Privacy & text processing

How Check AI handles your drafts, requests and results.

You choose what to submit. Review how your text is processed and stored below.

Privacy, providers & retention

Who is responsible

Check AI is operated by Hafid Idrissi, Entrepreneur individuel (EI), trading as H.I. Solutions, 67 rue Charles-de-Gaulle, 78350 Jouy-en-Josas, France, SIREN 981951080. This operator is responsible for the account, service and security processing described here. Contact support@checkai-app.com to exercise your data rights. See the legal notice.

Purposes, legal bases and your rights

Account management, saved texts and the AI processing you request are necessary to provide the service. Security and proportionate abuse prevention rely on the operator’s legitimate interests. Required accounting records are kept to meet legal obligations. The optional trial browser identifier requires your permission and can be disabled below.

You may request access, correction, deletion or portability of your data and, where applicable, restriction or objection to processing. Withdrawing optional storage permission does not affect earlier lawful processing. Send your request to support; we normally respond within one month, subject to the extensions permitted by law. You may complain to the CNIL.

Hosting, payments and international processing

Cloudflare hosts the application and handles network and security signals; Supabase provides authentication and saved-data storage; Resend handles email delivery and support. Stripe handles payment data when paid billing is available. Check AI does not receive your full card number. Google receives the sign-in information necessary when you choose Google authentication.

These providers may process data outside France or the European Economic Area under their applicable contractual arrangements. Do not assume that all processing remains in the EU. Cloudflare privacy · Supabase privacy · Resend privacy · Stripe privacy.

Contact and support messages

For questions about your data or account, email support@checkai-app.com. Support conversations are received and managed through Resend. Only include the information needed to resolve your request; do not email passwords, payment card details or API keys.

Developer API

API keys are stored as hashes; the complete key is shown only when created. API input text passes through Check AI to ZeroGPT but is not stored in the developer request table. Results remain accessible for seven days and are removed by daily cleanup. Content-free request identifiers, fingerprints, usage, credit movements and purchase records remain for deduplication, security and accounting. The provider’s retention policy still applies; we do not promise zero retention. You can revoke keys in the developer console and request account deletion in Settings.

What stays on your device

PDF, Word and text imports are read in your browser; importing alone does not upload the original file. The extracted text can be sent when you save a document or run an AI tool.

Who processes your text

Check AI’s backend receives your submitted text. ZeroGPT processes that text and the settings for the selected AI tool. Older requests may have been processed by Undetectable AI. Our API request does not include your account email, document title or original file. Any personal information written inside the text is included.

Supabase provides account authentication and database storage for saved documents, processing requests and results. Access to saved work is restricted to your account through database access rules.

How long it is kept

The browser draft expires 24 hours after its last save and is cleared when the app next reads the expired draft. You can also remove it by clearing this site’s browser storage.

Saved texts stay until you delete them, with up to 5 saved versions. Result history lasts 7 days on Free, 30 on Starter, 90 on Pro and 180 on Max or Scale. The plan at creation determines each result’s expiry; later plan changes do not alter it. Expired results become inaccessible and are automatically deleted within 24 hours, including text and output held in processing records. Content-free request identifiers and billing records remain to prevent duplicate charges and preserve accounting. Existing history receives at least 7 days before the first cleanup.

ZeroGPT’s published policy states that private submitted content is not used to train models. An exact API-text retention period has not been independently confirmed for this integration. Check AI does not promise zero retention.

Read the provider’s privacy policy (opens in a new tab)

Free trial eligibility

You can optionally allow a random browser identifier for up to 90 days using the storage controls below. Without permission, requests use a fresh identifier that is not saved in browser storage. We retain hashed email and request/browser identifiers, the request ID, word count and claim date in a restricted trial ledger, including after account deletion, to prevent repeat claims and enforce the shared trial budget. This ledger contains no submitted text. It currently has no automatic expiry. It does not identify your hardware.

Your deletion controls

Move documents to Trash, then permanently delete them there. Saved results must be removed separately from History. Account deletion is available in Settings. Deleting data in Check AI does not automatically send a deletion request to the AI processor, and immediate removal from infrastructure backups is not guaranteed. The limited trial eligibility record described above is retained.

Document trash History Account settings

Cookies & browser storage

Check AI uses browser storage to keep you signed in and recover your drafts. This includes local storage, not just cookies. We do not install advertising trackers. Optional website analytics run only after you allow them.

Language preference Functional: When you choose a language, Check AI remembers it in the checkai-language cookie for one year. Without a saved choice, we use your browser language, then your country if needed. You can change the language in the header at any time.
Account session Necessary: Supabase stores your sign-in session in this browser and refreshes it while your session remains valid. Sign out to remove the stored session, or clear this site’s browser data.
Draft recovery Functional: Local draft copies expire 24 hours after their last save. Expired copies are removed when the app next opens. A closed browser cannot run this cleanup. Documents saved to your account are separate.
Authentication security Necessary: Cloudflare Turnstile processes browser signals to help protect sign-up, sign-in and password recovery from bots. Our widget does not enable the optional clearance cookie. Read Cloudflare’s Turnstile privacy policy (opens in a new tab).
Trial browser identifier Optional: With your permission, a random identifier helps recognise this browser for free-trial abuse prevention. It lasts up to 90 days from creation, including after sign-out; visits do not extend that lifetime. It is not a hardware identifier. Turning it off removes the identifier from this browser.
Your storage choice 180 days: We remember the choice below on this browser for 180 days after you change it. When it expires, optional identification is off again. You can return here from the footer at any time.
Website analytics Optional: With your permission, Cloudflare Web Analytics measures page visits, referring sites, country, device, browser and loading performance. The beacon does not use cookies, browser storage or a persistent visitor identifier. We do not send your writing, saved document contents, account email or payment details to this analytics tool, and do not link its reports to your account. Cloudflare states that URL query strings are not logged; do not put personal information in URLs. Reports can cover the previous six months and may use sampling. Cloudflare discards the source IP at its nearest data centre; processing is not guaranteed to remain in the EU. Read how Cloudflare collects performance data (opens in a new tab).

Allow a trial browser identifier

Off by default. You can still request your free trial without it. Account eligibility, request limits and the shared trial budget still apply. Changing this choice does not reset a trial already claimed or delete its server record.

Allow optional website analytics

Off until you agree. This separate choice is remembered for 180 days without a visitor identifier. You can change it here at any time. Withdrawal reloads this page if analytics were already running, so its listeners stop. Refusing does not affect your account, writing tools or free-trial eligibility.