Rogue Pen — Privacy Policy · Version 1.2 · Effective 27 October 2026

1. Introduction

Welcome to Rogue Pen.

Your privacy is important to us. This Privacy Policy explains how Rogue Pen ("Rogue Pen," "we," "us," or "our") collects, uses, stores, and protects your information when you use our website, applications, and related services (collectively, the "Service").

By using Rogue Pen, you acknowledge that you have read and understood this Privacy Policy.

If you have questions regarding this Privacy Policy, please contact us at realapertureai@gmail.com.

2. Information We Collect

Depending on how you use Rogue Pen, we may collect the following information.

Information You Provide

This may include:

  • Email address
  • Username
  • Password (stored securely using industry-standard hashing; we do not store plaintext passwords)
  • Payment information (processed by third-party payment providers)
  • Your written work and the material that supports it: manuscripts, chapters, screenplays and scenes, prompts and instructions, chat conversations with the writing assistant, story blueprints and outlines, character cards, story cards, glossary terms, style and worldbuilding settings, and journals
  • Text generated for you by the Service, which is stored alongside your work
  • Images you upload or generate, including cover and reference images
  • Audio generated by the read-aloud feature, retained temporarily
  • Customer support communications, including the Help & Feedback conversation itself, the reply address you give so we can answer you, and any screenshots or images you choose to attach. A screenshot of the writing screen contains your own manuscript text; it is sent only because you attached it, and it is readable by you and by our support staff.

We also derive data from your work in order to operate it. The most significant is embeddings: numeric representations of your chapters, stored in our database and used so the Service can find the relevant parts of a long manuscript. They are generated from your text and are kept with your book.

Automatically Collected Information

When you use Rogue Pen, we may automatically collect:

  • IP address
  • Browser type
  • Operating system
  • Device information
  • Pages visited
  • Session information
  • Error logs
  • Usage statistics
  • Date and time of access

This information helps us operate, secure, and improve the Service.

Cookies and Local Storage

Rogue Pen uses cookies and browser local storage to:

  • Keep you signed in
  • Remember your preferences
  • Remember acceptance of the Terms of Service and Privacy Policy
  • Improve performance
  • Enhance security

Most of this is browser local storage rather than cookies, and it stays on your device. We do not use advertising cookies, and we do not run third-party tracking or analytics scripts — see Section 7.

You can disable cookies through your browser settings, although some features may not function properly.

3. How We Use Your Information

We use your information to:

  • Provide the Service
  • Generate AI responses
  • Save your writing
  • Synchronize your content across devices
  • Process Writing Credit purchases
  • Respond to support requests
  • Improve reliability and performance
  • Detect fraud and abuse
  • Enforce our Terms of Service
  • Comply with legal obligations

We only collect information that is reasonably necessary to provide and improve Rogue Pen.

4. Your Writing and AI Content

Your writing belongs to you.

You retain ownership of all stories, prompts, journals, conversations, and other content you create using Rogue Pen.

We use your content solely to operate and provide the Service.

We do not claim ownership of your writing.

Rogue Pen does not train AI models on your content, and does not sell your writing to third parties.

Providing the Service does require sending your content to third-party AI providers. Section 5 explains exactly which, and is specific about what we have verified and what we have not.

5. AI Processing and AI Providers

Rogue Pen does not run its own AI models. To generate or analyse text we transmit your prompts and the relevant parts of your work to third-party providers over the internet. What is sent depends on the feature, and for writing features it ordinarily includes your instructions plus the surrounding manuscript context the model needs — earlier chapters or scenes, character and story cards, glossary terms and style settings.

Today your content may be sent to:

  • OpenRouter, which routes requests to the model that serves them. Writing and chat features go through OpenRouter, and it passes your content on to the underlying model provider for the model in use. The models configured today are supplied by Z.ai, TheDrummer and Anthropic.
  • Lovable's AI gateway, used to generate the embeddings described in Section 2 and to analyse a manuscript you import. The embedding model is supplied by OpenAI.
  • The read-aloud voice feature, which uses an OpenAI model when you use it. AI image generation also used an OpenAI model, but that feature is currently suspended, so no new content is sent for image generation.

What we have not verified. Each of these providers processes your content under its own terms, and those terms govern whether it retains content, for how long, and whether it may use content to improve its own models. We have not independently verified each provider's retention or training practices, and we do not currently send a provider-level instruction that would contractually forbid them. We therefore cannot promise that no third party retains or learns from content routed through them, and we do not claim zero retention. If that matters to your work, treat anything you send through an AI feature accordingly.

This is a limitation we would rather state plainly than paper over. What we can say is narrower and true: Rogue Pen itself does not train on your content, does not sell it, and sends it to these providers only to perform the action you asked for.

6. Third-Party Services

Rogue Pen may use trusted third-party providers to operate the Service.

The providers we rely on today, and what each one handles:

  • Supabase — database, file storage and authentication. Your account and all of your written work are stored here.
  • Cloudflare — hosting and delivery of the application.
  • Stripe — payment processing and subscription billing.
  • Resend — delivery of transactional email, such as the notification that a book has finished generating.
  • AI providers — as described in Section 5.
  • Lovable — the development and hosting platform used to build and publish the Service, and the AI gateway described in Section 5.

These providers receive only the information necessary to perform their services on our behalf. This list may change as the Service changes; Section 16 explains how we handle updates to this policy.

7. Analytics and Tracking

Rogue Pen does not run third-party analytics, advertising or session-tracking scripts. There is no analytics SDK, no advertising pixel and no cross-site tracking in the application.

We do keep our own operational records in order to run the Service — in particular a log of AI actions on your account, which records the feature used, the model, timing, token counts and the Writing Credits charged. That is what makes your credit balance auditable and lets us investigate a failed generation. It does not include a copy of your manuscript.

Our hosting and database providers keep their own server-side request logs, as described in Section 2.

8. Payments

Writing Credit purchases are processed by third-party payment providers.

Rogue Pen does not store complete payment card information.

Payment providers maintain their own privacy and security practices.

9. Data Security

We use commercially reasonable technical and organizational safeguards to protect your information.

These measures may include:

  • Encrypted connections (HTTPS)
  • Secure authentication, with passwords stored only as hashes
  • Row-level database access rules, so one account cannot read another account's work
  • Server-side authorization on the endpoints that read or write your content
  • Restricted administrative access
  • Operational logging of background failures

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your information only for as long as reasonably necessary to:

  • Provide the Service
  • Maintain your account
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

Deleted content may remain temporarily in secure backups before being permanently removed.

11. Account Deletion

Rogue Pen does not currently offer a one-click delete button inside the application. Account deletion is handled as a request:

  • Use the Contact Support page in the Help section, or email the support address shown there, and ask for your account to be deleted.
  • Send the request from the email address on the account. We need to be able to tell that the request is really coming from the account holder, and we may ask you to confirm before we act.

On deletion we remove your account and the work stored under it — books, chapters, screenplays, character and story cards, glossary terms, outlines, generated images and embeddings. Some records are not deleted with the account:

  • Billing records. Payment and invoice records are held by Stripe and are retained for accounting, tax and dispute purposes.
  • Backups and server logs. Copies may persist in routine backups and in our providers' server logs until those expire on their normal cycle.
  • Content already sent to AI providers. We cannot retract content that was previously transmitted to a third-party AI provider. Section 5 explains why.
  • Anything we are required to keep by law, or need to resolve a dispute or prevent fraud.

Submitting a request is not the same as the deletion being finished. We will confirm to you when it has been carried out.

12. Children's Privacy

Rogue Pen is intended only for individuals who are at least 18 years old.

We do not knowingly collect information from anyone under 18.

If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete that information.

13. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Request a copy of your personal data where applicable
  • Object to or restrict certain processing where applicable

How to exercise them with Rogue Pen as it works today:

  • A copy of your writing — you do not need to ask. Every book and screenplay can be exported from inside the app, in standard document formats, as often as you like.
  • Your account details — shown on, and editable from, your Profile page.
  • Deletion — see Section 11.
  • Anything else, including a copy of account data that is not covered by export, correction of something you cannot edit yourself, or an objection to processing — use the Contact Support page in the Help section, from the email address on your account.

We respond to these requests manually. We have deliberately not published a fixed response deadline here, because committing to one we have not staffed for would be worse than saying so; where a law that applies to you sets a deadline, that deadline governs.

14. California Privacy Notice

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), subject to applicable exemptions and legal requirements.

Where those laws apply, you may request access to, correction of, or deletion of certain personal information we maintain about you, and you may have the right to appeal or otherwise exercise additional rights provided by law.

Rogue Pen does not sell personal information.

Rogue Pen does not share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.

15. International Users

If you access Rogue Pen from outside the United States, your information may be processed and stored in the United States or other countries where our service providers operate.

By using the Service, you understand that data protection laws in those jurisdictions may differ from those in your country.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When significant changes are made, we may notify users through the Service or require acceptance of the updated Privacy Policy before continued use.

The "Effective Date" and version number at the top of this document indicate the current version.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

Rogue Pen

Email: realapertureai@gmail.com