Gramai

Privacy policy

Last updated: 2026-10-07

Who is responsible

Gramai is published by KROX GROUP DOO, Hajduk Stanka 8, 18000 Niš, Serbia, which is the data controller for everything described here. The terms of use cover licenses, billing and refunds.

What Gramai does

Gramai is a browser extension for Chrome and Firefox, with apps for Mac and Windows (a Safari version is planned). It rewrites the text you select: fix the grammar, make it professional, friendly or concise, or translate it into any of 30+ languages. It comes in four packages. On Free (10 actions per installation), Basic and Pro the rewrite runs on Gramai's own key through Gramai's server, so you need no API key of your own. On Own key you use your own API key with the AI provider you pick, and Gramai's server is not involved at all.

Data Gramai sends

When you pick a Gramai action from the right-click menu, the text you selected goes to one place and no other:

  • On Free, Basic and Pro, to Gramai's own server (see below), which passes it to OpenAI and returns the rewrite.
  • On Own key, straight from your browser to the AI provider you set up (for example OpenAI, Anthropic, Google, DeepSeek, Alibaba Cloud, Moonshot, Z.ai, MiniMax, or a custom endpoint you entered). No Gramai server is involved here, and we never see the text.

Gramai's server (Free, Basic and Pro)

The hosted packages are the one case where your text passes through Gramai. It goes to Gramai's own server, a Cloudflare Worker at api.gramai.dev, which forwards it to OpenAI using Gramai's key and sends the rewrite back. We do not store your text and we do not log it, at any point. OpenAI processes it under its own terms, and Cloudflare hosts the server under its own terms.

Besides the text, a request like that carries two things:

  • An installation id, a random identifier created in your browser the first time Gramai needs one and stored with your settings. It is there to count the 10 free actions per installation, and it identifies nothing else: not you, not your device, not your browsing.
  • Your license key, once you subscribe to Basic or Pro, so the server can confirm the subscription with Lemon Squeezy and count that day's usage against it.

The server stores counters, and only under a SHA-256 hash of the value they belong to: free actions used, per hashed installation id. Today's action and character count per hashed license key, together with the cached "is this subscription active" answer from Lemon Squeezy. Requests in the current minute per hashed IP address, which is a rate limit and is kept about two minutes. Free actions today per hashed IP address, which stops one address from collecting free actions under ever new installation ids, and is kept about two days. And a running count of all the characters Gramai sent to OpenAI today. The daily counters expire within days. The free counter is kept, because it is what makes the 10 actions a one-off per installation. Gramai's server never writes your text, your license key, your installation id or your IP address in a readable form, and nothing about the content of a request is logged. Cloudflare, which hosts the server, sees requests under its own terms (see above).

Basic and Pro subscriptions are sold and billed by Lemon Squeezy, the same as the one-time Own key purchase. You cancel or change a subscription from Lemon Squeezy's "My orders" page.

Data Gramai stores

  • Settings (provider, model, base URL, language, menu options) are stored in the browser's extension storage and synchronised across your devices by the browser's own sync (for example Chrome Sync).
  • API keys exist only on Own key, where you enter one, and they are stored in the browser's extension storage. If "Sync API keys across my devices" is on, which is the default, they are synchronised the same way. If it is off, they stay only on the current device. Safari does not sync API keys between devices.
  • Your license key and installation id are stored in the browser's sync storage alongside the settings.

We collect no analytics about you, we do not log your text, and there are no accounts. Gramai's server keeps one daily count of how many actions ran, by plan, by action and by app (Chrome, Firefox or the desktop app), with nothing in it that points to an installation or a person.

Licenses

A Basic, Pro or Own key license key is stored in your browser's sync storage, the same as your settings. When you activate a license, Gramai sends the license key and a short device label (for example "Chrome on macOS") to Lemon Squeezy to confirm the license and record which devices it's active on. Lemon Squeezy is the merchant of record for Gramai purchases. It handles checkout, receipts and your payment details directly, and Gramai never sees your card number. See Lemon Squeezy's privacy policy for how they handle payment data.

Permissions

  • contextMenus, to add the Gramai items to the right-click menu.
  • activeTab, scripting, to read the selection and replace text in the tab where you used the menu, and only after you click a Gramai menu item.
  • storage, to save your settings, your API key if you use Own key, your license key and the installation id the free actions are counted against.
  • Access to api.gramai.dev, which is Gramai's own server, so Free, Basic and Pro work without any setup. It is granted when the extension is installed, and in Firefox the options page asks for it. It covers no other website.
  • Optional host permission for the AI provider's API domain you select on Own key, requested when you choose that provider.

Gramai for Mac

The Mac app does the same work outside the browser, in any app where you can select text. Everything above applies to it, with these differences.

  • Accessibility permission. macOS asks for it once. Gramai uses it to read the text you have selected when you ask for an action, to put the result back in its place, and to notice a selection so it can offer its button. It reads nothing until you select text, and nothing it reads leaves your Mac except the selection you send for an action.
  • The clipboard. In apps that do not expose the selection, Gramai copies it and pastes the result for you. It saves what was on the clipboard before and puts it back afterwards.
  • The installation id is not a random number on the Mac. It is a one-way hash of the Mac's hardware identifier mixed with a fixed value of Gramai's own, so reinstalling the app keeps the same free allowance. The hardware identifier itself never leaves your Mac; only the hash is sent, and only to Gramai's server.
  • Keys and the license are kept in the macOS keychain and in a settings file under your user account. Nothing is synced anywhere by Gramai.
  • A log file at ~/Library/Logs/Gramai/gramai.log records what the app did and when, for troubleshooting. It never contains your text, your keys or any identifier. It stays on your Mac unless you send it to us yourself.
  • Links. Opening a gramai:// link from a Gramai receipt activates a license. The app accepts nothing else through links.
  • No analytics, no crash reports, no update checks other than the ones described above. The app talks only to Gramai's server, to the provider you chose on Own key, and to Lemon Squeezy for licenses.

Gramai for Windows

The Windows app does the same work as the Mac app, on Windows 10 and 11. Everything above applies to it, with these differences.

  • No permission to grant. Windows lets an app you installed read the text you have selected in another app and put the result back, without a setting to turn on. Gramai reads nothing until you select text, and nothing it reads leaves your PC except the selection you send for an action.
  • The clipboard. In apps that do not expose the selection, Gramai copies it and pastes the result for you. It saves what was on the clipboard before and puts it back afterwards.
  • The installation id is a one-way hash of the machine id Windows gives your PC, mixed with a fixed value of Gramai's own, so reinstalling the app keeps the same free allowance. The machine id itself never leaves your PC; only the hash is sent, and only to Gramai's server.
  • Keys and the license are kept in Windows Credential Manager and in a settings file under your user account. Nothing is synced anywhere by Gramai.
  • A log file at %LOCALAPPDATA%\Gramai\logs\gramai.log records what the app did and when, for troubleshooting. It never contains your text, your keys or any identifier. It stays on your PC unless you send it to us yourself.
  • Links. Opening a gramai:// link from a Gramai receipt activates a license. The app accepts nothing else through links.
  • Updates. Once a day the app asks gramai.dev whether a newer version exists. The request carries nothing about you or your text. A new version is downloaded in the background and installed only when you choose to restart for it.
  • No analytics and no crash reports. The app talks only to Gramai's server, to the provider you chose on Own key, and to Lemon Squeezy for licenses.

Third parties

On Free, Basic and Pro your selected text is processed by OpenAI, reached through Gramai's server hosted by Cloudflare, under OpenAI's own terms and privacy policy. On Own key it is processed by the provider you chose, under that provider's terms and privacy policy. Purchases and license activation are processed by Lemon Squeezy, under its terms and privacy policy.

Contact

Any questions about this policy? Write to support@gramai.dev.