Free
$0forever
See the ghost ink work, and rewrite what you need to get started.
- Unlimited on-device cloaking + preview
- 25 AI actions / month
- Polish · Proofread · Re-voice · Expand · Condense
- Signed, offline-verifiable receipts
Pricing
Pay for the writing.
Polish sensitive writing — names and numbers are swapped on your device first. You only pay the cost (the model's own price plus our markup) of relaying the ghost-ink page to a writing model. No free-relay games, no reselling your text. Start free; upgrade when the desk becomes a habit.
Personal
$9per month
For the professional whose drafts name real people every day.
- Rewrites on sensitive text with no monthly cap (fair use)
- Everything in Free
- Priority models + longer pages — planned
- All seven voices, all five services
- Receipt history across your devices — planned
Business
$19per user / month
For HR, legal and clinical teams under a data-handling mandate.
- Everything in Personal
- 300 premium-model actions / month — planned
- Team billing (several seats on one plan) — planned
- Shared surrogate + voice policy — planned
- Countersigned custody receipts + compliance kit — planned
Honest answers
What exactly am I paying for?
The upstream writing model's tokens, plus a small markup that keeps the gateway and this desk running. The on-device cloaking, the detection model and the receipts cost you nothing.
Polish sensitive writing — names and numbers are swapped on your device first
Unlimited cloaking and preview with no account, and 25 AI actions a month in this app. It's the same detector and the same receipts as the paid tiers.
What the AI will see
The reviewed page reaches the gateway only when you press the button. Detected values are replaced on this device; anything the detector misses can remain as written. The receipt records the reviewed spans but does not measure missed values or raw-PII bytes.
How is this different from Grammarly or QuillBot?
They receive your text on their servers. cloak-write runs detection on your device and replaces values it finds before sending; values it misses may remain as written. Review the request text before sending. The preview does not measure egress bytes.