Privacy Policy - WorldKonstruct

Privacy Policy

Last Updated: April 11, 2026

Welcome to WorldKonstruct ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you use our Google Docs add-on, WorldKonstruct ("the Add-on").

The short version: Your manuscript is never stored on our servers. AI uses paid commercial APIs with no data retention and no model training. Your story bible lives in your own Google Drive. You own everything.

1. What Google User Data We Access

To provide its features, the WorldKonstruct Add-on requires access to specific Google user data. We are committed to the principle of "least privilege" and only request access to data that is essential for the Add-on to function. Below is a complete list of the Google user data we access:

  • Your Email Address: We access your primary Google account email address. This is used solely to identify you as a user and to verify your licence status (FREE or PRO tier). This allows us to provide you with the correct set of features based on your account level.
  • Content of the Current Google Document: WorldKonstruct interacts with the content of the currently active Google Document in which you have opened the Add-on. This access is required for core functions including:
    • AI Document Scanning: Analysing your manuscript text to identify and suggest characters, locations, objects, factions, worldbuilding elements, and events for your story bible. Uses 6 parallel category-specific prompts for fast extraction. Document text is sent to AI services (see Section 2) for analysis but is not stored by us or retained after the scanning session. Delta resync only processes changed content.
    • AI Enhance & Enrich All: Sending entry names and context to AI services to generate or enrich story bible entry fields (descriptions, relationships, etc.). Only the entry name and relevant context are sent — not your full manuscript.
    • Dramatica Archetype Analysis: Sending character and event data to AI services to generate reports on character arcs, throughlines, and theme patterns.
    • @Mention Linking: Inserting and managing linked references to your story bible entries within your document.
    • Rename Propagation: Updating all @mention references when you rename a story bible entry.
    The Add-on does not access, read, or store content from any other documents in your Google Drive.
  • Application-Specific Data Stored in Your Google Account: WorldKonstruct uses Google's built-in PropertiesService to store data necessary for its operation. This data is stored securely within your own Google account's storage, partitioned for this Add-on's use only. This data includes:
    • Story Bible Entries: Character profiles, location details, objects, factions, worldbuilding elements, and event data that you create or that AI scanning discovers. This includes entry names, types, descriptions, relationships, and @mention tracking data.
    • User Preferences: Your chosen settings, such as display preferences, AI usage preferences, and sidebar configuration.
    • Sync State: Metadata required to synchronise your story bible between the sidebar and linked Google Sheets (if you use the Architect/Sheets workflow).
    • AI API Key (BYOK users only): If you are a Pro user and choose to bring your own AI API key (Google Gemini, Anthropic, or OpenRouter), that key is stored in your Google Account's PropertiesService. It is never sent to our servers — it is transmitted directly from the Add-on to the AI provider's API over HTTPS.
  • Linked Google Sheets: If you choose to use the Architect mode (Google Sheets workflow), WorldKonstruct will read from and write to a Google Sheets spreadsheet that you explicitly link. This is used to provide a spreadsheet-based view and editing interface for your story bible entries. Access is limited to the specific spreadsheet you designate.

2. Data Sharing and Disclosure

We do not sell your personal data. Our policy is to minimise data sharing wherever possible. We only share data with third parties in the following limited circumstances:

  • Licence & Tier Verification: We securely transmit your Google email address to our backend database (Supabase) to verify your licence status (PRO or FREE). Your purchase is processed by LemonSqueezy, our payment processor, which shares your email with our backend to activate your Pro licence. This is the sole purpose of this data transfer.
  • AI Services: When you use AI-powered features (Document Scanning, AI Enhance, Enrich All, reports, or idea-to-bible setup), relevant text — such as document excerpts or entry names — is sent to one or more of the following AI services for processing:
    • Google Gemini (Flash 2.5 / Pro — paid commercial tier) — The primary AI provider for all WorldKonstruct features. All included-credit AI requests — Document Scanning, entity extraction, validation, AI Enhance, Enrich All, and Dramatica Analysis — are sent directly to Google's Gemini API. Google does not use Paid API data for model training. Their terms of service apply.
    • Anthropic Claude (BYOK only) — If you bring your own Anthropic API key, supported BYOK requests are sent directly to Anthropic's API. Anthropic does not train on API data. Their privacy policy applies.
    • OpenRouter (BYOK only) — If you bring your own OpenRouter API key, requests are routed through OpenRouter to your chosen model. WorldKonstruct's own infrastructure never routes through OpenRouter. OpenRouter's privacy policy applies.
    No document content or AI input is stored or retained by us after processing completes. AI Name Suggestions use a lightweight local method and do not send any data to external AI services.
  • Image Proxy (Character Avatars): When character avatar images are displayed in the sidebar, the image URL is sent to our Supabase backend, which fetches and proxies the image on your behalf. This is required because Google's iframe security policy blocks direct loading of third-party images. Only the image URL is transmitted — no document content or personal data is included in these requests.
  • Pinterest URL Resolution: If you paste a Pinterest pin URL as a character avatar image, WorldKonstruct sends that pin URL to Pinterest's oEmbed API to resolve the direct image URL. Only the pin URL you provided is transmitted — no personal data, document content, or story bible data is included in these requests. Pinterest's privacy policy applies.
  • Anonymous Usage Analytics: As detailed in the next section, we share anonymous interaction data with Google Analytics. This data does not include any of your personal information or document content.

3. Data Protection and Security Mechanisms

We are committed to protecting your data. WorldKonstruct employs the following data protection and security mechanisms:

  • Limited Data Access: WorldKonstruct is designed to request the minimum possible permissions. It operates under the https://www.googleapis.com/auth/documents.currentonly scope for document access, ensuring it can only ever access the single document you have it open in.
  • Secure Data Transmission: All communication between the Add-on and Google's servers, as well as external API calls, is performed over secure and encrypted HTTPS connections.
  • Secure Google Storage: All your story bible entries, user preferences, and sync state are stored using Google's PropertiesService, which resides within Google's own secure infrastructure. We do not store this data on our own servers.
  • Document-Scoped Storage: Story bible entries are scoped to the specific Google Document they belong to. Each document has its own independent story bible.
  • No External Document Storage: The content of your writing and story bible entries is never stored on our servers. All data remains within Google's infrastructure (your document properties, your Google Sheets) or is sent transiently to AI services during active processing and immediately discarded.
  • BYOK Key Isolation: If you use your own AI API key (Gemini, Anthropic, or OpenRouter), it is stored solely in your Google Account's PropertiesService and transmitted directly to the respective AI provider over HTTPS. It never passes through our servers.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Anonymous Usage Analytics

To improve the WorldKonstruct Add-on and provide the best possible experience for our users, we collect anonymous data about how the Add-on is used. This helps us understand which features are most popular, identify areas for improvement, and diagnose technical issues.

What We Collect

  • Anonymous Interaction Data: We track anonymous events such as which features are used (e.g., an "AI Scan" activation, entry creation, @mention insertion), which buttons are clicked, and general usage patterns.
  • AI Usage Metadata: We collect non-personally identifiable metadata about AI scanning sessions, such as the number of entries discovered and scan duration — but never the content of your document or the text analysed.

What We DO NOT Collect

We are writers ourselves, and we built this tool with privacy at its core. We want to be absolutely clear about what we never collect:

  • We NEVER track or store the actual text you write. Your manuscript content never leaves the Google Docs environment to be sent to our analytics service.
  • We NEVER track or store your story bible entry content (character descriptions, location details, etc.) through our analytics.
  • We NEVER track or store your document titles or any other personally identifiable information from your documents.
  • We NEVER collect personal information like your name, age, or location through our analytics.

Why We Collect This Data

  • To Improve the Product: Understanding which features are used most helps us prioritise future development and make WorldKonstruct more useful.
  • To Fix Bugs: Usage patterns can help us identify and resolve technical issues more quickly.
  • To Make Data-Driven Decisions: This data allows us to make informed decisions about the future of the Add-on based on real user behaviour, not guesswork.

Service Providers

We use Google Analytics to process this anonymous usage data. Google Analytics is a standard, industry-leading service for application analytics.

Device Identifiers

Like most analytics services, Google Analytics uses first-party cookies and other anonymous identifiers (like an application instance ID) to help collect this data. These identifiers are used to distinguish unique users and to throttle the request rate. You can control the use of cookies at the individual browser level.

5. Other Privacy Information

Who We Are

WorldKonstruct is a product designed to help writers build and manage story bibles within Google Docs. For any privacy-related inquiries, you can reach us via our contact email.

Data Retention

We retain your data only as long as necessary:

  • Story bible entries and user preferences stored in your Google Document Properties are retained as long as the document exists. They travel with the document.
  • Linked Google Sheets data persists until you unlink the sheet or delete it. Your story bible is stored as a standard Google Sheet in your own Google Drive — one tab per entry type, plus relationship and metadata tabs.
  • Sidebar cache data (stored in your browser's IndexedDB/localStorage) is cleared when you clear your browser data or uninstall the Add-on.
  • Licence status information linked to your email is retained in our backend database (Supabase) for as long as your licence is active. Since Pro is a one-time lifetime purchase, this record persists indefinitely so we can continue to verify your Pro access. Purchase records are also retained by our payment processor (LemonSqueezy) in accordance with their retention policies and applicable law.
  • If you use your own AI API key, it is stored in your Google Account's PropertiesService and is removed when you clear it from settings or uninstall the Add-on.

Your Rights

Depending on your location, you may have certain rights regarding your personal information. Since most data is stored within your Google Account's properties, managing or deleting this data is primarily done by uninstalling the Add-on or deleting the associated document. For requests related to your licence or purchase information, please contact us at privacy@wordfokus.com.

Children's Privacy

WorldKonstruct is not intended for use by individuals under the age of 13 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: