Last updated: 25 July 2026
ControlG is built to be private by default. The short version: we don't run a server, we don't have accounts, and we never receive your text.
The ControlG apps (macOS, Windows, Android) do not send your selected or typed text to us. There is no ControlG backend. When you trigger a rewrite, your text goes directly from your device to the AI provider you chose (e.g. Google Gemini, OpenAI, Anthropic), authenticated with your own API key. We cannot see, store, or route that content. We do not use analytics or tracking inside the apps.
Your API keys and settings are stored locally and encrypted on your device (Keychain on macOS, EncryptedSharedPreferences on Android, DPAPI on Windows). They never leave your device.
On Android, ControlG uses the Accessibility Service for a single purpose: to read the text you select or type and to write the rewritten result back into the field. It is not used for any other data collection.
Payments are processed by Paddle, our Merchant of Record. When you buy, we receive your email address and order id in order to email you an activation code and provide support. Your card details are handled by Paddle and never reach us. Your email and order id are stored in a private spreadsheet used only for license delivery and support.
We use a transactional email provider (Resend) to send your activation code and support replies. We do not send marketing email.
You can request deletion of your purchase email/order record at any time by emailing shoron@getcontrolg.com.
ControlG is open source, so these claims are verifiable. You're welcome to read the code.
Contact: shoron@getcontrolg.com
← Back to ControlG