Writer Plus One — Privacy

Effective 17 October 2026 · Development candidate prepared 17 October 2026. Earlier installed or private beta builds may behave differently; this update does not replace an installed app.

Your writing stays in your chosen files unless you choose a feature that sends content elsewhere. Live AI requests can send text from every current document in the active project. You are asked before each live assistant request.

Who is responsible

Writer Plus One is published by Christopher Breifjell-Bakke as a private individual under the L03V Labs brand. Contact: [email protected]. I am responsible for the personal information I receive for support and privacy enquiries. The app does not send your writing or credentials to a L03V Labs server. Your selected AI service, Apple and any storage service you choose process the data they receive under their own applicable terms and privacy information.

Projects and information stored on your Mac

Projects contain text, formatting, document and folder names, project structure, internal identifiers, project instructions, version history and recently deleted documents. They are stored as .wpo files in the location you choose; new projects use the folder in Writing Settings. Local backups and fixed technical event logs use the app’s Application Support location. Preferences store language, appearance, editor position, recent/open file paths, model choices and file-access bookmarks. A sandbox build uses its app container; the private build configuration is not sandboxed.

The app does not encrypt project or backup files itself. macOS security and any disk or storage-service encryption are separate. Choosing iCloud Drive or another synced folder can cause that service to receive and retain your files. The app has no L03V cloud-sync service. Current chat messages and unaccepted suggestions are kept in memory during the session, not saved as a conversation archive in the project. Accepted changes become ordinary saved document content.

Optional AI: exactly what can leave your Mac

Writing, organization and local saving work without a live AI service. Local Demo does not contact an AI provider. For the live assistant, a recipient-specific confirmation appears before each request. Cancel keeps your prompt and prevents that request from being sent. Allow and Send authorizes the transfer; accepting a later edit is a separate decision.

A request can include your message; plain text and names/paths within the project from all current documents in the active project; project name, folder structure and internal project/document identifiers; active document, selected text and cursor position; project instructions; the last 16 conversation messages; and matching excerpts from reference folders you connected. Selecting a passage limits where edits may be proposed; it does not limit the rest of the shared project context. Other open projects, deleted documents, saved version history and unaccepted suggestions are not included as source context. The raw .wpo archive and RTF formatting bytes are not uploaded by this assistant path.

Reference searching is local. Source labels can include the selected folder’s name and relative file path. The current implementation sends up to 12 excerpts, at most three per source, within a total of 24,000 UTF-16 units. Project text is limited to 220,000 UTF-16 units; excessive requests stop rather than silently sending a truncated project. The model receives no general filesystem or shell access. Only share material you are entitled to send.

Recipients, accounts and provider retention

OpenAI API: requests go directly to api.openai.com/v1 with your API credentials. The app sets store:false for Responses requests. This is not a guarantee of zero retention: provider safety logs, caching, legal exceptions and your account’s data controls may still apply. See OpenAI data controls.
OpenAI through ChatGPT sign-in: sign-in, account validation and token management use auth.openai.com; eligible inference uses api.openai.com/v1. The system browser handles sign-in and a local 127.0.0.1 callback returns authorization to the app. The integration requests account identity and permission for plan usage; it does not import your ChatGPT conversations or memories. Eligibility and processing depend on the authorized account and route. The private integration remains present; commercial approval for a paid Writer Plus One release is not established. See OpenAI’s plan-usage documentation. A ChatGPT subscription is not a general third-party API entitlement.
Anthropic / Claude API: requests go directly to api.anthropic.com/v1 using your API key. Provider retention depends on account terms, model and policy exceptions; its standard API retention guidance describes deletion within 30 days with exceptions, including safety enforcement and law. See Anthropic retention information.
Grok / xAI API: requests go directly to api.x.ai/v1 using your API key. Its official API guidance describes default audit retention and separate account/team retention controls. The app does not establish or verify that your account has Zero Data Retention. See Grok API security and retention information.

Connecting an account, refreshing tokens or retrieving model lists can contact that provider before you submit writing; these operations do not send project text. OpenAI API Auto mode can make an additional routing request containing your prompt and task metadata. There is no automatic fallback to a different provider. Providers receive normal network information such as your IP address and authenticated account information. Their processing may take place outside Norway and the EEA; the app does not promise an EEA-only location or a provider retention/training setting. Review the applicable provider’s account controls and privacy terms before sharing confidential or sensitive material. Cancelling future requests cannot retract data already received by a provider.

Credentials and disconnecting

API keys and ChatGPT account details, account/client identifiers, tokens and granted scopes are stored in macOS Keychain separately from projects and backups. Preferences retain model/account selection and an opaque installation identifier for ChatGPT authorization. No developer API key is bundled. Remove API keys or disconnect accounts in AI Settings. ChatGPT sign-out attempts token revocation and removes local tokens, but can retain the registration identity for reconnection; if revocation fails, the app asks you to remove the connection in ChatGPT as well. Deleting the app alone does not delete Keychain credentials or your documents.

Microphone, dictation and Apple Writing Tools

Dictation starts when you activate it and grant microphone and speech permissions. It prefers on-device recognition; where that is unavailable, audio is processed by Apple’s speech service. Recognized text fills a draft for you to review and send yourself. The app does not save an audio recording in your project. Apple’s retention and optional improvement settings are separate: see Siri, Dictation and Privacy. You can revoke these permissions in macOS System Settings.

If you enable and use the system’s Apple Writing Tools in the editor, Apple handles that feature and its own sharing prompts/settings. It is separate from this app’s assistant confirmation. See Apple Intelligence and Privacy.

Diagnostics and support

The app contains no advertising or third-party analytics SDK and does not automatically upload diagnostic reports to L03V Labs. Its local event log keeps up to 200 dated, fixed event codes. Exported diagnostic reports include app/build/macOS versions, architecture, project/document counts and those codes; they exclude writing, names, file paths and credentials. macOS may separately retain crash reports. You choose whether to send a report or screenshot to support; inspect attachments because screenshots and system reports can reveal personal content.

If you email support, I receive your email address, name if supplied, message and attachments through iCloud Mail. I use them to answer, troubleshoot and handle privacy requests, based on the legitimate interest in providing support. Relevant contractual or legal duties can also apply. Closed support correspondence is deleted 12 months after case closure unless longer retention is necessary for legal claims or obligations. Do not send passwords, API keys or unnecessary document content.

Keeping, sharing and deleting data

Local projects, backups, history, preferences and bookmarks remain until you delete them or the app’s retention rules replace older entries. Backups use a latest snapshot plus a limited archive; deleting a document or the app does not erase all older copies. Use File → Save Clean Copy before sharing a project: it creates a separate copy without history and recently deleted documents, and excludes AI instructions unless you choose to include them. Review the copy’s visible content too.

To remove local data, delete the projects and exported copies you no longer want, their local backups, app preferences/bookmarks and any credentials in AI Settings/Keychain. Remove reference folders in Project Context to stop their use in future requests. Also check Trash, Time Machine and your chosen sync service. For data already sent to a provider, use that provider’s deletion and account controls; I cannot delete it through your account. No L03V user account is required.

Your privacy rights and policy changes

For personal information I hold, you can request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Contact the address above; I may need proportionate verification of your identity. You can stop optional AI or dictation use without losing core local editing. Requests concerning provider-held data should also go to that provider. You may complain to Datatilsynet or your relevant supervisory authority.

This notice describes the current app’s data flow. Changes will be reflected here with a new effective date. It does not certify a future paid ChatGPT integration or Mac App Store approval.