Skip to content
Subtextual Start writing

editing.help · Subtextual

Privacy Policy

Last updated October 24, 2026

Your writing stays in your browser unless you choose otherwise. You can use Subtextual without an account. If you sign in, only the documents you choose to sync are stored with your account.

Subtextual never sells your writing, never uses it to train AI, and no one at editing.help reads it. It’s shared only with people you invite.

The editing.help website has no analytics, advertising or tracking scripts. It collects no card details, and writing to editing.help never adds you to a mailing list.

If you subscribe to Subtextual AI, it’s sold through Link, Stripe’s checkout service, which handles your payment. Subtextual keeps only what it needs to know your subscription is active.

Who this covers

This policy covers the editing.help website (the studio, its courses, samples and Notes) Subtextual, the writing app at editing.help/app/, and Subtextual for Mac, the same app for the Mac from the Mac App Store or as a download from editing.help. All are made by editing.help, a business of Dev Edit Portland, Inc., 3055 NW Yeon Ave #747, Portland, OR 97210. Questions about this policy go to info@editing.help.

Subtextual Capture, the companion Mac app, has its own privacy policy.

The editing.help website

Using the site

The site doesn’t include analytics or advertising scripts, and its pages and fonts don’t rely on a third-party tracking service. Like any website, its host keeps ordinary request logs; see “Who processes data” below.

Asking about Subtextual. If you type a question into “Ask anything about Subtextual.” on this site and send it, your browser sends it to Subtextual’s server at ask.editing.help. The server sends it, with the site’s own pages, to an AI model (Anthropic’s Claude, through OpenRouter) on services that keep no copy of it and don’t use it for training. Your browser never contacts them directly. Subtextual doesn’t keep your question or the answer: each request leaves only a short record of its outcome, size, cost and time, with no words and no IP address, kept for 3 days. Your IP address is used only to limit how many questions one visitor can ask. It’s held in the server’s memory for at most a day, never written down, and isn’t sent to OpenRouter or Anthropic. Neon, which runs the server, keeps its own network logs under its own privacy policy. Don’t type anything private there. Nothing is sent until you send a question.

Writing to editing.help

Contact and interest links open your own email app, and nothing is sent until you choose to send it. Your message is then handled by your email provider and the receiving email service. Describe your need broadly, and leave out confidential client or learner material until handling arrangements are agreed. An inquiry is never permission to subscribe you to marketing email.

Course samples

Samples can be read and printed without an account. They don’t connect to AI, and they don’t save or submit your work. Nothing you write on a printed copy is sent anywhere.

Payments

Purchases and enrollment for courses aren’t open. The one thing you can pay for is the Subtextual AI subscription, described below. It’s sold through Link, and its payment happens on Link’s checkout page, run by Stripe, not on this site, so no card information is collected by editing.help.

Ground First letters

The Ground First newsletter is on Substack. If you subscribe, you enter your email on Substack, not here, and Substack’s own terms and privacy policy apply.

Links to other sites

Links to Substack, LinkedIn, randalll.com and other portfolio or method sites lead to separate websites with their own practices. Choose what you share there.

Subtextual: without an account

Everything you write stays in your browser’s storage on the device you’re using: your documents with their subtext and notes, your Pretext (including captures and their images), your groups and pins, your display settings, your AI settings, and the Capture pairing code. So do the restore points Subtextual keeps before a restore, and anything it sets aside because it couldn’t be read. None of it is sent to Subtextual. Undo history is kept in memory only, and is never saved.

Covers and other pictures you add, by uploading, pasting, dropping or dragging them in from a web page, are stored inside the document. When you drag a picture from a web page onto a document’s card, Subtextual fetches that one image from the site it’s on, once, at that moment, without cookies or a referrer, and keeps a small copy inside the document. Apart from the services named in this policy, that’s the only time the app contacts another website.

Clearing your browser’s data, using private browsing, or losing your device can remove it. You can export any document at any time, as Markdown, Word, PDF, a full project file, or a context bundle for an AI, and import Markdown, plain-text and Word files, or a Subtextual project file. Both happen in your browser: nothing is sent anywhere, and images linked from an imported file aren’t fetched. An imported document is a new document like any other, never replacing what’s already there, and it stays in your browser unless you turn on sync for it.

Subtextual: if you sign in

Signing in is optional. You can sign in with a six-digit code sent to your email, or with your Google account. Sign-in is handled by Neon Auth, a service of Neon, which stores sign-in details on Subtextual’s behalf.

What sign-in records

When you sign in with an email code, Neon Auth receives your email address, the name you type, and the time of each code. A code expires after a few minutes. Sign-in codes are sent by email through Google Workspace, which sees the address and the message and keeps its own delivery logs.

When you sign in with Google, Neon Auth receives your name, email address, Google account ID and profile picture link from Google, plus sign-in tokens from Google.

To keep you signed in, Neon Auth records your session, including your IP address and browser type. A session lasts up to 7 days.

Subtextual uses your name and email only to identify your account and show who’s signed in. It doesn’t load your profile picture or use the Google tokens, IP address or browser type.

Syncing documents

Signing in doesn’t upload anything by itself. You choose which documents to sync, one at a time, with Sync this document in a document’s settings. Turning sync on for a document brings the documents nested inside it along. A synced document is stored as one record: its title, the page text with its formatting, the subtext beneath it (including any AI-written bullets, marked with the model and Reader that wrote them), its Context notes, its links to other documents, its brief and Reader for the AI, whether it’s archived, the images placed in it (including its cover), and its dates, including when each paragraph and thought was written and last edited. Linking to another document doesn’t sync that document; only documents you turn sync on for are uploaded. A document opened out of another remembers where it sits, and that travels with it. The database also stores your account ID and a revision number. It’s kept in a database run by Neon in the United States (AWS US East, Ohio), so it’s available wherever you sign in.

Documents you don’t sync stay only in your browser, and so do your Pretext, your groups, pins and recent list, your settings, your AI keys, “About you” and any custom readers you write, and the Capture pairing code. A synced document arrives on another device ungrouped and unpinned. Subtextual also keeps a small record in your browser of which documents are synced, their revisions and your account ID. The built-in Guide is saved in your browser like a document but is never synced.

Your browser talks to Neon’s sign-in and database services directly; there’s no other Subtextual server in between. Access rules in the database let each account read and change only its own documents.

A synced document, including its images, can be up to about 10 MB. Larger documents stay on your device.

Two devices, one document

If a synced document was changed on two devices, the version in your account wins, and the other device’s edits are saved there as a separate document named “… — another version”. That copy stays only on that device unless you choose to sync it.

Stopping sync and signing out

Stopping sync for a document removes it from your account. Your other devices keep their local copy, stop syncing it, and show a notice.

Signing out stops syncing on that device and clears your personal things from the browser. Synced documents are removed from it by default; they stay in your account and come back when you sign in. You can choose to keep them on the device instead. Documents that aren’t synced are never deleted without asking: you choose to sync them first, download a backup, or keep them. Signing out also clears your AI settings (your keys, models, “About you”, custom readers, and the Subtextual AI key on that device), your Pretext (including captures from Subtextual Capture and their images) and the Capture pairing code. Your display settings, such as the theme, typeface and text size, stay. Changes to documents you keep upload the next time you sign in to the same account there; if a different account signs in, they stay on the device and are never uploaded to it.

Private sync (end-to-end encryption)

Private sync is optional and off by default. When it’s on, your synced documents are encrypted on your device, with a passphrase only you know, before they’re uploaded. Subtextual’s server stores them but can’t read them: the title, the page, the subtext and the notes are all encrypted. The copies on your own devices stay readable there. A device that remembers the key keeps it in that browser’s storage; lock or sign out to forget it.

Its limits, plainly:

If you share a document

You can invite someone to read a document and write beneath it: an editor, a teacher, a writing partner. Only you write the page.

If someone shares a page with you

To write beneath someone’s page, you sign in, so your notes have an author that can be trusted.

Field Guides

Field Guides is a public shelf of guides from editing.help, inside Subtextual.

The AI is optional

With each question, the AI also receives the instructions that shape its answer: your “About you”, the document’s brief, and its Reader, including the instructions of any custom reader you’ve written.

Notes from people you invited: when you ask the AI about a page you’ve shared, the notes people sent you on it go with the question, labelled with each person’s first name (“[Editor: Dana]”), so the AI can tell their words from yours. Turn this off for a document in its menu (“Include their notes when you ask the AI”).

There are two ways to use the AI, and you can use neither. With your own key, or with a Subtextual AI subscription.

With your own key

If you choose to use the AI with your own key, you connect a key from Anthropic, OpenAI or OpenRouter in Settings. The key is stored only in your browser. It isn’t synced, and it never appears in exports or project files.

When you ask the AI something, your browser sends the text in that question’s scope (the whole document by default, or just its paragraph, or linked documents too, if you choose) straight to the provider you connected, under that provider’s own terms and privacy policy. Nothing passes through editing.help, and Subtextual doesn’t see or store these requests. Choosing OpenRouter in Settings also fetches its public list of models; that request carries no writing.

With Subtextual AI (subscription)

Subtextual AI is an optional subscription that includes AI answers without a key of your own. You need to be signed in to subscribe, and the subscription belongs to that account. If you subscribe:

What Subtextual never does

Cookies, storage and analytics

Deleting your data

When you delete a synced document or your account, or stop a share, the writing is removed from Subtextual’s database right away. Copies can remain in the database provider’s recovery history for up to 6 hours, and in a saved restore point for up to 30 days, after which they expire. Those copies are used only to recover the service after a failure.

Subtextual Capture

Subtextual Capture, the companion Mac app, doesn’t send anything to Subtextual in its current version; it has its own privacy policy.

Subtextual for Mac

Subtextual for Mac is the writing app for your Mac, from the Mac App Store. Your writing stays on your Mac: there’s no account, no sign-in, no sync and no subscription, and none of your writing is sent to Subtextual or editing.help. The app goes online only for the things listed below: the AI, if you set it up, Field Guides, if you open it, and pictures you drag in from the web.

Subtextual for Mac, downloaded from editing.help

The version you download from editing.help/download/ is the same app, with the differences below. Everything above applies to it too, except where this says otherwise.

Children

The editing.help website and Subtextual aren’t directed at children under 13, and don’t knowingly collect information from them. You must be 13 or older to create an account, or older where local law requires. Sharing is for adults working together, such as an editor, a teacher or a writing partner. It isn’t meant for sharing with or from children under 13, or for school use that needs a data-protection agreement.

Who processes data

ServiceWhat forWhen
NeonSign-in, synced documents, shared pages and notes, and the Field Guides shelf (in Subtextual and Subtextual for Mac)If you sign in, or open Field Guides
Google WorkspaceSending sign-in codes, invitations you ask Subtextual to send, and “notes arrived” emailsOnly if you sign in with an email code, or share or are shared with
GoogleSigning in with your Google accountOnly if you sign in
Anthropic, OpenAI or OpenRouterAnswering AI questions in Subtextual and Subtextual for Mac, with your own keyOnly when you ask
Stripe, through LinkSelling Subtextual AI: payment, sales tax or VAT, receipts, the billing portal and link.comOnly if you subscribe
OpenRouter, and Google Vertex or Amazon Bedrock running Anthropic’s Claude models (Claude Haiku 5.5 and Claude Sonnet 5.5)Answering AI questions for Subtextual AI subscribers, under Subtextual’s account, with no prompt retention or trainingOnly when a subscriber asks
Neon (ask.editing.help), OpenRouter, and Anthropic’s ClaudeAnswering questions typed into “Ask anything about Subtextual.” from the site’s own pages, with no prompt retention or trainingOnly when you send a question
SubstackThe Ground First newsletterOnly if you subscribe there
Namecheap, the editing.help web hostServing the website and app filesEvery visit. Standard access logs record your IP address, the time, the page requested, your browser’s user agent and the page you came from. They’re kept for up to about two months for security and troubleshooting, then deleted.

Changes

If this policy changes, the new version will be posted here with a new date. Any change to what leaves your device will be described before it takes effect.