Your writing.
Your data.
What Emend reads, what leaves your PC, what we keep and for how long.
Emend's privacy policy. Last updated 7 October 2026. Questions go to privacy@getemend.com.
Emend is a writing assistant for Windows, made and run by H.Sami in Jordan. "Emend", "we" and "us" mean H.Sami and anyone who works on Emend. H.Sami is responsible for the personal data described here. This policy explains what Emend reads, what leaves your PC, what we keep and for how long.
The short version
- Spelling and grammar checks run on your PC. On the free plan, your text never leaves your computer.
- AI features send your text to our server and on to an AI model, an OpenAI model run by Microsoft Azure in the EU, reached through OpenRouter, to get suggestions and rewrites. We never store or log that text, and neither OpenRouter nor Azure keeps it or trains on it (see below).
- We keep your account: your email address, your plan, your signed-in devices, and daily counts of how much AI you used. We never keep what you wrote.
What Emend reads on your PC
Emend reads the text of the field you're typing in only when you ask it to, with the check or rewrite shortcut, the tray menu or the card's buttons. It doesn't watch what you type in the background. When you accept a fix, Emend writes it straight into the field. It never uses your clipboard.
Emend doesn't read password fields, password managers or terminals.
What stays on your PC
- Spelling and grammar checking (Harper) runs entirely on your PC and sends nothing anywhere.
- Your settings, personal dictionary and custom styles are in a file in your Windows profile. Uninstalling Emend deletes it.
- Your sign-in is a session token, stored on your PC in a file that Windows encrypts for your account. Uninstalling Emend deletes it.
- Recent AI results are kept in memory while Emend runs, so text you haven't changed isn't sent again. They're never written to disk.
- A diagnostic log (
%LOCALAPPDATA%\Emend\diag.log) is written only while you have Diagnostics on in Settings › About, which turns itself off after 24 hours, or while Emend runs with theEMEND_DIAG=1setting. It records the apps you checked text in, the steps, timings and error codes, never your text. It stays on your PC unless you send it to us. - A crash log (
%LOCALAPPDATA%\Emend\crash.log) gets a short note if Emend crashes: its version, the time and where in Emend's code it stopped. Never your text. It also stays on your PC unless you send it to us.
What leaves your PC
To sign in. Everyone signs in once, including on the free plan. You give us your email address, or sign in with Google.
- Email sign-in: we email you a one-time code through Resend, our email service.
- Google sign-in: Google tells us your email address and an account ID. We don't get your password or anything else from your Google account.
Emend also sends your PC's name (for example "DESKTOP-1234 (Windows)"), so you can tell your signed-in devices apart.
For AI features (Pro). When you run an AI check or a rewrite, Emend sends the paragraphs involved to our server over an encrypted connection. With them go your writing goals, the English variant and kinds of suggestions you chose, the style or instruction you chose, and the app's version. Our server sends the text and instructions to the AI model through OpenRouter and passes the results back to you.
- We don't send OpenRouter or Azure your email address, your name or your account ID.
- Our server never stores or logs your text or the results. Once your results are sent, the text is gone from our server.
Each request to our server carries the app's version, so we can tell very old versions to update.
What we keep
| What | Why | How long |
|---|---|---|
| Your email address, and your Google account ID if you use Google | Your account | Until you delete your account |
| Your plan (Free or Pro) | To know which features you get | Until you delete your account |
| Each signed-in device: its name, when you signed in, when it was last used | So you stay signed in, and can see where you are | Until you sign out on that device, delete your account, or don't use Emend on it for 90 days |
| Per day: how many AI requests you made, how much text they used (counted in tokens), and what they cost us | To apply the fair-use limits on Pro and to run the service | 13 months, or until you delete your account |
| Your IP address, when you start signing in or ask for a sign-in code | To stop abuse of sign-in | 1 hour |
| Your email address, when you ask for a sign-in code | To limit how many codes one address gets in a day | 24 hours |
| Sign-in codes and session tokens | To sign you in | Stored only in a scrambled (hashed) form that can't be used to sign in. Codes expire within minutes |
Our server's logs record which kind of request was made, whether it worked, how long it took and your account number. They never record your text, your IP address or what your app sent.
Backups. Our server keeps a copy of its database from each night for 14 days, OVHcloud keeps backups of the server for a shorter time, and we keep a weekly copy on an encrypted computer of ours for 30 days. They hold everything in the table above. When you delete your account, or something above reaches the end of its time, it can stay in those backups for up to 30 days longer, until they're replaced. We only use backups to recover from a failure, and if we ever restore one, we delete again any account that asked to be deleted.
We don't sell your data, show ads, or use your text to train AI models.
How we protect it
- Everything between Emend and our server is encrypted (HTTPS, TLS 1.2 or newer).
- Sign-in codes and session tokens are stored only as keyed hashes, so a copy of our database can't sign anyone in.
- The database can't be reached from the internet. Only our server talks to it.
- The weekly copy of the database is kept on an encrypted disk.
The AI model: OpenRouter and Microsoft Azure
AI features use an OpenAI model that Microsoft runs on Azure in the EU. Our server reaches it through OpenRouter, a company in the United States that passes each request on to Azure and the answer back.
- Nobody keeps your text. Every request we send requires zero data retention: OpenRouter only passes it to an endpoint that keeps neither the text nor the answer, and fails the request rather than send it anywhere else. OpenRouter doesn't store the text or the answer itself.
- Nobody trains on it. Neither OpenRouter nor Azure uses what we send to train or improve models.
- What OpenRouter does keep is a record of each request without its content: when it was made, which model answered, how many tokens it used, how long it took and what it cost. To rank models, it also sorts a small sample of requests into topics, using a model that keeps no data, and keeps only the topic, never tied to our account.
- Where it goes. Azure runs the model in the EU. On the way, a request may pass through OpenRouter's systems outside the EU.
If you don't want your text to leave your PC, use Emend without AI features: spelling and grammar checks never send your text anywhere.
OpenRouter's policies: https://openrouter.ai/privacy and https://openrouter.ai/terms
Who else handles your data
| Who | What for | What they get |
|---|---|---|
| OpenRouter (United States) | Passes AI requests to the AI model | The text you check or rewrite, and your instructions, which it passes on without keeping. It keeps a record of each request without its content |
| Microsoft Azure (EU), running an OpenAI model | AI suggestions and rewrites | The same text and instructions, which it doesn't keep |
| OVHcloud (United Kingdom) | Runs our server and database | Everything in "What we keep" |
| Resend (United States) | Sends sign-in codes | Your email address and the code. Resend keeps a record of each email it sends for 30 days |
| Cloudflare (United States) | Runs our domain and website, and forwards email sent to our addresses | Your IP address and browser details when you visit getemend.com, and any email you send us. Our website sets no cookies and has no analytics |
| Google (Gmail) | Our inbox for privacy@getemend.com and support@getemend.com | Any email you send us |
| Google sign-in | Only if you sign in with Google | Google's own sign-in, under Google's privacy policy |
Your choices and rights
- Use Emend without AI: on the free plan, or by not using AI features, your text stays on your PC.
- Sign out in Emend's settings. That device's session is deleted from our server.
- Delete your account by emailing privacy@getemend.com from the address you signed in with. We delete your account, plan, devices and usage counts within 30 days. Our backups keep them up to 30 days more (see "Backups").
- Get a copy of your data, or correct it, by emailing privacy@getemend.com.
Depending on where you live, you may have more rights, such as objecting to how we use your data or complaining to your data protection authority.
Children
Emend isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date at the top. If a change affects what leaves your PC, we'll tell you in the app first.
Contact
H.Sami (Emend), Jordan. privacy@getemend.com