What we collect
- Account information — your email address and name, to create and manage your account. If you sign in with Google or Apple, we receive these from them rather than asking you for them.
- Content you submit — the text you paste to humanize or to check for AI detection, and the result we return. We process it to give you that result.
- Your IP address — used to count free usage and to stop abuse when you are not signed in. We hold it for 48 hours and then it is gone. We do not use it to work out where you are beyond what is needed to keep the free tier from being drained.
- Basic technical data — app version, timestamps, and error diagnostics needed to keep the service running.
We do not collect your location, contacts, or photos, and we show no ads on any plan, including the free one.
Please don't paste other people's sensitive information
HumanFlow is a writing aid, not a secure vault for confidential records. Please do not submit medical records, legal case files, other people's personal information, or anything you are under a duty to keep confidential. If you do, we process it only to return your result — but the person it belongs to has no relationship with us, and neither of us wants to be having that conversation.
How we use it
- To provide the core features (humanize text, AI detection) and show your results.
- To create and secure your account and keep you signed in.
- To operate, maintain, and improve the service.
- To meter free usage fairly and to prevent abuse.
We do not use the text you submit to train any model — not the humanizer, not our own detector, not in aggregate, not in any form.
Sharing with our AI provider
To generate results, the text you submit is sent to Anthropic, an AI company in the United States, and to our own detection service. Anthropic acts as our processor under a written agreement that binds them to the same or equal protection of your data as this policy provides: they may use your text solely to return a result to us, must keep it confidential and secure, and may not use it to train their models, to advertise to you, or for any purpose of their own.
Our detector runs on a model we trained ourselves, on our own infrastructure. Your text is never sent to a third-party detector.
In our mobile apps we ask your permission before sending anything, and you can withdraw it at any time under Settings → Privacy & data. Withdrawing it stops the rewriting and detection features, because both require this processing to work.
Everyone else who handles your data
We do not sell your personal data and we never have. Beyond the processing described above, the companies that handle it are listed in full on our subprocessor page — what each one receives, what it does with it, and where it is. Each is bound by a written agreement to act only on our instructions, keep your data confidential, not use it for their own purposes, and delete or return it when the service ends.
That page is the canonical list. We update it before a new processor starts handling your data, not after. We may also disclose data where the law requires it.
Where your data is processed, and what that means for you
Lacewing Technologies LLC is established in the United States. The companies that process data for us are named on the subprocessor page with the country each one is in; most are American. If you are in the EEA or the UK, our own processing alone means your personal data is transferred out of your jurisdiction. We rely on the European Commission's Standard Contractual Clauses and the UK Addendum with each processor.
If you are in India, the DPDP Act permits these transfers except to countries the Central Government restricts; the United States is not one. If you are in California or another US state with a comprehensive privacy law, your data does not leave the country at all. Your rights are the same wherever you are — see GDPR, DPDP and CCPA — and none of them depends on where we happen to be incorporated.
Payments
Card payments on the web are processed by Stripe, on its own checkout page. Your card details go to Stripe directly and never reach us. We keep your plan, Stripe's reference numbers for your customer record and subscription, and the billing records tax law requires us to keep.
Stripe acts on our behalf when it processes a payment, and also uses payment data on its own account to prevent fraud and meet its legal obligations — see Stripe's privacy policy.
A subscription bought inside the iOS app is charged by Apple under its own terms; we receive that you are subscribed and to which plan, not your payment details.
Storage & security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored in our managed database with restricted access. Our security page sets out what we do and — just as importantly — what we have not done. If a breach affects your personal data we will notify you and the relevant authorities within the time the law allows.
How long we keep things
- Account data — while your account is open, then deleted within 30 days of you closing it.
- The text you submit, and its result — currently kept while your account is open, and deleted with it. We are introducing a 30-day limit after which it is deleted automatically; this page will say so on the day that starts, and not before.
- Your IP address — 48 hours.
- Error diagnostics — 90 days. Your submitted text is never attached to one.
- Billing records — as long as tax and company law requires, once there are any.
Your rights
Wherever you are, you can ask us for a copy of your data, correct it, delete it, or object to something we do with it. You can delete your account at any time in the app: Settings → Account → Delete account, or by emailing support@humanflow.pro.
Depending on where you live, some of these rights have specific names and deadlines: GDPR if you are in Europe or the UK, the DPDP Act in India, and the CCPA in California. Those pages tell you how to use them.
How to have your data deleted, and how long it takes
- In the app — Settings → Account → Delete account. It takes effect immediately: you are signed out everywhere and your history stops being accessible. What deletion covers, in full.
- By email — write to support@humanflow.pro, ideally from the address on the account. We acknowledge within 48 hours and complete the deletion within 30 days. If we need to confirm it is really you, we will say so in the acknowledgement rather than letting the clock run.
Deleting your HumanFlow account does not cancel a subscription bought through the App Store — Apple holds that, and you cancel it in your store settings. What we cannot delete is the billing record tax law requires us to keep; everything else goes.
Age
You must be at least 18 to use HumanFlow, or have your parent or guardian's permission. India's DPDP Act treats everyone under 18 as a child, and it applies to us because we offer this service to people in India — so we apply that threshold everywhere rather than picking the lowest one available to us. We do not knowingly collect data from children without verifiable parental consent, and we do not profile or advertise to them. We do buy ads on search engines to reach new customers, but we do not target advertising at anyone based on what they did on this site. If you believe a child has an account, email us and we will close it.
Cookies
We set as few as the product can work with, and analytics load only if you allow them. Full detail, including how to change your mind, is on our cookie policy.
Changes
We may update this policy; the "Last updated" date reflects changes.
Who is responsible for your data
The data controller is Lacewing Technologies LLC, a single-member limited liability company registered in the State of Wyoming, United States, filing number 2026-002051166, at:
Lacewing Technologies LLC30 N Gould St, Ste NSheridan, WY 82801United States
Our contact for privacy questions and complaints is Grievance Officer & Data Protection Contact, Lacewing Technologies LLC, at support@humanflow.pro.
Contact
Questions about this policy, a request to access or delete your data, or anything else — email support@humanflow.pro. We aim to reply within two working days.