Effective July 9, 2026 · Updated July 18, 2026
Cloister Ink is built on a simple rule: your writing is yours. This policy is short because there is very little to disclose.
Seven Swords Productions LLC collects nothing. Cloister Ink has no accounts, no sign-in, no analytics, no telemetry, and no servers we operate. We never see your documents, your usage, or your identity.
There is one exception, and it is entirely your choice: the optional "Ask" feature, which is off by default. If you turn it on and supply your own Anthropic API key, the text you highlight is sent to Anthropic under your own account. It never reaches us. Because that text leaves your device to a third party, our App Store privacy label declares it as user content used for app functionality and linked to your identity, since your API key identifies your Anthropic account. Full detail is in the Ask section below. Leave Ask off and nothing leaves your device at all.
Your documents are plain markdown files stored in your own iCloud Drive (the default when iCloud is available) or locally on your device — you choose the location in Settings and can move any file between the two at any time. iCloud storage and sync are provided by Apple under Apple's privacy policy; Cloister Ink simply reads and writes files in your own container. Draft-history snapshots are stored locally on your device and never leave it.
Ask is off by default. If you enable it, you provide your own Anthropic API key, which is stored only in your device's Keychain — never written to disk in plain text, never logged, and never transmitted anywhere except to Anthropic as the credential on requests you start.
When you send an Ask request, the app transmits only the text you explicitly highlighted and the instruction you typed (follow-up questions resend that conversation), directly to Anthropic's API using your key. In addition, while Ask is enabled and a key is present, opening Ask may request Anthropic's current model list using your key (at most once per window per app run), so the model picker stays current. The on-screen indicator is visible whenever any of these requests is in flight, and nothing is ever sent without Ask being enabled. Your use of Ask is governed by Anthropic's privacy policy under your own API account. Disable Ask and Cloister Ink makes no network connections at all.
Cloister Ink is sold through the App Store. Payment is handled entirely by Apple; we receive no personal or payment information about you.
Cloister Ink is sold in many countries, and privacy laws such as the EU/UK GDPR, Brazil's LGPD, Canada's PIPEDA, and the California Consumer Privacy Act give you rights over personal data an app maker holds about you — access, correction, deletion, and portability among them. Because we hold nothing, those rights are already in your hands: your documents are plain files you can read, export, or delete at any time; deleting the app deletes everything it stored on your device; anything in iCloud is controlled through your own Apple account. We do not sell or share personal information — we have none to sell. If you believe we hold any personal data about you (for example, from a support email you sent us), contact us and we will confirm, provide, or delete it. If you email us, we use your message and address only to respond, keep them no longer than needed, and delete them on request. You may also raise a concern with your local data-protection authority (for example, the UK ICO, Brazil's ANPD, or the Office of the Privacy Commissioner of Canada).
Apart from anything you choose to email us — which is received in the United States — we transfer no data across borders, because no other data reaches us. The only international network activity the app can perform is the optional Ask feature described above — requests you initiate, sent with your own key, under your own agreement with Anthropic.
Cloister Ink is a general-audience writing app, not directed at children. Seven Swords Productions LLC collects no data from anyone, including children. The optional Ask feature is off by default and requires an adult to obtain and enter an Anthropic API key before any text can leave the device.
If a future version ever changes what leaves your device, this policy and the App Store privacy label will be updated first, and the change will be called out in the release notes.
Seven Swords Productions LLC — contact@sevenswordsproductions.com · sevenswordsproductions.com