Privacy Policy
Your privacy is important to us. This policy explains how Linya collects, uses, and protects your personal information.
Last Updated: October 11, 2026
Linya ("we," "us," or "our") is committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy describes our practices concerning the collection, use, disclosure, and protection of information we receive through our AI-powered writing platform.
By using Linya, you agree to the terms outlined in this Privacy Policy. If you do not agree with our practices, please do not use our services.
Account Information
When you create an account, we collect:
- Full name
- Email address
- Password (encrypted)
- If you sign in with Apple or Google: the name and email address that service shares with us. With Sign in with Apple you can hide your real email address; we then only receive Apple's private relay address.
- Account preferences and settings
- Subscription tier and billing information
Writing Content
To provide our AI writing services, we store:
- Projects, manuscripts, and writing documents
- Chapters, scenes, and text content
- Character profiles and descriptions
- World-building elements and knowledge base entries
- Writing style preferences and templates
- AI-generated suggestions and edits (when accepted)
- Voice recordings you dictate in the mobile app, which are converted to text
- Photos, files, and web pages you add to your Knowledge Base or to a chat
Usage Data
We automatically collect information about how you use Linya:
- Feature usage patterns and interactions
- Device information (browser type, operating system, device identifiers)
- IP address and approximate geographic location
- Session duration and frequency of use
- Error logs and performance data
- Analytics data to improve our services
- When you sign up: the page you first arrived on, the campaign tags in the link that brought you (utm_source, utm_medium, utm_campaign) and the domain of the site that sent you, to understand which channels bring writers to Linya
Payment Information
Payment processing is handled securely by Stripe. We do not store your complete credit card numbers or sensitive payment information on our servers. We only retain transaction records necessary for account management and legal compliance.
Linya integrates with the following third-party services to provide our functionality. Your data may be shared with these services as described below:
AI processing providers: Google, OpenAI, and Anthropic
Who: Google (Gemini models), OpenAI (GPT models), and Anthropic (Claude models). Requests reach them through Vercel's AI Gateway, operated by our hosting provider Vercel.
What is sent: the text of your books (chapters, notes, characters, world-building, and timeline entries); the messages, questions, and passages you give Linya; voice recordings you dictate; photos, files, and web pages you add to your Knowledge Base or a chat; and your writing-style settings. Your password and payment details are never sent to them.
How and when: when you use an AI feature (writing help, chat with Linya, suggestions, continuity and story analysis, style analysis, dictation), and automatically in the background to index your book for search and to keep your story's continuity records up to date.
Why: only to provide those features to you. The providers process the data to return a response to Linya. Under their API terms they may not use it to train their models.
Your permission: the Linya mobile app explains this and asks for your agreement before any of your writing is sent. You can review it at any time in Settings, under "AI data sharing". To stop all processing, delete your account (see Your Rights).
Protection: each provider is bound by contract terms that require it to keep your data confidential and secure, and to protect it to a standard at least equal to this policy.
Stripe
Purpose: Secure payment processing and subscription management.
Data Shared: Billing information, payment card details, and transaction history. Stripe maintains PCI DSS Level 1 compliance.
Pinecone
Purpose: Vector embeddings and semantic search for knowledge base functionality.
Data Shared: Vectorized representations of your content for search and retrieval purposes.
AWS S3
Purpose: Secure cloud storage for files, documents, and assets.
Data Shared: Uploaded files, exported documents, and backup data. All data is encrypted at rest and in transit.
Supabase
Purpose: Account authentication and our primary database.
Data Shared: Your account details, sign-in sessions, and the content you create in Linya, stored in our database.
Vercel
Purpose: Application hosting, routing AI requests to AI processing providers, and anonymous, cookieless visit statistics for our public pages (Vercel Web Analytics).
Data Shared: Requests to our application, including the prompts and text sent for AI processing. Vercel Web Analytics receives the URLs of public pages (only utm_* parameters are kept), the referring site, browser and device type, and country, plus an anonymous sign-up event that contains only the sign-up method. It uses no cookies.
PostHog
Purpose: Product analytics. On the web, only after you accept analytics cookies. In the iOS app, analytics are on by default — turn them off in Settings → About → "Share usage analytics".
Data Shared: Pages visited, features used, and an account identifier. Your manuscript text is not sent.
Arize Phoenix (operated by Linya)
Purpose: Monitoring the quality and cost of AI responses.
Data Shared: Prompts, AI responses, and timing for AI requests, kept on infrastructure we control.
Email delivery provider
Purpose: Sending account, billing, and beta feedback emails.
Data Shared: Your email address and the content of the email being sent.
Sentry
Purpose: Error tracking and application monitoring.
Data Shared: Error logs, stack traces, and diagnostic information. Personal identifying information is filtered out.
Google Cloud Text-to-Speech & ElevenLabs
Purpose: Audiobook generation and text-to-speech conversion.
Data Shared: Written content selected for audio conversion. Audio files are generated and returned to our platform.
We use the information we collect for the following purposes:
- Provide Services: Deliver core writing, editing, and AI-assisted features
- Account Management: Maintain your account, authenticate access, and manage subscriptions
- Personalization: Customize your experience based on preferences and usage patterns
- Communication: Send service updates, notifications, and respond to support requests
- Analytics: Understand usage patterns to improve features and user experience
- Security: Detect, prevent, and respond to security incidents or fraud
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
- Product Development: Develop new features and improve existing functionality
Legal basis: the anonymous visit statistics and the sign-up source above rest on our legitimate interest in understanding which pages and channels bring writers to Linya (LGPD art. 7, IX). The visit statistics are anonymous and not linked to you. The sign-up source is linked to your account, is deleted with it, and you can ask us to delete it at any time.
Important: We do not sell your personal information or writing content to third parties. We do not use your creative writing content to train AI models or for any purpose beyond providing services to you.
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
Account Data
Retained until you delete your account or request data deletion
Writing Content
User-controlled; permanently deleted within 30 days of deletion request
Usage Logs
Retained for 90 days for security and analytics purposes
Payment Records
Retained for 7 years as required by tax and financial regulations
Backup Data
Automatically purged from backups within 90 days of account deletion
Depending on your location, you may have the following rights regarding your personal information:
1Right to Access
Request a copy of the personal information we hold about you. You can export your data directly from your account settings or contact us for a comprehensive data package.
2Right to Correction
Update or correct any inaccurate or incomplete information in your account settings at any time.
3Right to Deletion
Request deletion of your personal information and account. We will permanently delete your data within 30 days, except where we are legally required to retain certain records.
4Right to Data Portability
Receive your data in a structured, commonly used, machine-readable format (JSON, CSV, or plain text) to transfer to another service.
5Right to Opt-Out
Opt-out of marketing communications at any time. Essential service communications cannot be disabled while maintaining an active account.
6Right to Object
Object to processing of your personal information for certain purposes, such as analytics or marketing.
How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@linya.ai or use the data management tools in your account settings. We will respond to your request within 30 days.
Linya uses cookies and similar tracking technologies to enhance your experience and improve our services.
Essential Cookies (Required)
These cookies are necessary for the platform to function. They enable authentication, maintain your session, remember your preferences, and ensure security. You cannot opt out of essential cookies.
- Authentication tokens
- Session management
- Security and fraud prevention
- User preferences (language, theme)
Analytics Cookies (Optional)
These cookies help us understand how users interact with Linya, allowing us to improve features and user experience. You can disable these in your cookie settings.
- Feature usage tracking
- Performance monitoring
- Error diagnostics
- A/B testing and optimization
Local storage (no cookie)
On our public pages we keep one entry in your browser's local storage, linya.firstTouch, with the page you arrived on, the link's campaign tags and the referring site's domain. It is sent once, right after you sign in, and kept only for accounts created in the last 7 days; then it is deleted from your browser. If it is not sent, it is no longer used after 30 days and is removed the next time you open one of our public pages. Page-view statistics on public pages are anonymous and use no cookies.
Managing Cookies
You can manage your cookie preferences through your account settings or browser settings. Note that disabling certain cookies may limit functionality.
Cookie Settings: Visit your Account Settings to manage cookie preferences.
We implement industry-standard security measures to protect your data:
Encryption in Transit
All data transmitted between your device and our servers uses TLS 1.3 encryption
Encryption at Rest
All stored data is encrypted using AES-256 encryption
Secure Authentication
Industry-standard authentication protocols with password hashing and secure session management
Regular Security Audits
Continuous monitoring, vulnerability scanning, and security updates
Access Controls
Strict internal access policies and role-based permissions for our team
Automated Backups
Regular encrypted backups to prevent data loss
Security Incident Reporting
While we implement robust security measures, no system is 100% secure. If you discover a security vulnerability, please report it immediately to security@linya.ai
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or prominent notice within the application
- Provide a reasonable notice period before changes take effect
- Maintain an archive of previous policy versions for your reference
Your continued use of Linya after policy updates constitutes acceptance of the revised terms. If you do not agree with the changes, you may delete your account.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Inquiries
privacy@linya.aiSecurity Issues
security@linya.aiGeneral Support
support@linya.aiData Protection Officer
dpo@linya.aiResponse Time
We aim to respond to all privacy-related inquiries within 2 business days and resolve requests within 30 days as required by applicable laws.
Compliance & Certifications
Linya is committed to compliance with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations. We continuously update our practices to meet evolving legal requirements and industry standards.