Privacy Policy

Encribe (“we”, “our”, “the Platform”) is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

a) Account Information

When you create an account, we may collect your display name, email address, and profile information you choose to provide.

b) Keystroke Biometric Data

Encribe collects keystroke timing and dynamics data as you type. This includes the timing intervals between key presses, key hold durations, and typing rhythm patterns. This data is used as:

• The primary method of authenticating your identity (replacing traditional passwords)
• A means to verify that content was written by a human, not generated by AI or automated tools
• A mechanism to detect pasted or copied content

Keystroke biometric data is classified as sensitive personal data. We process it under your explicit consent, which is required to use the Platform.

c) Content Data

We store the books, manuscripts, and text you create on the Platform, along with associated metadata such as timestamps, edit history, and live stream recordings.

d) Usage Data

We collect information about how you interact with the Platform, including pages visited, features used, session duration, device type, browser, and operating system. This data is used to improve the Platform and is not linked to your biometric profile.

e) Device Information

We collect device identifiers and keyboard layout information to improve biometric authentication accuracy across your devices.

2. How We Use Your Data

• Authenticate your identity via keystroke biometrics
• Verify that published content is human-written
• Sync your content across devices
• Provide live streaming and playback features
• Improve the accuracy of our detection algorithms
• Communicate with you about your account, updates, and support
• Comply with legal obligations

We do not use your keystroke biometric data for advertising, profiling for marketing purposes, or selling to third parties.

3. Data Processing & Storage

Keystroke biometric data is processed locally on your device whenever possible. Only the verification result and an encrypted biometric template are transmitted to our servers. Raw keystroke timing data is not stored on our servers after processing.

Your content and account data are encrypted in transit (TLS) and at rest (AES-256). We use industry-standard security practices to protect your data.

Data is stored on servers located in regions compliant with applicable data protection regulations. We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

4. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who help us operate the Platform (hosting, infrastructure) under strict data processing agreements
• Law enforcement or regulatory authorities when required by law or to protect the safety of our users
• Other users: only the content you choose to publish publicly and your public profile information

5. Your Rights

Depending on your jurisdiction, you have the right to:

• Access: request a copy of all personal data we hold about you (self-service via account profile download button)
• Rectification: correct inaccurate personal data (limited to data provided by the user)
• Deletion: request deletion of your personal data and account (self-service via account profile deletion button)
• Export: download your content and data in a portable format (self-service via account profile download button)
• Withdraw consent: revoke consent for biometric data processing (this will require account turning read-only, as biometric authentication is essential to the Platform)
• Object: object to certain processing activities (such as not train on your data, must opt out)
• Lodge a complaint: file a complaint with your local data protection authority

You can exercise the two most important of these rights yourself, at any time, without contacting us. From your profile, under Privacy & data, you can:

• Download my data: export everything we store about you (account details, raw keystroke data, your books and documents, posts, and mail) as a single archive.
• Delete my account: permanently delete your account and its associated data, including your biometric data. Deletion takes effect immediately and signs you out. Only records we are legally required to retain are kept.

To exercise any other right, or if you need help, contact us at . We will respond within 30 days.

6. Cookies

Encribe uses essential cookies required for the Platform to function (session management, authentication state). We do not use advertising or tracking cookies. No cookie consent banner is required for essential cookies under most jurisdictions.

7. Children’s Privacy

Encribe is not intended for use by children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete that data promptly.

Parental and guardian control

We recognise that a word processor which verifies authorship and discourages plagiarism can be a valuable educational tool, and that a child may create or use an account without their parent or guardian being aware.

If you are a parent or guardian and you discover that a child in your care is using Encribe, you (or the child, with your involvement) can resolve this directly and immediately using the self-service tools built into the account, under Privacy & data in the account profile:

• Download my data exports everything stored about that account, so you can review exactly what was collected.
• Delete my account permanently deletes the account and its data, including biometric data, and takes effect immediately.

We encourage parents and guardians to use these tools as the primary and fastest way to review or remove a child’s data. Because these controls are available in the account itself and act instantly, the decision of whether the account should continue to exist, and the responsibility for exercising that decision, rests with the parent, guardian, or other person responsible for the child. You may also contact us at at any time for help, and we will act on verified requests to delete a child’s data.

8. International Data Transfers

If you access the Platform from outside the region where our servers are located, your data may be transferred internationally. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

• Email:
• Contact page: encribe.com/contact