Privacy Policy
NOVELISTAI · UPDATED AUGUST 24, 2026
01Introduction
M1 Insights Inc. ("M1 Labs," "we," "us," or "our") operates NovelistAI and is the data controller for the personal information described below. This policy explains what we process, why, where it is stored, and the choices you have. Contact us at info@m1labs.io with any privacy questions.
02Information We Process
NovelistAI processes: (a) captured page images and book cover images; (b) OCR-extracted text, scene titles, chapter names, notes, book metadata, and analyses; (c) your own writing, practice attempts, and exercise context; (d) novel projects, Story Bible data, generation prompts, and preferences; (e) AI-generated prose, titles, and feedback; (f) an anonymous identifier and session token; (g) subscription and entitlement information; and (h) feedback you submit. The App does not collect your name, email address, or phone number.
03How We Process Information by Feature
Page capture: OCR runs on your device using Apple Vision; we do not send captured page images to our servers. Analysis and proofreading: extracted text is sent through our backend to Google Gemini for craft analysis and proofreading. Writing exercises and critique: your attempt text, exercise context, and technique focus are sent through our backend to Google Gemini for critique. Scene and novel generation: your prompts, preferences, Story Bible continuity data, and previous-scene text are sent through our backend to Google Gemini to generate scenes and update continuity. Authentication and fair use: an anonymous Supabase identifier and session token authenticate requests and enforce per-account rate limits. Subscriptions: Apple and RevenueCat process purchase, receipt, and entitlement data. Feedback: submissions and votes are sent to WishKit.
04Where Your Information Is Stored
NovelistAI is local-first. Your library — including captured images, extracted text, scenes, notes, projects, and Story Bible data — is stored on your device using SwiftData and, when iCloud is available, mirrored to your private CloudKit database (container iCloud.com.m1insights.scenesnap). Synced data counts against your personal iCloud storage. We do not operate a backend database that stores your manuscript content; our backend processes requests in memory and does not retain your library.
05Service Providers & AI Processing
We use: (a) Supabase for anonymous authentication; (b) Render to host our backend; (c) Google Gemini to generate AI analysis, critique, proofreading, and scenes; (d) Apple CloudKit for private iCloud sync, StoreKit for purchases, and Apple Vision for on-device OCR; (e) RevenueCat for subscription and entitlement management; and (f) WishKit for feedback and feature requests. AI requests are processed by Google under its applicable API terms and data-processing documentation; we do not use your content to train our own models. We do not sell your personal information and do not use an analytics or advertising SDK.
06Data Retention & Deletion
Server logs record request metadata such as text length, request type, book/chapter identifiers, technique focus, and generated titles/word counts for security, debugging, and fair-use enforcement, and are retained for a limited period. We do not store your manuscript in a backend database. You can delete library records at any time within the App; deletions remove them from your device and should propagate to your private iCloud database. To request deletion of your anonymous identifier or server-side records, contact us at info@m1labs.io.
07Your Choices & Rights
You can delete library content within the App, disable iCloud sync through your device settings, manage or cancel subscriptions through your Apple ID, and refrain from using feedback features. Subject to applicable law, you may request access, correction, deletion, or a copy of your personal information by contacting info@m1labs.io. We will respond within a reasonable timeframe and may need to verify your request.
08Security
Transmission to our backend uses HTTPS/TLS. Your library is stored on your device and in your private iCloud database, which Apple secures in transit and at rest; see Apple's iCloud security documentation. We restrict access to our backend and logs. No method of transmission or storage is completely secure.
09International Transfers & Jurisdiction Rights
NovelistAI is operated from Canada, and our backend and service providers may process information in other countries. Canadian residents have rights under PIPEDA. California residents have rights under the CCPA/CPRA. Residents of the EEA, UK, and Switzerland have rights under the GDPR/UK GDPR, including access, rectification, erasure, portability, and objection. To exercise any of these rights, contact us at info@m1labs.io.
10Children's Privacy
NovelistAI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at info@m1labs.io and we will take steps to delete it.
11Changes to This Policy
We may update this Privacy Policy. We will update the "Last Updated" date and, for material changes, notify you in the App or on our website. Continued use after changes constitutes acceptance.
12Contact
For privacy questions or to exercise your rights, contact us at info@m1labs.io.