Privacy Policy

Writing Desk is built on a simple principle: your manuscript is yours. This policy explains exactly what data we collect, what we don't, and how everything is handled. We've tried to write it in plain English.

1. Overview

Writing Desk is a native macOS application. Your manuscript lives as a file on your own machine. Under normal use, your writing is never transmitted to our servers, never retained by us, and never used to train AI models — by us or anyone else.

The data we do collect is limited to what's necessary to operate the service: account information for premium subscribers, anonymised usage analytics to help us improve the product, and brief operational logs from AI API calls.

2. Your manuscript

Writing Desk stores your manuscript as a .docx file and a companion .wdjson sidecar file on your Mac. These files never leave your machine during normal use of the application — they are not uploaded to, synced with, or stored on Writing Desk's servers.

If you choose to use cloud sync (iCloud, Dropbox, or similar), your files are handled according to that service's own privacy policy. Writing Desk does not control or have access to files stored in third-party cloud services.

We make no claim of ownership over your manuscript or any content you create using Writing Desk.

3. AI features

Writing Desk's AI editorial features — including the Research Assistant, AI Editor, and Full Manuscript Review — are powered by the Anthropic API.

When you use one of these features, the relevant content (a chapter, a research query, or your full manuscript) is sent to Anthropic's API over an encrypted connection. A response is returned and displayed in the app. This content is not retained by Writing Desk.

Anthropic's API data policy applies to content processed through the API:

• API inputs and outputs are stored in operational logs for up to 7 days, then automatically deleted
• API data is never used to train Anthropic's AI models
• This is a flat policy with no exceptions for API customers

You can read Anthropic's full data policy at anthropic.com/legal/privacy.

Writing Desk will never generate prose on your behalf. AI features exist to assist your thinking and editorial process. Everything written in your manuscript is your own work.

4. Print-ready export & Formatter

Generating a professionally typeset print-ready PDF requires server-side processing — this is the nature of the task and cannot be done entirely on-device. This work happens in Writing Desk Formatter, our companion web app.

When you send a manuscript to Formatter for typesetting — using "Typeset & Print" from the desktop app, or by uploading directly:

• A copy of your manuscript is transmitted to our servers over an encrypted connection and stored so Formatter can display it, let you adjust layout, and generate exports
• We do not read, review, analyse, or otherwise use your manuscript content for any purpose beyond providing the typesetting and export service you've asked for
• Your manuscript is never shared with anyone, and never used to train AI models, by us or anyone else
• You can delete your manuscript from Formatter at any time from your library — deletion is immediate and permanent

Separately, once a PDF is generated:

• You are asked whether you would like us to retain the formatted file for future use, or delete it immediately
• If you choose deletion, the file is removed from our servers within 24 hours of delivery
• If you choose retention, your formatted file is stored securely in your account and accessible from your exports library

The choice on the formatted file is always yours, and the default is deletion. The source manuscript itself stays in your Formatter library, under your control, until you choose to remove it — this just means you can generate further exports without re-uploading.

5. Account data

A Writing Desk account is required for premium and Pro subscription features. When you create an account we collect:

• Your email address
• A hashed password (we never store your password in plain text)
• Your subscription plan and billing status (payment processing is handled by Stripe — we do not store card details)
• The date your account was created

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor — the highest level of certification in the payments industry. Your card details are sent directly to Stripe and never pass through or touch our servers.

We use your email address to send account-related communications (receipts, subscription updates, password resets). We do not send marketing email without your explicit opt-in.

You can delete your account at any time from within account settings. Deletion removes your account data from our systems within 30 days. Any formatted files or manuscripts you have stored in your Formatter library will also be deleted.

6. In-app usage analytics

The Writing Desk desktop app and Formatter collect anonymised usage analytics — standard telemetry used to operate and improve the service. This is how we learn which features get used, where people drop off during onboarding, and how the app is used day to day, so we can make it better.

This never includes your manuscript, chapter text, or any content you write. It's limited to feature-level events — for example, "chapter review run" or "EPUB exported" — plus an anonymised identifier used to connect your activity within your own account across the desktop app and Formatter.

This is handled through PostHog, hosted in the EU. Because this data is anonymised and limited to operating the service, it falls within normal use needed to run the product and doesn't require a separate consent step under UK GDPR — it's disclosed here instead. If you'd like more detail on exactly what's collected, email us and we're happy to walk through it.

7. Website analytics

The Writing Desk website uses Google Analytics 4 to collect anonymised usage data — pages visited, time on page, device type, and approximate location (country/region level). This data helps us understand how the site is used and improve it.

No personally identifiable information is collected through analytics. You can opt out of analytics tracking via your browser's cookie settings or by using a browser extension such as uBlock Origin.

We use a cookie consent notice on first visit. See our Cookie Policy for full details.

8. Email and mailing list

If you sign up for Writing Desk updates or download a free resource from this site, your email address will be added to our mailing list. You can unsubscribe at any time via the link in any email we send. We will never sell or share your email address with third parties.

9. Third-party services

Writing Desk uses the following third-party services. Each has its own privacy policy.

• Anthropic API — powers AI editorial features. Data policy: anthropic.com/legal/privacy
• Stripe — handles subscription payments, PCI-DSS Level 1 certified. We do not store payment card details. Policy: stripe.com/gb/privacy
• PostHog — anonymised in-app usage analytics for the desktop app and Formatter, EU-hosted. Policy: posthog.com/privacy
• Google Analytics 4 — anonymised website analytics. Policy: policies.google.com/privacy
• iCloud / Dropbox — optional cloud sync, used only if you configure it. Data is governed by your agreement with those services.

10. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, email help@writingdeskapp.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Children

Writing Desk is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. If we make material changes — particularly relating to how manuscript data is handled — we will notify active subscribers by email.

13. Contact

Writing Desk is operated by Ben Luxon, based in the United Kingdom.