Rewrite Privacy Policy

Last updated: 11 August 2026 · Versión en español

Rewrite is an educational app developed for students of the Spanish National University of Distance Education (UNED) to learn English. This policy describes what personal data the app collects, for what purpose, with whom it is shared, and how you can exercise your rights.

1. Data controller

UNIVERSIDAD NACIONAL DE EDUCACIÓN A DISTANCIA (UNED)
Calle Bravo Murillo 38, 28015 Madrid, Spain
Email: rewrite@gmail.com
Data Protection Officer: rewrite@gmail.com

2. Data we collect

• Email and password: to authenticate you in the app.
• Internal user identifier: generated by our systems to associate your activity with your account.
• User-generated content: writings, exercise answers and learning progress.
• Interface language preference (Spanish or English).
• Usage and analytics data: pseudonymized usage statistics (pages visited and in-app events) through Google Analytics, to understand usage and improve the service.

The app does not collect advertising identifiers, location data, contacts, photos or biometric data.

3. Purpose of processing

Data is used exclusively to provide the educational service: authentication, saving your progress, automatic correction of texts and access to UNED's learning materials. It is not used for advertising, commercial profiling, nor shared with third parties for commercial purposes.

4. Legal basis

Processing is based on the consent given by the user at registration, on the performance of the educational service, and on UNED's public-interest mission.

5. Third parties (data processors)

To provide the service we use the following providers, subject to data processing agreements:

• Vercel Inc. — hosting of the application server.
• Cloudflare, Inc. — content delivery network for document display.
• Google Ireland Ltd. (Google Analytics) — pseudonymized measurement of app usage.

6. Data retention

We keep your data while your account is active. If you request account deletion, data is deleted within a maximum of 30 days, unless there is a legal obligation to retain it.

7. Security

All communication between the app and our servers is encrypted using HTTPS. We apply technical and organizational measures to protect data against unauthorized access.

8. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection under the GDPR by writing to rewrite@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

9. Account deletion

You can delete your account and all associated data directly from the app, under My profile → Delete my account. Alternatively, you can follow the instructions at rewrite.es/eliminar-cuenta.html.

10. Changes to this policy

Any change to this policy will be published on this same page with the new update date.

11. Contact

For any query about this policy or the processing of your data, write to rewrite@gmail.com.