a school email address, a writing sample, and our screening result. Usage data: basic logs needed to run and secure the Service. Connected Google data: the calendar events covered by the one calendar.events permission you authorize: we do not request Gmail or Drive access and have no way to read either.
We never receive your card number. Payment details are entered on Stripe’s own hosted page. We hold the reference Stripe returns and nothing else.
To create and secure your account; to show a reader the draft you bought a review on, and to show you their review; to take payment, hold it, refund it and pay readers; to generate the AI features that are used (essay scoring, suggestions, call transcription and summaries); to screen people who apply to be readers; to send verification codes, order notifications and service messages; and to comply with the law. We do not sell your personal information, we do not use student data for advertising, and we do not train AI models on your work.
With the reader you buy from, once you send them a draft: the draft, your messages, and the review they write. Never your files, school list, activities, test records or date of birth. With a guardian you have linked, to the extent your own switches allow. With your consultant, if you have one.
With service providers who process data under contract to run the platform: Supabase (database, authentication, and encrypted file storage), Cloudflare (serving the website), Stripe (payments, refunds, and paying readers: Stripe collects the reader’s own identity and bank details directly), NVIDIA (the AI models that score essays, draft suggestions, and summarize calls), Groq, or OpenAI where Groq is unavailable (speech-to-text transcription of call recordings), Tavily (web research, on the consultant surfaces only), Resend (transactional email delivery), and, only if you connect it, Google (Calendar). For legal reasons, if required by law or to protect safety. We do not share student data with third parties for their own marketing.
Two flows are worth naming plainly. A recorded call leaves us twice: the audio goes to the transcription provider, and the transcript then goes to NVIDIA to be summarized. And an event we put on your Google Calendar carries the student’s name and, for a payment reminder, the amount, so anyone you have shared that calendar with can see it.
Where a school shares education records with a consultant through Rewritn, we act as a service provider and handle those records only as directed, consistent with FERPA.
Under 13. We do not knowingly collect information from anyone under 13. Self-serve registration does not ask a student’s age at all, and we do not otherwise verify it there. Where a date of birth is collected (a consultant’s invitation to a student asks for one), we refuse to create the account if it puts the applicant under 13. If we learn by any other means that an account belongs to a child under 13, we delete it and the information in it. A parent or guardian who believes we hold information about a child under 13 can email support@rewritn.ai and we will delete it.
Under 18. A student under 18 can use every part of the Service, including buying a review and sending a draft to a reader, with no consent from a parent or guardian required. A parent or guardian may optionally link to the student’s account; see “Your choices & rights” below for what that link opens and how either side can end it.
You can view and update your registration details, disconnect a linked Google account at any time, end a parent link (and a linked parent can end that same link from their own side, at any time), control whether a linked parent can see each of your workspaces, and delete your account. A student can also download a copy of their own drafts, revisions, activities, schools and file records from their settings; that export is a student feature, and a reader, parent or consultant who wants their data should email us. The parent-portal switches cover your workspace and not your money: a linked parent is emailed about payments and refunds and can see your orders whatever those switches are set to, and that is said again on the settings page next to the switches themselves. Some requests are subject to legal or recordkeeping limits: in particular, a delivered review and the record of what was graded are retained while a payment can still be disputed.
We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations, then delete or de-identify it. Two retention rules are shorter than that and worth naming: a call recording, and the transcript and summary made from it, are deleted about a month after the call; and where a student has closed their account, the order evidence we keep for a payment dispute is purged after 180 days. Records tied to a payment (the order, the rubric that was delivered, and the figures a tax form is built from) are kept longer, because a payment can be disputed and a tax filing has its own deadlines.
We protect data with row-level access controls, encryption in transit, and private file storage reached only through short-lived signed links. Google access is granted through OAuth with one narrowly scoped permission. The connection token passes through your browser once, at the moment you connect; from then on it is held only on our servers, encrypted with a key that is not stored in the database, in a table no signed-in account has any read access to at all. Disconnecting deletes it and asks Google to revoke it. No system is perfectly secure.
We may update this Policy; material changes will be posted here with a new date. Questions or requests, including access, correction, or deletion of your data? Email us at support@rewritn.ai. See also our Terms of Service.