dusta typer for writing
Draft
This is a working draft, not final legal copy. It describes how Dust actually handles data today, but the business-of-record facts and the final wording are pending. It will be replaced before Dust's public launch.

Privacy Policy

Draft — last revised 17 August 2026. Effective date pending launch.

Dust is a writing app built to keep your work close to you and out of everyone else's hands. This policy explains, in plain terms, what Dust does and doesn't do with your data.

The short version

  • Your writing is stored on your own device first. Dust is local-first.
  • Dust runs no third-party analytics, no ad networks, and no cross-app trackers.
  • Dust never sells your data, and never uses your writing to train anything.
  • Your writing is copied to Dust's sync backend, hosted on Supabase, so it can reach your other devices — and nowhere else. On Mac, iPad, and iPhone that starts the first time Dust runs; in the web editor it starts when you sign in.
  • You can export your writing to plain Markdown or PDF at any time, and delete your account from the Mac, iPad, or iPhone app whenever you like.

What Dust stores, and where

On your device

The sheets you write are kept in a local database on your Mac, iPad, or iPhone, and in the browser's own storage in the web editor. That is the primary home for your writing: Dust reads and writes there, and syncing copies from it — the local copy is never removed.

In your account

Dust has no sync switch. Syncing follows your account, and on Mac, iPad, and iPhone an account is made for you: the first time Dust runs it opens an anonymous account and copies your sheets to the sync backend, so the same library can appear on your other devices. That backend is a Postgres database hosted on Supabase; a long sheet is held as a file in Supabase object storage instead, and the row points at it. Signing in with Apple attaches the same library to an account you own. The web editor is the exception: nothing is uploaded until you sign in.

Synced data is transmitted over an encrypted connection and stored to serve sync only — it is not mined, profiled, or shared. Signing out stops that device syncing to your account. On Mac, iPad, and iPhone the next launch opens a fresh anonymous account and resumes, so on those platforms there is currently no setting that keeps your writing off the sync backend.

Account & sign-in

Signing in uses Sign in with Apple on Mac, iPad, and iPhone, and a sign-in link sent to your email address in the web editor. Dust asks for your email address only — it does not ask for your name. You may give Apple's relay address instead of your real one. Dust does not receive or store your Apple password.

What Dust does not collect

  • No third-party analytics or telemetry SDKs.
  • No advertising identifiers and no ad networks.
  • No behavioral tracking across other apps or websites.
  • No use of your writing to train machine-learning models — Dust has no AI features by design.

Your choices

  • Export. Any sheet exports to Markdown or PDF at any time, with no account required.
  • Delete. You can delete sheets on-device; the next sync marks them deleted on the server, though their text is retained there.
  • Sign out. In the web editor, signing out ends syncing and your writing stays in the browser. On Mac, iPad, and iPhone it stops syncing to your account, but the next launch starts a fresh anonymous one.

Data requests & retention

Because your writing lives on your device, most of your data is already in your hands. Deleting a sheet marks it deleted on the server rather than erasing it, and there is no automatic purge today, so its text is retained. Deleting your account removes the account and the synced library with it, apart from the separate files that hold very long sheets and saved versions. For anything still held by the sync backend, you can request access or deletion by contacting support.

Children

Dust is a general-audience writing tool and is not directed at children. It is not intended for anyone under 13 — or under 16 where a higher age of digital consent applies, such as in parts of the EU and the UK — and it does not knowingly collect personal information from children.

Business of record & governing law

Dust is provided by [legal entity name], based in [jurisdiction]. This policy is governed by the laws of that jurisdiction.

OWNER — pending — Business of record deferred (AJ, 2026-07-12): the legal name and jurisdiction (your country + state/province of residence) settle together before launch, here and in the Terms.

Changes

If this policy changes in a material way, the revised version will be posted here with an updated date before it takes effect.

Contact

Questions about privacy? Reach us via the Support page.

← Back to Dust