Privacy policy

Updated: October 8, 2026

Who is responsible

AI Report Writer is an independent educational project operated by Stuart Scott, based in Valencia, Spain. It is currently free and is not presented as a registered company or school service. Contact: support@aireportwriter.app. You do not need an account to contact the operator.

This notice explains how personal information is handled. Reading it is not blanket consent to additional processing.

Account, templates and support

Account data includes your email address, username, optional full/display name, authentication identifiers and language preference. Supabase handles sign-in. The required email and username provide the account and features you request; full name is optional.

Templates are saved in your browser and synced to your account when signed in. New templates are private. Choosing to share publishes the content, instructions, examples and displayed author identity. Support messages and reply addresses are used to answer your request.

Reports and AI processing

Single-report inputs and drafts are held in the open page. Batch student details, unfinished entries, reports and edits are saved in this browser until you clear the batch or remove the site's browser data. Signed-in batches are separated by account within the browser; signing out or deleting an account does not erase these browser copies. Choosing Save to class stores the student first name and report text in your account, together with class and report-tab labels, a separate student record identifier, school year, report label, account identifier and creation/save/expiry dates. These reports are private to that account and can be opened on other devices. The original rating form and AI conversation are not uploaded by the save feature. Saving does not send the report to AI again. Generation and editing send report context and relevant draft/history to the server and external AI service. The first name entered in the form is replaced before the request and restored in the result locally. Other notes can still identify a student.

Only submit non-identifying classroom context. Do not enter sensitive student information. Educators and schools must establish their authority and appropriate arrangements before using external AI with any information about students. The tool is intended for educators, not student accounts. Drafts must be reviewed by a person; the project does not make automated educational decisions.

Purpose and legal basis

Required account information and private templates are processed to provide the service you request. Account security, usage counts and abuse safeguards serve the legitimate interest of protecting accounts and preventing misuse and unexpected service costs. Public templates are published at your request. Support information is used to respond to your enquiry.

Service providers

The project uses Supabase for authentication and database storage and Vercel for hosting. AI generation uses OpenAI or Google Gemini, depending on the deployed configuration. Account notifications use Resend when configured.

Providers may process data and network/service logs outside the European Economic Area. Their retention, international-processing and input-use rules depend on the service account and settings. We do not promise zero provider retention or that all processing stays in the EU. Contact the operator for the current supplier configuration and applicable safeguards before a school use that requires those details. Personal information is not sold.

Usage records and retention

Usage records contain account identifiers, dates, feature and credit counts. New application usage records do not copy email/name, IP addresses or browser request headers. The application does not intentionally store student names or report text in those records.

Account-linked profiles, cloud templates, classes, first-name student records, support and usage records are held while the account is active. Saved reports expire 12 months after their last save; expired reports become inaccessible immediately and are removed from live storage by daily cleanup. You can delete an individual report, a student and their reports, or a whole class sooner from My classes & reports. Account deletion removes the account and its linked database rows. This does not clear browser copies, downloads, other users? copies, provider logs or backups. Historical deleted-account email archives require separate handling; contact the operator for an erasure request.

Private request-reservation records become eligible for cleanup after 60 days and aggregate site counters after 90 days. Cleanup runs with generation activity, so these are eligibility periods rather than guaranteed exact deletion deadlines.

Browser storage and external resources

Browser storage holds sign-in state, templates, language/appearance preferences and a usage display counter. The reviewed application has no marketing-cookie or behavioural-analytics integration. Google Fonts requests share basic network information with Google. On a shared computer, export work you need, sign out and clear the browser?s data for this site. See Data & Storage.

Your rights

You may request access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests by emailing support@aireportwriter.app. You do not need an account to make a request. Requests are handled within the applicable GDPR time limits, normally one month, with any permitted extension explained. If an optional operation relies on consent, it can be withdrawn without affecting earlier lawful processing.

You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. Update or delete your account from My profile & settings.

Security and changes

We use encrypted connections and access controls to protect accounts. No system is perfectly secure. Use a strong, unique password and contact the operator if you suspect unauthorised access. Changes to this notice will be dated on this page, with significant changes brought to users? attention.