Sendable Privacy Policy

Sendable is an Android app that corrects the grammar and spelling of text you choose. This policy explains what data the app handles and where it goes. It is short on purpose.

The one rule

Sendable reads text only when you tap Fix. It never runs in the background, never reads the screen, and never sees what you type. That is true for the selection-menu Fix action, the share-sheet action, and the Sendable Fix bar keyboard strip.

Your text

Your text. When you tap Fix, the selected text is sent to Sendable's server and forwarded to Google's Gemini API to produce the correction. Sendable does not store, log, or read your text. Google processes it under the terms of the Gemini API paid service and does not use it to train its models.

That is the only path your text takes, and it is the same for every user. The server forwards the text over HTTPS, returns the correction, and keeps only counters.

Who you are to the server

Without an account

The app generates a random identifier the first time it runs (an "install ID"). It is not derived from your device, your Google account, or an advertising ID. It is sent with every request so the server can apply the daily allowance. The server stores, per install ID, how many fixes you made on each day and a one-way hash of your network address (used only to spot abuse, deleted after 14 days). Uninstalling the app discards the install ID.

With an account

Plans that need to follow you across phones use an account. Sign-in is handled by Clerk (clerk.com), which acts as a processor for Sendable. Sendable's server then stores:

• your account's stable ID and email address, for support and to tell users apart;
• your plan, where it came from, and when it expires;
• how many fixes you made on each day (a number), used to apply the plan's daily limit;
• a log of plan changes, so we can answer "I paid but I'm on the free plan".

The install ID is still sent with signed-in requests, for the same abuse checks.

Data stored on your phone

• Install ID, plan and usage numbers reported by the server, stored with Android's encrypted preferences. On devices where the Android keystore is unavailable the app falls back to app-private plain storage and says so in Settings. Other apps cannot read it in either case.
• Your sign-in session (when signed in), managed by the Clerk SDK in its own encrypted storage.
• History: your last 50 corrections (original and corrected text) and which entry point they came from, so you can review what changed. Stored only on the phone. You can clear it from the History screen.
• Settings: tone preset, wait time, and a cached copy of the price list.

None of this is synced or backed up to us. Android backup is disabled for the app.

The Fix bar keyboard

When you enable the Sendable Fix bar, Android shows a system warning that keyboards may collect the text you type. The Fix bar has no keys. It cannot see typing. It reads the contents of a field only when you tap Fix, and only for the field that is currently focused. It refuses to read password fields and fields that opt out of personalised input.

What Sendable does not collect

No analytics, no crash-reporting SDK, no advertising, no device identifiers, no location, no contacts. Crash and ANR statistics come from Google Play's built-in reporting, which is governed by Google Play's own policy.

Deleting your data

Settings → Delete all data removes everything on the phone, signs you out, and deletes your rows on Sendable's server (both the install ID's counters and, if signed in, your account rows). Deleting your account in Clerk has the same effect on the server within a minute. Uninstalling the app removes the on-phone data; the server's anonymous counters expire on their own within 14 days.

Children

Sendable is not directed at children under 13 and does not knowingly collect information from them.

Changes

If the data flow changes, this policy will be updated and the date above changed. Material changes are called out in the app's release notes.

Contact

Questions about this policy, or a request to delete your data: hello@sendable.app. Settings → Delete all data removes everything immediately without needing to contact anyone.