Say It Well
Privacy Policy
Last updated: May 2026
Who we are
Say It Well is an AI-powered message writing assistant made by Fundy Digital, based in Long Island, New York. Questions? Email us at [email protected].
This app-specific privacy policy is the controlling document for Say It Well. Our parent privacy policy provides additional company-wide information.
What the app does
Say It Well helps you write personal and professional messages -- congratulations, thank-you notes, resignation letters, apologies, and more. You answer a few guided questions, then the app generates multiple tone variations in text, email, or official letter format using AI.
What we collect
| Data | Purpose | Stored where |
|---|---|---|
| Your answers to guided questions (user-generated content) | Sent to AI backend to generate messages | Transmitted only; not stored on our servers |
| Generated messages | For you to review, edit, and copy | Your device only |
| Install ID (persistent UUID) | Rate limiting and abuse prevention | Device secure storage; sent with each request |
| Firebase anonymous UID | Subscription verification | Firebase Authentication |
| App Check attestation token | Verifies requests come from a genuine app install | Short-lived JWT; not stored |
| Crash reports | Bug fixes and stability | Firebase Crashlytics |
| Purchase history | Subscription management | Apple App Store / Google Play |
We do not collect your real name, email address, phone number, contacts, or location.
AI use
This app uses AI
Say It Well uses Anthropic's Claude AI model to generate message drafts from your answers. Your question answers are sent to Anthropic's API via our Cloudflare Worker proxy to produce the messages. We do not use your data to train AI models. Anthropic may retain API inputs for up to 30 days for safety and abuse monitoring, after which they are deleted. See Anthropic's privacy policy.
How your data is used
- +Your answers are used solely to generate message drafts for you.
- +Generated messages are stored only on your device.
- xWe do not sell, share, or license your data to any third party.
- xWe do not display advertising.
- xWe do not store your message content on our servers. Our proxy logs only request status codes and content length -- never the content itself.
Third-party services
- *Anthropic (Claude API) -- processes your question answers to generate messages. Anthropic may retain inputs for up to 30 days for safety monitoring. Governed by Anthropic's Privacy Policy.
- *Cloudflare Workers -- our API proxy. Processes your request (including IP address and metadata) to route it to the AI backend. Governed by Cloudflare's Privacy Policy.
- *Firebase Crashlytics -- anonymous crash reporting. Does not include your message content. Governed by Firebase Privacy Policy.
- *Firebase App Check -- verifies that requests come from a genuine, unmodified install of the app using platform attestation (Play Integrity on Android, App Attest on iOS).
- *Firebase Authentication -- creates an anonymous user ID for subscription verification. No personal information (name, email) is collected.
- *Apple App Store / Google Play -- processes subscription purchases. Purchase history is managed by the respective store platform.
Data retention
Your question answers are transmitted to the AI backend only during generation. Our proxy does not store or log the content. Anthropic may retain API inputs for up to 30 days for safety monitoring. Generated messages are saved locally on your device until you delete them or uninstall the app. The install ID persists in platform-secured storage (iOS Keychain / Android EncryptedSharedPreferences) until you use "Delete All Data" in Settings.
Legal basis for processing (GDPR)
- *Contract performance (Art. 6(1)(b)) -- processing your answers to generate messages is necessary to deliver the service you requested.
- *Legitimate interest (Art. 6(1)(f)) -- crash reporting, rate limiting, and abuse prevention protect the service for all users.
Children's privacy
Say It Well requires users to be at least 13 years old. An age gate verifies this on first launch. If we learn that a child under 13 has used the app, we will take steps to delete any associated data. If you believe a child under 13 is using the app, please contact us.
Your rights
EU/UK (GDPR): You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to withdraw consent at any time by using "Delete All Data" in Settings or by contacting us. To exercise any right, email [email protected].
California (CCPA/CPRA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale or sharing. We do not sell or share your personal information. Categories of PI collected: identifiers (install ID, anonymous UID), internet activity (crash logs), and user-generated content (question answers transmitted for AI generation). To submit a request, email us or use an authorized agent.
Data breach notification
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours (as required by GDPR) and in accordance with applicable state laws.
Changes to this policy
If we make material changes, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance.
Contact
Fundy Digital
Long Island, New York
[email protected]