Privacy Policy
Overview
bookmoth is a desktop application. Your projects, manuscripts, writing examples and brief are saved as files on your computer, or in a folder you choose to sync through your own cloud storage. bookmoth does not keep a server-side copy of your book.
When you use an AI feature, the relevant text is sent for processing through the connection you choose. This policy explains what leaves your device, who receives it and why.
What we collect
The desktop app does not send behavioural analytics from your device and requires no separate bookmoth account. We do not use your writing to train AI. When you use bookmoth ink, our relay processes your requests without logging or storing their prose, prompts or replies.
We hold the purchase and licence information needed to deliver and support your licence, including your email address and order references. LemonSqueezy is our payment processor and seller of record, and handles the billing and payment details you provide under its own privacy policy. Licence validation and ink also use device, balance and usage records, as described below.
Your own AI connection
With a Lifetime licence, you can use your own AI provider key instead of bookmoth ink. Your key is saved on your device; bookmoth does not receive it. When you use your own key, AI requests go directly from your device to your chosen provider, without passing through our relay. The provider handles the text under its own data policies.
bookmoth ink and the AI models we use
bookmoth ink uses Claude models from Anthropic, with no separate Anthropic account or API key needed. Your AI requests pass through our relay, hosted on Cloudflare, on their way to Anthropic. The relay checks your licence and deducts the cost from your ink balance.
The relay keeps licence and device-validation information, ink balances, purchase and credit records, and usage records such as the model, time and cost of requests. It does not log or store your prose, prompts or the AI's replies. Anthropic processes those requests under its own data handling terms, including its retention policies.
We also use these ink service records in private reporting to understand usage, trial activity and whether allowances are sufficient. Reporting links a pseudonymous licence reference to its merchant order. We use the customer name supplied by Lemon Squeezy to label that order in the private owner dashboard. Reporting records request dates, models, ink consumed, remaining balances, pack credits and requests blocked by insufficient ink or service limits. For new ink requests, it also records numeric counts of visible reply words and provider-reported input, output and cache tokens, the priced request cost, and whether the provider reply completed, reached a length limit or was interrupted. Supported app versions label the ink request as drafting, editing, analysis or other work; older or unidentified requests remain unclassified. Word counts describe reply text observed by the relay, not words saved or kept in a manuscript. Daily usage aggregates and numeric response records are kept for up to 365 days; cumulative usage totals and balance records remain with the licence ledger. Reporting does not contain manuscript text, prompts, AI replies, raw licence keys, email addresses or payment details. This service reporting is separate from optional website tracking. It observes ink requests, not manual writing or use through your own AI connection.
In Settings, Best quality uses Claude Opus 4.6, Balanced uses Claude Sonnet 4.6, and Fastest uses Claude Haiku 4.5. Drafting and the Editor use Balanced by default; planning, summaries and quick edits use Fastest. Your writing profile and book context guide drafting and revision.
Nuanced drafting uses Claude Opus 4.8 for chapter drafts, in place of your Drafting choice. It is off unless you turn it on, and works with ink or your own Anthropic key. It uses more ink or provider credit: estimated ink per chapter is about 680, compared with about 500 on Best quality and 300 on Balanced. Estimates vary with chapter length and context. Polish and your writing profile still use your Drafting choice.
What AI features send
AI features send the text needed for the task, which may include relevant manuscript passages, writing examples, your writing profile, brief, plan and codex entries. With ink or your own Anthropic key, this goes to Anthropic. Other cloud connections send it to the provider you select. Anthropic does not train on API inputs or outputs under its commercial terms; other providers have their own processing, retention and training policies.
In local-only mode, with a model running on your own computer, AI requests stay on that computer. A custom or network-hosted endpoint sends requests to that endpoint. If you choose a hybrid connection, some tasks use the cloud provider configured for that mode.
Imported manuscripts
Imported manuscripts are parsed on your device and saved as part of your project. AI-assisted import tasks, such as chapter summaries and codex extraction, send relevant text through your selected AI connection, following the same rules as other AI features.
Licence validation
When you activate bookmoth, your licence key and a generated device identifier are used to verify your licence with LemonSqueezy and register the device. Ink requests also use licence and device validation through our relay. These checks do not include your manuscript or project content.
Updates
The app periodically checks a public file on bookmoth.app to see whether a newer version is available. This is a simple file fetch and includes no identifying information beyond standard request headers.
Cookies on bookmoth.app
Optional website services stay off until you accept them in Cookie choices. Our private website stats measure pages, visible time, feature use, trial-button visibility and progress to checkout, trials and sales. Google Analytics and Ahrefs also measure visits, Meta measures advertising, and Lemon Squeezy affiliate tracking attributes referred purchases. If accepted, these services may receive your IP address, browser and device details, and pages visited, and may use cookies or similar technologies under their own privacy policies. Choose Reject to leave them off. You can reopen Cookie choices on any page and withdraw consent; turning services off after acceptance refreshes the page, so save any text first. We store your choice in browser storage for up to six months, with an essential rejection cookie as a fallback. Before acceptance, optional services stay off if your choice cannot be saved. If you withdraw while other pages are open, save any text and refresh those pages too to fully stop services already loaded there. Requested checkout services still work. This website tracking is separate from the ink service reporting described above; the desktop app does not send behavioural analytics from your device.
Our own journey measurement uses a random visit reference after you accept. It lives in tab storage, expires after 30 minutes of inactivity or at most 24 hours, and can be passed to Lemon Squeezy as checkout reference data so we can match a confirmed order or subscription to that visit. It is pseudonymous measurement, not session recording. We keep visit summaries and attribution for up to 90 days, with no stored IP addresses, device fingerprints, names, emails, writing samples, AI results or payment-card details in these stats. Only fixed page, offer, source, social-platform, campaign and device categories are accepted. Social-platform labels come from recognised referring sites or tagged links; full referring URLs are not retained. If you accept the additional country and attention measurements, we also keep approximate country and first-level region from Cloudflare’s incoming network metadata, estimated section viewing and mouse-hover time, keyboard focus time, click and scroll thresholds, video positions reached, page-speed samples and generic error categories. We do not collect precise location, city, postcode, GPS data, pointer trails, typed content, error messages, filenames or stack traces. Country and region may be inaccurate when networks or VPNs route traffic elsewhere. These additional observations use the same 90-day retention and withdrawal process. Earlier basic measurement choices do not enable these additions until you choose Accept against the updated explanation; Keep current choice preserves your existing basic choice. Unsupported browser measurements are absent, not recorded as zero. Browser privacy signals can prevent measurement, so these figures are not a complete count of people.
Rejecting or withdrawing consent stops new browser measurement and removes the current tab's visit reference. Where the withdrawal request reaches our service, it also removes that visit's stored summary and checkout attribution. The hosted payment form is not reloaded. A checkout already opened without measurement remains usable but may be unattributed. Minimal verified billing references, plan states, currency and amounts are kept separately for reconciliation and duplicate prevention, without copying customer contact or payment details into the stats. These billing records do not establish an individual browsing history.
bookmoth companion (iOS)
The bookmoth companion app for iPhone and iPad works the same way. It reads and writes files inside a folder you choose in your own iCloud Drive, the same folder your desktop app syncs to. There is no bookmoth server in this exchange: your device talks directly to Apple's iCloud, and the desktop app on your Mac talks directly to the same folder. We never see, store, or have access to your manuscripts through this sync.
The companion app collects no analytics and requires no separate bookmoth account. Its AI features use the connection selected in Settings: bookmoth ink requests pass through our relay to Anthropic; your own Anthropic or OpenRouter key sends requests directly to that provider. Relevant book context, including your writing profile and passages needed for the task, is sent with the request. Connection credentials are kept in the iOS Keychain. Cloud-folder sync and the AI connection are separate.
Contact
If you have questions about how bookmoth handles your data, email us.