UnPlagiarize ยท Android

Privacy Policy

Privacy Policy for UnPlagiarize

Check it. Fix it. Prove it.

Effective date: 20 September 2026 · Last updated: 22 September 2026

1. Who we are

UnPlagiarize (Google Play package com.unplagiarize.app) is published on Google Play under the developer name VibeDeV and operated by VIBECORE DIGITAL, British Columbia, Canada (“we”, “us”, “our”). This policy explains what the app does with information, in the same plain language we try to use everywhere else in the product.

The short version

You never have to sign up, and the app works fully without an account. You can optionally add one if you want your credits and your subscription to survive a new phone. Your documents and your history always stay on your phone and are never uploaded, with or without an account. Text leaves your device only when you ask for a cloud check or rewrite, and when it does it is processed and thrown away rather than stored. We do not sell anything to anyone, and nothing you write is used to train any model.

2. Accounts are optional

You are never asked to sign in. There is no registration wall and no profile. Every feature works without an account, and we never ask for your name, your phone number, your date of birth or your location.

So that the app can recognise the same installation between launches, it creates an anonymous account with Google’s Firebase Authentication the first time it runs. This happens silently and involves no personal information: it produces a random identifier and nothing else. It exists so the server can count your free allowance and remember what you have paid for.

If — and only if — you choose to, you can attach a Google account or an email address in Settings, under “Back up & restore”. The point is portability: a reinstall or a new phone otherwise starts over, and any credits you bought would not follow you. When you link an account we process your email address so we can recognise you again on another device. Nothing else about that account is read, and linking is reversible — you can sign out or delete the account and its data at any time (section 7).

To stop automated abuse of the free tier, requests to our server also carry a Play Integrity token from Google (Firebase App Check). It attests that the request came from a genuine, unmodified copy of this app. It tells us nothing about you and does not identify your device to us.

Alongside this, the app still sends an install identifier with its requests. On Android this is the device’s ANDROID_ID, which is a different value for every app publisher and every user profile on the device, so it cannot be used to follow you between apps. Where it is unavailable, the app generates a random identifier instead and stores it locally.

Being honest about the trade-off: that identifier is stable, so reinstalling the app does not reset your daily free allowance. That is deliberate — a free tier that resets on reinstall is a free tier that gets abused, and the cost of stopping that is paid by everyone else. Unless you link an account, none of these identifiers is combined with anything that could name you, because we hold nothing that could. None of them is linked to your advertising identifier or used for advertising.

3. What stays on your phone

These never leave your device at all:

  • Every document you write, paste, scan or import, and your whole history of them.
  • Photos you take or choose for the page scanner, when on-device text recognition is used.
  • The offline rewriter, the local self-check, the difference view, word statistics and your settings.
  • Your credit balance and subscription state, stored locally so the app works offline.

Deleting your history in Settings → Delete all history, or uninstalling the app, removes all of this from your phone.

4. What is sent to our server, and when

Nothing is sent in the background. Text or an image is transmitted only in response to something you tap.

When youWhat is sentWhat happens to it
Run an originality check Your document text and the install identifier Processed in memory to find matching passages, then discarded. Not written to disk.
Run a cloud rewrite Your document text and the install identifier Processed in memory, rewritten text returned, then discarded.
Choose “Try cloud OCR” on a scanned page That one page image and the install identifier Processed in memory to read the text, then discarded. This is never automatic — the on-device reading is always shown first and you choose whether to escalate.
Tap “Explain this match” The matched passage and its source, and the install identifier Processed in memory, explanation returned, then discarded.
Submit “Report a problem” The text you chose to report, the output you were shown, your reason, and the install identifier Stored, so a human can look at what went wrong. See section 6.
Buy credits or Pro The purchase token issued by Google Play, and the install identifier Stored, so that your purchase keeps working. No card number, bank detail or billing address ever reaches us — Google Play handles payment and never passes those to developers.

“Discarded” above means exactly that: the text exists in the server’s memory for the seconds your request takes and is not written to a database, a log file or a backup.

5. Who else processes your text

To do its job the server has to ask a few outside services for help. All act as processors on our behalf, under their own terms. None of the services that see your text is given your identity — not your email address even if you linked one, and not your account identifier.

  • Google (Gemini API) — rewriting, explanations, and cloud text recognition. Text submitted through the paid Gemini API is not used by Google to train its models.
  • Google (Firebase Authentication and App Check) — holds the anonymous account described in section 2, the email address if you linked one, and checks the Play Integrity token. It never sees your documents.
  • Web search providers — to find where a passage already exists online, short exact phrases from your document are sent as search queries. Phrases, not whole documents, and the query carries nothing that identifies you.

We do not sell personal information, we do not share it with data brokers, and we run no advertising based on the content of your documents.

6. What we store, and for how long

WhatWhyKept for
Daily usage counters against the install identifier, or against your account once you link oneTo enforce free daily limits and stop abuseRotated daily; old rows are swept away
Your account identifier, and your email address if you linked oneSo your credits and subscription follow you to a new device. Your documents never do — they stay on the phoneUntil you delete the account
Purchase and subscription stateSo your purchase keeps working across sessionsWhile the entitlement is live
Aggregate service counts (how many checks ran, how many tokens)To keep the service running and within budgetAggregate numbers only — no document text
Problem reports you submittedTo investigate a bad result you told us aboutUntil you ask us to delete it (section 7)
A note that a particular purchase or rewarded ad has already been creditedSo the same receipt or the same ad cannot be counted twice. It records that the credit happened — not what you did with itPurchases: while the entitlement is live. Ads: 30 days

Traffic to our server is encrypted with HTTPS. Server logs record that a request happened and whether it succeeded; they do not record your document text.

7. Deleting your data

  • On your phone: Settings → Delete all history removes every document stored on the device. Uninstalling the app removes everything else it stored on your phone.
  • Your account, if you linked one: Settings → Back up & restore → Delete account removes the account, your email address and everything held against it. Signing out instead leaves the account intact so you can sign back in.
  • On our server: email support@vibecoredigital.com and ask. We will delete every problem report and entitlement record held against your installation or your account, along with your historical usage counters.

Two things deliberately survive deletion, and we would rather say so than let you find out. The counter for the current day is kept, because clearing it would turn “delete my data” into an unlimited free-usage button; it expires on its own at midnight UTC. So is the note that a given purchase or rewarded ad has already been credited — without it the same receipt could be redeemed again. Neither contains anything you wrote, and the ad record is deleted after 30 days.

You can also ask for a copy of what is held. If you have linked an account we use that; if you have not, we need the install identifier shown in the app to find it.

8. Advertising

The free version of the app shows a single banner advertisement at the top of two screens, served by Google AdMob. There are no full-screen interstitials, and an advertisement is never shown between pressing Check and seeing your result. There is also an optional rewarded advertisement you can choose to watch in exchange for a credit; it is never forced on you.

AdMob may use your device’s advertising identifier and similar device information to select and measure advertisements. It does not receive your documents. Google’s handling of that data is described in the Google Privacy & Terms.

Where the law requires a choice — in the EEA, the UK and Switzerland — the app shows Google’s consent form the first time it runs, and you can reopen it at any time from Settings → Privacy Settings. On Android you can also reset or delete your advertising ID in your device settings.

Pro subscribers see no advertisements at all.

9. Purchases

Credits and Pro subscriptions are sold through Google Play billing. Google processes the payment; we receive a purchase token confirming that it happened and never see your payment details. Subscriptions are managed and cancelled in Google Play, which the app links to directly from Settings. Refunds follow Google Play’s policy.

10. Children

UnPlagiarize is not directed at children and is listed for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

11. Your rights

Depending on where you live — under Canada’s PIPEDA and British Columbia’s PIPA, the GDPR in the EEA and the UK, or state privacy laws in the United States — you may have the right to access, correct, delete or port information about you, and to object to certain processing. Because the app has no accounts and stores almost nothing, most of those rights are satisfied by the deletion steps in section 7, but you are welcome to write to us and exercise them formally.

Where the GDPR applies, our legal bases are: performing the service you asked for (checks, rewrites, purchases), our legitimate interest in preventing abuse and keeping the service running (usage counters), and your consent (personalised advertising).

12. Changes to this policy

If this policy changes, the date at the top changes with it, and material changes will be noted in the app’s release notes. Continuing to use the app after a change means you accept the updated policy.

Contact

Questions, deletion requests, or anything that looks wrong:
support@vibecoredigital.com

VibeDeV — operated by VIBECORE DIGITAL, British Columbia, Canada.

UnPlagiarize for Android · com.unplagiarize.app · © 2026 VIBECORE DIGITAL