Privacy Policy

1. Information We Collect

We collect the following types of information when you use Prompt Nanny:

• Account information: Email address, display name, and avatar (if provided via OAuth).
• Prompts and generated content: The prompts you input, enhanced prompts, and any generated text or images you create or save.
• Usage data: Number of enhancements used, saves, and feature interactions to improve our service.
• Payment information: When subscriptions are available, payment details are handled securely by our payment processor (LemonSqueezy). We do not store raw payment card data.

2. How We Use Your Information

• To provide and maintain the Prompt Nanny service.
• To process your prompts through AI models for enhancement and generation.
• To track usage against your tier limits (free, basic, pro, ultra).
• To send essential transactional emails (e.g., magic link sign-ins, subscription updates).
• To improve our AI models and user experience (anonymized where possible).

3. Data Storage & Security

Your data is stored securely using Supabase, which provides encryption at rest and in transit. We implement Row Level Security (RLS) to ensure you can only access your own data.

Generated images are stored in Supabase Storage with public URLs for display within the app. We do not share your private prompts or generated content with other users unless you explicitly save them to public collections.

4. Third-Party Services

We use the following third-party services to power Prompt Nanny:

• Supabase — Authentication, database, and file storage.
• Together AI — Image generation and text model inference.
• OpenRouter — Text generation via various AI models.
• LemonSqueezy — Subscription management and payment processing.

When you generate content, your prompts are sent to Together AI and/or OpenRouter. Their privacy policies apply to that data transfer.

5. Chrome Extension

The Prompt Nanny Chrome extension extends our prompt-engineering workflow into your browser. We designed it with privacy as a first principle — the extension does not track your browsing history, log keystrokes, or monitor pages in the background.

5.1 Data Stored Locally

The extension uses chrome.storage.local to store:

• Your authentication session (encrypted tokens, managed by Supabase).
• User preferences: dock enabled/disabled, universal detection toggle, curated site list.
• Pending sidepanel state (text to enhance, selected tab).

This data never leaves your browser unless you explicitly trigger an action (e.g., clicking Enhance).

5.2 Local Input Scoring

When you focus a text input on a supported AI site (such as ChatGPT or Claude), the extension reads the text locally in your browser to calculate a quality score (0–100). This scoring happens entirely client-side — the text is not transmitted to our servers. The score is only displayed to you in a small dock below the input.

Your input text is sent to our API only when you explicitly click the Enhance button, use the right-click context menu, or press the keyboard shortcut (Ctrl/Cmd+Shift+E).

5.3 Optional Universal Detection (<all_urls>)

By default, the extension’s input detection and dock only activate on a curated list of popular AI-tool sites (ChatGPT, Claude, Gemini, Perplexity, and others). You can optionally enable universal detection in Settings, which requests the <all_urls> permission. This allows the dock to appear on any website where you focus a text input.

Even with universal detection enabled, the extension does not:

• Read or transmit page content in the background.
• Track which websites you visit or how long you spend on them.
• Send input text anywhere unless you explicitly trigger enhancement.

You can revoke universal detection at any time in Settings or via chrome://extensions → Prompt Nanny → Permissions. Revoking returns the extension to the curated site list only.

5.4 Page Text Import

The extension offers an optional Import from page feature in the sidepanel. When you click Selected text or Full page, the extension reads the current page’s text (either your text selection or the visible page content with scripts and styles stripped) and sends it to our /api/import-prompts endpoint as plain text. This action is always user-initiated — the extension never reads or sends page content automatically.

5.5 Context Menu

The extension adds a right-click menu item, “Enhance with Prompt Nanny”, which reads your currently selected text and opens the sidepanel with that text pre-loaded. The selection is read only when you right-click and choose this option — it is not monitored or stored otherwise.

5.6 Permissions Summary

• storage — Save your session and preferences locally.
• activeTab — Access the current tab for page-text import.
• scripting — Inject the content script (orb, dock, scoring).
• contextMenus — Add the “Enhance” right-click option.
• identity — Google OAuth sign-in via Chrome’s identity API.
• sidePanel — Display the sidepanel as the extension’s main UI.
• clipboardWrite (optional) — Copy enhanced prompts to your clipboard.
• <all_urls> (optional) — Enable input detection on any website.

6. Cookies & Tracking

We use only essential cookies required for authentication and dark mode preference. We do not use third-party tracking cookies (no Google Analytics, Meta Pixel, etc.).

7. Your Rights

You have the right to:

• Access all data associated with your account.
• Delete your account and all associated data (prompts, generated content, usage history).
• Export your saved prompts.
• Update your profile information.
• Revoke optional extension permissions at any time via Chrome’s extension settings.

To exercise these rights, contact us at the email below.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we permanently remove all associated data within 30 days. Anonymized usage statistics may be retained for service improvement. Extension data stored in chrome.storage.local is removed when you uninstall the extension.

9. Children's Privacy

Prompt Nanny is not intended for users under 13 years of age. We do not knowingly collect data from children.