Privacy Policy

Effective 13 October 2026

This policy explains what information Graphite (“Graphite”, “the app”), made by AROICE (“we”, “us”), handles when you use the app at write.aroice.in or this website at graphite.aroice.in, and what happens to it.

1. Your writing

Graphite is a local-first app. Everything you write is processed in your browser on your own device. Depending on the library you choose, your documents are stored:

• In this browser, using your browser's built-in storage (IndexedDB). It stays on that device and is removed if you clear your browser's site data.
• In a folder on your computer, using your browser's File System Access permission. Graphite reads and writes only the folder you select.
• In your Google Drive, if you connect it (see section 3).

We do not receive, store, or have access to your documents in any of these cases. Features such as Style Check, Syntax Highlight, search, word counts, streaks and exports all run on your device.

2. Settings stored on your device

Graphite saves your preferences (theme, font, goals, writing history for streaks, the library you last used) in your browser's storage so the app remembers them. This data stays on your device and is never sent to us. Graphite does not use cookies.

3. Google Drive and Google user data

Connecting Google Drive is optional. If you choose to, Graphite asks Google for these permissions:

• https://www.googleapis.com/auth/drive.file: lets Graphite create, open and save the files it made itself or that you open with it. Graphite cannot see or access any other files in your Drive.
• openid and email: lets Graphite show which Google account is connected.

How we use this data. Graphite uses access to your Drive only to save your documents as plain Markdown (.md) files in a folder named “Graphite” in your Drive, and to list, open, rename and delete those files when you ask it to. Your email address is shown in the app so you know which account you're writing in, and is remembered in your browser so Graphite can offer to reconnect next time.

How it is stored. All requests go directly from your browser to Google. The access token Google issues is held in memory only, expires within an hour, and is never saved or sent to us. Your email address stays in your browser's storage and is deleted when you disconnect Google Drive in Graphite. AROICE operates no server that receives your Google data.

Sharing. We do not share, transfer, sell or disclose Google user data to anyone. No person at AROICE can read it, because it never reaches us.

AI and machine learning. Graphite does not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models.

Limited Use. Graphite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access. You can disconnect Google Drive inside Graphite at any time, and revoke Graphite's access from your Google Account's third-party connections page. Files Graphite created stay in your Drive until you delete them.

Google's own handling of your data is covered by the Google Privacy Policy.

4. Share links

When you create a share link, your document is compressed into the part of the URL after the #. Browsers don't send that part to any server, so we never see the content. Anyone who has the link can read the document, so share it only with people you trust.

5. Images in your documents

If a document embeds an image from another website, your browser loads that image from that site, which may see your IP address, as with any web page. Shared links hold back remote images until the reader chooses to load them.

6. Hosting

The app and this website are static files served by our hosting provider. Like any web server, the provider may keep short-lived technical logs (such as IP address, browser type and the time of the request) to deliver and protect the service. We don't use these logs to identify or profile you.

7. Analytics, ads and tracking

None. Graphite has no analytics, advertising, tracking pixels or third-party scripts, apart from Google's sign-in script, which loads only when you choose to connect Google Drive.

8. Your choices and rights

Because your data lives on your device or in your own Drive, you're in control of it: you can export, edit or delete any document at any time, clear Graphite's data through your browser's settings, and revoke Google access as described above. If you have a question or request about your data, contact us and we'll help. We hold no personal data about you to return or erase.

9. Children

Graphite is not directed at children under 13, and we do not knowingly collect information from children.

10. Changes

If we change this policy, we'll update this page and the effective date above. If a change affects how Google user data is used, we'll say so in the app before it takes effect.

11. Contact

AROICE, India. Email hello@aroice.in.