Privacy
paper is run by one person. This page says plainly what it does with your papers. If something here is not true of the app, that is a bug and I want to hear about it.
What paper keeps
- Your email address, to sign you in, send the codes you ask for, and send reminders if you turn them on.
- The files you add. They are stored encrypted on the server (AES-256-GCM, with a key made from a server secret and your account). They are decrypted only while they are being read or shown to you. The full text that was read from a photo or PDF is kept the same way, so a question about it can be answered without reading the picture again.
- The cards made from them: the title, summary, dates, amounts, notes and the text of the paper that was read. These are stored encrypted in the database (AES-256-GCM, with a key made from a server secret), so a copy or backup of the database shows nothing readable. They are not end-to-end encrypted: the server opens them to show them to you and to send your reminders, so the person who runs paper could read them, and does not look.
- Vault entries marked as private with a passphrase are encrypted in your browser. Not even the person running paper can read those, and if you lose the passphrase and the recovery key they are gone.
- Your questions about a card or batch and the answers (the chat under Ask about these papers), kept on your account so they show on all your devices. You can clear a chat any time.
- A language and country, found from your device unless you set them, to show paper in your language and money in your currency.
Who else sees a paper
To read a paper, paper sends it to Anthropic, the company that makes Claude, through its API. Anthropic's API terms say it does not train on what it is sent; that is what Anthropic states, and paper cannot check it. If you connect your own OpenRouter account, then once your free credit is used up your papers are read through OpenRouter (openrouter.ai) with your account there. OpenRouter passes them to a model provider such as Anthropic, and every request asks for providers that say they do not collect or train on the data. OpenRouter's own terms and privacy policy also apply.
When you share a card, the person you share it with can see that card. Nobody else can.
Email is sent through Resend. paper does not use analytics, advertising or tracking services, and does not sell or give your data to anyone.
Cookies
One cookie keeps you signed in, and short-lived ones are used while signing in with Google or connecting OpenRouter. No tracking cookies.
Deleting your data
On the Me page, Your data has two buttons: delete all your papers, or delete your account. Both remove the files, the cards and everything tied to the account straight away. Your address is not kept. The one thing kept is a one-way hash of it, so deleting and signing up again does not give the free credit twice.
The server keeps recent backups, and a deleted paper can stay in an older backup until newer backups replace it.
Where it runs
paper runs on a server in Japan. Papers you add are sent to the AI services described above while they are being read.
Questions or requests
To see, correct or delete what paper has about you, or to report a problem, write to info.hari07@gmail.com.