Privacy Policy for UnPlagiarize

Check it. Fix it. Prove it.

Effective date: 23 September 2026 · Last updated: 23 September 2026

1. Who we are

UnPlagiarize (App Store bundle identifier com.unplagiarize.app) is published on the App Store by VibeDeV and operated by VIBECORE DIGITAL, British Columbia, Canada (“we”, “us”, “our”). This policy explains what the app does with information, in the same plain language we try to use everywhere else in the product.

The short version. You never have to sign up, and the app works fully without an account. You can optionally add one if you want your credits and your subscription to survive a new device. Your documents and your history always stay on your device and are never uploaded, with or without an account. Text leaves your device only when you ask for a cloud check or rewrite, and when it does it is processed and thrown away rather than stored. We do not sell anything to anyone, and nothing you write is used to train any model.

2. Accounts are optional

You are never asked to sign in. There is no registration wall and no profile. Every feature works without an account, and we never ask for your name, your phone number, your date of birth or your location.

So that the app can recognise the same installation between launches, it creates an anonymous account with Google’s Firebase Authentication the first time it runs. This happens silently and involves no personal information: it produces a random identifier and nothing else. It exists so the server can count your free allowance and remember what you have paid for.

If, and only if, you choose to, you can attach an Apple, Google or email credential in Settings, under “Back up & restore”. The point is portability: a reinstall or a new device otherwise starts over, and any credits you bought would not follow you. When you link an account we process your email address so we can recognise you again on another device. Nothing else about that account is read, and linking is reversible. You can sign out or delete the account and its data at any time (section 7).

If you sign in with Apple and choose to hide your address, we receive only the relay address Apple generates. We never see your real one, and the relay works for support mail just the same.

To stop automated abuse of the free tier, requests to our server also carry an App Attest assertion from Apple (through Firebase App Check). It attests that the request came from a genuine, unmodified copy of this app on a real device. It tells us nothing about you and does not identify your device to us.

Alongside this, the app sends an install identifier with its requests. On iOS this is a random value the app generates for itself on first launch. It is not your device’s serial number, not your Apple Account, and not your advertising identifier, and because we generate it ourselves it cannot be used to recognise you in any other company’s app.

Being honest about the trade-off: that identifier is stable, so deleting and reinstalling the app does not reset your daily free allowance. That is deliberate, and it cuts both ways. A free tier that resets on reinstall is a free tier that gets abused, and the cost of stopping that is paid by everyone else. Just as importantly, it is what lets credits you have paid for survive a reinstall: if the identifier were thrown away with the app, so would be the balance attached to it. It is kept in the device’s keychain for that reason. Unless you link an account, none of these identifiers is combined with anything that could name you, because we hold nothing that could, and none of them is linked to your advertising identifier.

3. What stays on your device

These never leave your device at all:

• Every document you write, paste, scan or import, and your whole history of them.
• Photos you take or choose for the page scanner, when on-device text recognition is used.
• The offline rewriter, the local self-check, the difference view, word statistics and your settings.
• Your credit balance and subscription state, stored locally so the app works offline.

Deleting your history in Settings → Delete all history, or deleting the app, removes all of this from your device.

4. What is sent to our server, and when

Nothing is sent in the background. Text or an image is transmitted only in response to something you tap.

“Discarded” above means exactly that: the text exists in the server’s memory for the seconds your request takes and is not written to a database, a log file or a backup.

5. Who else processes your text

To do its job the server has to ask a few outside services for help. All act as processors on our behalf, under their own terms. None of the services that see your text is given your identity, not your email address even if you linked one, and not your account identifier.

• Google (Gemini API) for rewriting, explanations, and cloud text recognition. Text submitted through the paid Gemini API is not used by Google to train its models.
• Google (Firebase Authentication and App Check) holds the anonymous account described in section 2, the email address if you linked one, and checks the App Attest assertion. It never sees your documents.
• Apple (App Store Server API) confirms that a purchase is genuine and tells us when a subscription renews, lapses or is refunded. It receives no document text.
• Web search providers to find where a passage already exists online. Short exact phrases from your document are sent as search queries. Phrases, not whole documents, and the query carries nothing that identifies you.

We do not sell personal information, we do not share it with data brokers, and we run no advertising based on the content of your documents.

6. What we store, and for how long

Traffic to our server is encrypted with HTTPS. Server logs record that a request happened and whether it succeeded; they do not record your document text.

7. Deleting your data

On your device: Settings → Delete all history removes every document stored on the device. Deleting the app removes everything else it stored there.

Your account, if you linked one: Settings → Back up & restore → Delete account removes the account, your email address and everything held against it. Signing out instead leaves the account intact so you can sign back in.

On our server: email support@vibecoredigital.com and ask. We will delete every problem report and entitlement record held against your installation or your account, along with your historical usage counters.

Two things deliberately survive deletion, and we would rather say so than let you find out. The counter for the current day is kept, because clearing it would turn “delete my data” into an unlimited free-usage button; it expires on its own at midnight UTC. So is the note that a given purchase or rewarded advertisement has already been credited, because without it the same receipt could be redeemed again. Neither contains anything you wrote, and the advertisement record is deleted after 30 days.

You can also ask for a copy of what is held. If you have linked an account we use that; if you have not, we need the install identifier shown in the app to find it.

8. Advertising and tracking

The free version of the app shows a single banner advertisement at the top of two screens, served by Google AdMob. There are no full-screen interstitials, and an advertisement is never shown between pressing Check and seeing your result. There is also an optional rewarded advertisement you can choose to watch in exchange for a credit; it is never forced on you.

AdMob may use your device’s advertising identifier and similar device information to select and measure advertisements. It does not receive your documents. Google’s handling of that data is described in the Google Privacy & Terms.

Because that counts as tracking under Apple’s definition, the app asks your permission first. iOS shows Apple’s App Tracking Transparency prompt, and if you decline, the advertising identifier is not available to us or to AdMob and advertisements are served without it. You can change your answer at any time in Settings → Privacy & Security → Tracking on your device, and you can turn off personalised advertising there as well.

Where the law requires a separate choice, in the EEA, the UK and Switzerland, the app also shows Google’s consent form the first time it runs, and you can reopen it at any time from Settings → Privacy Settings in the app.

Pro subscribers see no advertisements at all.

9. Purchases

Credits and Pro subscriptions are sold through the App Store. Apple processes the payment; we receive a transaction identifier confirming that it happened and never see your payment details. Subscriptions are managed and cancelled in Settings → your name → Subscriptions on your device, which the app links to directly from its own Settings. Refunds follow Apple’s policy.

10. Children

UnPlagiarize is a writing tool for students and professionals. It is not directed at children, it is not part of the App Store Kids Category, and we do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

11. Your rights

Depending on where you live, under Canada’s PIPEDA and British Columbia’s PIPA, the GDPR in the EEA and the UK, or state privacy laws in the United States, you may have the right to access, correct, delete or port information about you, and to object to certain processing. Because the app has no required account and stores almost nothing, most of those rights are satisfied by the deletion steps in section 7, but you are welcome to write to us and exercise them formally.

Where the GDPR applies, our legal bases are: performing the service you asked for (checks, rewrites, purchases), our legitimate interest in preventing abuse and keeping the service running (usage counters), and your consent (personalised advertising).

12. Changes to this policy

If this policy changes, the date at the top changes with it, and material changes will be noted in the app’s release notes. Continuing to use the app after a change means you accept the updated policy.