Privacy Policy
Last updated October 11, 2026
Most of Gwion runs in your browser. This policy explains what leaves it, why, and for how long it is kept.
Who we are
Gwion is operated by Morais Labs LLC, a New York limited liability company doing business as Gwion ("we"). We are responsible for the personal information described here. Contact: legal@gwion.app, or 418 Broadway, Ste N, Albany, NY 12207, USA.
What we collect
Your account
Your email address, how you sign in (email and password, or Google, in which case also your name), your plan, and whether your email is confirmed. Passwords are handled by our sign-in provider and never seen by us. We use this to run your account and contact you about it.
Your documents
Your library, notes, highlights, reading position and study history are stored in your browser, not on our servers. Four features need our servers, and send only what they need:
| Feature | What is sent | What happens to it |
|---|---|---|
| Section finding, for a PDF with no table of contents or headings of its own | The PDF | Processed and deleted; working files are removed within 6 hours |
| Study tools | The section's text, title and figures | Sent to Google's Gemini AI service; the result is kept for 30 days against the section's content, not your account |
| Narration | The text to read aloud | Turned into speech on our server; nothing is stored |
| Equation recovery | An image of the page | Read by a text-recognition model on rented computing; deleted once read |
Please don’t put confidential records or sensitive personal information about other people through these features. Your documents are never used to train AI models: we use Gemini’s paid service, under whose terms Google does not train on your content.
Usage
For each account we count, per month, the study sections, narration time and pages re-read that your plan’s allowances apply to. We also record simple events, such as a document being opened (never its name or contents) or a study tool being used, to see which features are useful. When you answer Got it or Missed it, we also record how likely the study coach thought you were to remember and whether you did, as numbers only, to check its estimates. These are kept on our own server, deleted after 12 months, and you can switch them off with Usage statistics in the account menu.
Payments
Paid plans are sold by Stripe as merchant of record. Stripe handles your payment details; we receive only references to your customer record and subscription, and your plan.
Errors and logs
When something fails, we record a technical error report, which never includes document content, and our servers keep standard access logs (including IP address) for security.
Who we share it with
Only the providers that run parts of Gwion for us, under contracts limiting what they may do with it: sign-in and website hosting (Google Firebase), the Gemini AI service (Google), payments (Stripe), cloud computing and server hosting, error monitoring, and email. We may also disclose information when the law requires it, or as part of a sale of the business, in which case this policy continues to apply. We do not sell or share your personal information for advertising.
Cookies
None for advertising or tracking, so there is no cookie banner. Your browser’s storage keeps you signed in and holds your library on your device.
How long we keep it
| Information | Kept for |
|---|---|
| Account and monthly usage counts | Until you delete your account |
| A deleted account’s usage that month, against a hashed form of its email | Until the end of that month |
| Usage statistics | 12 months |
| Study-tool results | 30 days |
| Access logs and error reports | Up to 30 and 90 days |
| Backups of our account database | 14 days |
| Payment and tax records | As long as the law requires, held by Stripe |
Your rights
You can delete your account, and what we hold for it, from the account menu at any time. One thing is kept briefly: that month’s usage counts, stored against a hashed form of your email address rather than the address itself, until the end of the month. This stops the free allowance being reset by deleting an account and signing up again with the same email, and it is then deleted. You can also ask us for a copy of your information, or to correct or delete it, at legal@gwion.app; we reply within 30 days.
EEA and UK: we rely on contract to provide Gwion, on legitimate interests to secure and improve it (including the usage statistics you can switch off), and on legal obligation for tax records. You have rights of access, rectification, erasure, restriction, portability and objection, and may complain to your data protection authority. Information is processed in the United States; providers that transfer it use the European Commission’s standard contractual clauses or equivalent safeguards.
California: we do not sell or share personal information, and you have the rights to know, correct and delete it without being treated differently.
Children
Gwion is for people aged 13 and over; under-18s need a parent’s or guardian’s permission to buy a plan. Accounts found to belong to someone under 13 are deleted.
Changes
We will update this page when our practices change, and tell you by email or in the app before any significant change takes effect.