Is my writing private? How Storywriting protects your stories
An unfinished story is one of the most personal things you can write. Before you trust any app with one, you should know exactly who can read it, where it lives and what happens to it. Here are plain answers.
Who can see my stories?
Only you, unless you choose otherwise. Every project is private when you create it. The database itself checks who is asking before it returns anything (this is called row-level security), so another account can’t open your project even if it somehow knew where to look.
There are only two ways someone else can see your writing, and you start both:
- You invite them to a project as an editor or a viewer. You choose the role, and you can remove them at any time. Only the owner of a project can invite people, delete it or change its settings.
- You create a share link for one draft, timeline or cloud map. A share link is read-only: people who open it can read, never edit.
Where is my writing stored?
Your account and your projects are stored in a Postgres database run by Supabase, and the site itself is served by Cloudflare. Everything travels between your browser and our servers over an encrypted connection (HTTPS), and the stored data is encrypted at rest by our database provider.
To be precise about what that means: your writing is protected on the way and on the disk, but it isn’t “end-to-end encrypted”, because the app has to read it to show it back to you, sync it to Google Docs or correct it when you ask. We use it for exactly that and nothing else.
What we will never do
- Sell your data, or share it with advertisers.
- Use your stories for advertising of any kind.
- Use your writing to train AI models.
- Claim any rights over what you write. Your story is yours, entirely.
What about the AI tools?
The AI tools (auto-correct, Fix grammar and translation, part of Storywriting Pro) only run when you use them. When they do, only the text being corrected is sent to our AI provider, Google’s Gemini API, and the corrected text comes straight back. We don’t keep a separate copy of it, and your writing isn’t used to train AI models. If you never use these tools, your text never goes to an AI at all. More in AI that helps you write, not AI that writes for you.
What about Google Docs sync?
Google Docs sync is off unless you turn it on. If you do, Storywriting asks Google for one narrow permission: to create and edit the Docs it makes for you. It can’t see, open or change any other file in your Google Drive. You can disconnect it at any time in Settings.
What about payments?
Storywriting Pro is sold through Paddle, which handles the payment. Your card details go to Paddle, never to us; we only learn that your plan exists and when it renews.
Can I take my writing with me, or delete it?
Yes. You can export any story or screenplay as a PDF, a Word file or plain text whenever you like, and timelines too. If you want your account and everything in it deleted, write to contact@storywritingapp.com and we’ll remove it.
Good habit: use a password you don’t use anywhere else, or sign in with Google. Most leaks of private writing don’t come from the app at all, but from a reused password.
The full details are in our privacy policy. If anything there is unclear, ask us: contact@storywritingapp.com.
