Skip to content
Back to Ditto

Legal

Privacy Policy

The short version

This summary is here to help you find your way. The full policy below is what applies.

1.Who we are

This Privacy Policy explains how [Legal entity name] ("Ditto", "we", "us" or "our") handles personal information when you use Ditto: the website and app, the learning service that learns your handwriting, and the features described in our Terms of Service.

We are the "controller" of your personal information under data protection laws such as the GDPR and the UK GDPR. That means we decide how and why it's used, and we're responsible for it.

Who we are
[Legal entity name]
Postal address
[Postal address]
Email
[Contact email]

In this policy, "your pages" means the photos, scans and PDFs of handwriting you give Ditto to learn from, and "your hand" means the handwriting Ditto learns from them.

2.What we collect

Your account

If you create an account, we keep your email address, a display name if you add one, your plan and when it ends, and a record of which versions of the Terms and this policy you accepted and when. Your password is handled by our sign-in provider, Supabase, which stores only a secure hash of it. We never see your password.

Your pages and the text read from them

When you teach Ditto your handwriting, the pages you choose are sent to Ditto's learning service. It reads the words with text recognition that runs on the learning service's own machine (Apple Vision and a local vision model), so your pages aren't sent to another company to be read. It keeps your pages, the text read from them along with any corrections you make, and the letters it cuts out of them.

Your hands

The hand Ditto learns from your pages is kept by the learning service, in your browser and, if you're signed in, in private storage in your account.

What you write and make

Ditto writes your text out in your browser. If you're signed in, your pages (their text, title, subject, due date and how they're written), your subjects and your settings are saved to your account, so your homework is on every device you sign in to and isn't lost with this one. Only you can read them. You can turn this off in Settings, under Data and privacy; pages already in your account stay there until you delete them or your account. Apart from that, what you write isn't sent to us, except when you use a feature that needs our servers:

  • Real ink and Write on a photo: the text you want written is sent to the learning service, which makes the pages and stores them so you can view and download them.
  • The Assistant: see below.
  • Your account: your pages, subjects and settings (as above), hands you save there, and anything else you choose to save there.

Real or Ditto? runs in your browser: the photo, text, page and your guesses stay on your device. Mail merge also runs in your browser, so your spreadsheet isn't sent to us.

Assistant requests

When you use the Assistant, your request and the text of the page you're working on are sent to Anthropic's Claude, which plans the edit. Some requests include more, but only what that request needs: a photo or page you ask the Assistant to read (for example, notes to tidy, a letter to reply to, or a photo, scan or PDF page to copy into your handwriting), or, when you ask it to add a personal line to a mail-merge card, that recipient's name and your notes about them.

If you use the Assistant on a hosted version of Ditto while signed in, we count how many Assistant requests your account makes each day (a number per day, not the requests themselves), so each plan's daily allowance holds.

Payment information

Card payments aren't switched on yet. Once they are, a payment processor (for example, Stripe) will collect your card details. We'll receive only what we need to manage your plan, such as which plan you bought, whether a payment succeeded, and limited card details like the card type and its last four digits. Ditto never sees or stores your full card number.

Messages you send us

If you email us, for example for help or to report misuse, we keep your email address and what you tell us.

Technical data

Like most websites, our servers record basic technical information when your browser connects: your IP address, the time, the address requested and your browser's user agent. We use these logs to keep Ditto secure and to fix problems.

What we don't collect

We don't use advertising or analytics trackers, we don't collect your precise location, and we don't use your handwriting to identify you or to verify who you are.

3.How we use it

We use your information only to:

  • provide Ditto: run your account, read your pages, learn your hand, store it, write with it and carry out your Assistant requests;
  • keep your hands in step between your browser and your account, and let you download or delete them;
  • manage your plan and, once payments are live, take payments;
  • keep Ditto secure, prevent abuse and enforce our Terms, for example by looking into reports of misuse;
  • answer your messages and send you important notices about your account or changes to our terms (we don't send marketing); and
  • meet our legal obligations.

Your pages are used only to learn your hand and are kept with it until you delete it. That includes the parts of your pages that Real ink and Write on a photo need to write with your hand: your own ink, and the photographed paper.

We never use your pages or your hand to train models for other people. We never sell your personal information. We don't show ads, and we don't build advertising profiles.

5.Who receives it

We share personal information only with service providers that help us run Ditto, only as far as they need it for what they do for us, and under contracts that require them to protect it.

Supabase
Accounts and sign-in, the database (your profile, settings, consent records, subjects and pages) and private file storage for the hands you save in your account.
Anthropic
Assistant requests only: your request, the page's text, and anything else you give the Assistant for that request (section 2).
Have I Been Pwned
When you choose a password, your browser checks it against known data breaches using the Pwned Passwords service. Only the first five characters of a one-way hash of the password are sent (k-anonymity), never the password itself or its full hash, and the answer is checked on your device.
Google Fonts
The site's fonts are loaded from Google's servers, so Google receives your IP address and browser details when your browser fetches them.
Payment processor
Once payments are live (for example, Stripe): your card and billing details, and whether payments succeed.

We may also share information:

  • when the law requires it, for example to respond to a valid court order, or where it's needed to protect someone's safety, prevent fraud or defend our legal rights; and
  • with a buyer or successor if Ditto is part of a merger, acquisition or sale of assets. We'll tell you before your information moves to a new organisation or becomes subject to a different privacy policy.

We never sell your personal information, and we never share it for advertising.

6.How long we keep it

Pages you teach Ditto with, and their text
Until you delete the hand they taught.
Pages you write, your subjects and settings
In your account: until you delete them or your account. A page you delete waits in your Trash for 30 days, then is deleted for good. In your browser: until you sign out or clear your browser's data.
Your hands
On the learning service and in your account: until you delete them, or delete your account. In your browser: until you delete them or clear your browser's data.
Account data
Until you delete your account.
Real ink and Write on a photo pages
Kept so you can view and download them. Real ink keeps only your most recent pages and deletes older ones automatically. Ask us and we'll delete any of them sooner.
Assistant requests
We don't keep them once the reply has come back, apart from the short-lived server logs below. Anthropic keeps them as its own terms and privacy policy describe.
Server logs
30 days.
Backups
Anything you delete rolls off our backups within 30 days.
Messages and misuse reports
As long as we need to deal with them and to protect people and Ditto.
Payment records
Once payments are live: as long as tax and accounting law requires.

When you delete your account

Deleting your account from Settings removes your profile, your settings, your consent records, your pages and subjects, the hands saved in your account and your sign-in, and clears them from the browser you deleted it in. Pages held by the learning service are deleted when you delete the hand they taught; if you've already deleted your account and want them gone, email [Contact email].

7.How we protect it

  • Encrypted connections. Your connections to Ditto, and ours to our providers, use TLS (HTTPS).
  • Passwords. Supabase Auth stores only a secure hash of your password. We never see it. New passwords must be at least 10 characters and are checked against known breaches before they're accepted, and deleting your account asks for your password again.
  • Only you can read your hands. Row-level security in our database lets each account read only its own records, and saved hands are kept in private storage.
  • A guarded learning service. It checks where each request comes from (origin and host checks) and refuses requests from other sites.
  • A strict Content Security Policy limits what can run on our pages: scripts come only from Ditto itself (the libraries we use are copies served by us, not loaded from other sites), and our pages can't be framed by other sites.
  • Least-privilege keys. Your browser only ever holds a public key that row-level security restricts. Keys with more power stay on our servers.

No system is perfectly secure, so we can't promise absolute security. If a breach affects your personal information, we'll tell you and the relevant regulators as the law requires. If you find a security problem, please tell us at [Contact email].

8.Your rights

Depending on where you live, you have rights over your personal information. You can:

  • access it: ask for a copy of what we hold about you;
  • take it with you: download your account data, pages and saved hands from Settings in a machine-readable format;
  • correct it: change your display name in Settings, or ask us to fix anything that's wrong;
  • delete it: delete pages, hands or your whole account from the app, or ask us to delete anything else;
  • object or restrict: object to how we use it, including where we rely on legitimate interests, or ask us to limit how we use it;
  • withdraw consent where we rely on it; and
  • complain to a regulator, such as the data protection authority where you live in the EU, or the Information Commissioner's Office in the UK. We'd be grateful for the chance to help first.

If you live in California

Under the CCPA, as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be treated differently for using these rights. We don't sell personal information, and we don't share it for cross-context behavioural advertising. We don't use sensitive personal information to infer things about you.

The categories we collect are in section 2: identifiers (such as your email and IP address), the content you give us (including your handwriting), internet activity in server logs and, once payments are live, limited payment information. Section 3 explains why, and section 5 who receives it. You can use an authorised agent, and we may ask them for proof that you've authorised them.

How to use your rights

Use Settings, or email [Contact email]. We may need to confirm it's you before we act. We'll reply within one month (45 days for California requests), and tell you if we need longer as the law allows. It's free, unless a request is clearly unfounded or excessive.

9.Children

Ditto is not for children under 13, and we don't knowingly collect personal information from them. In some countries the age for agreeing on your own is higher (16 in parts of the EU, for example); below it, a parent or guardian must consent.

If you believe a child under 13, or a young person below the age of consent where they live without a parent's consent, has given us personal information, email [Contact email] and we'll delete it.

Teachers and schools: get any consent your school or the law requires before uploading pupils' handwriting.

10.International transfers

Supabase and Anthropic may process data in the United States and other countries outside the one where you live, whose data protection laws may differ from yours. Where the law requires it, for example for transfers from the EU, the UK or Switzerland, we rely on standard contractual clauses (with the UK's addendum where it applies) or another lawful transfer mechanism, together with our providers' own safeguards. Email [Contact email] for details.

11.Browser storage and cookies

Ditto keeps some things in your browser's own storage (localStorage and IndexedDB) so the app works and remembers your work:

  • your settings, such as theme, sound and studio settings;
  • your documents, and where you left off in the studio;
  • your hands and their names, and your pages while your first hand is being learned;
  • your sign-in session (a token from Supabase), if you have an account; and
  • your plan.

This storage is needed for features you ask for, so we don't ask for consent with a cookie banner. None of it is used for advertising or analytics, and we don't use advertising or analytics cookies.

You can clear it at any time in your browser's settings. Clearing it signs you out and deletes anything not saved elsewhere, such as hands and documents kept only in your browser.

When you sign out, Ditto first saves anything not yet in your account, then removes your pages, hands and page pictures from that browser, so the next person to use it doesn't see them.

When your browser downloads the site's fonts from Google Fonts, Google receives your IP address. Google's privacy policy explains how Google handles it.

12.Changes to this policy

We may update this policy when Ditto or the law changes. Each version has a version number and an effective date at the top of this page.

If a change is material, we'll tell you at least 30 days before it takes effect, by email or in Ditto, and we may ask you to accept the new version when you next sign in. Before a new service provider receives your personal information, we'll add it to section 5.

13.Contact us

Who we are
[Legal entity name]
Postal address
[Postal address]
Email
[Contact email]

If you're not happy with how we've handled your information, you can also complain to a data protection regulator (section 8).