WordiPrivacy Policy
Last updated: 8 October 2026
This policy explains what Wordi ("we", "us") collects when you use wordi.net and Wordi Workspace (the "Service"), why we collect it and the choices you have.
What we collect
- Account data: your email address and an encrypted password.
- Content you create: notes, memos, bookmarks, flashcards, tasks, goals, habits, health and money entries and anything else you add to your workspace.
- Technical data: basic request logs (IP address, browser, time) kept for security and debugging.
We do not sell your data and we do not use it for advertising.
How we use it
- To run the Service and show your workspace back to you.
- To run AI features you use, such as summaries, reviews and study plans.
- To keep the Service secure and fix problems.
- To reply when you contact us.
AI processing
When you use an AI feature, the content needed for that request is sent to our AI provider, Anthropic, to generate a response. Under Anthropic's commercial terms, data sent through the API is not used to train their models. AI results are stored in your workspace so you can edit or delete them.
Service providers
- Supabase — database, authentication and file storage.
- Cloudflare — DNS, network security and email routing.
- Anthropic — AI processing for features you use.
The application itself runs on a virtual server we manage. Providers only process data to deliver their part of the Service.
Your access tokens
If you create an API or MCP token, we store only a cryptographic hash of it. Anyone holding the token can act on your workspace, so keep it private and revoke it from Settings when you no longer need it.
Retention and deletion
Your content stays until you delete it or close your account. Email [email protected] to export your data or delete your account; we remove account data within 30 days, except where we must keep records by law.
Security
Data is encrypted in transit (HTTPS) and each workspace is isolated with row-level security in the database. No system is perfectly secure, and we will notify affected users without undue delay if a breach affects their data.
Children
The Service is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect their data.
Changes
We will update this page when our practices change and note the date above. Significant changes will be announced to account holders by email.