Account data. When you create an account we collect your email address. We use Supabase Auth (supabase.com) to authenticate you; Supabase stores your email and hashed password (or OAuth token) on our behalf. We use this to identify you, restore your library across devices, and communicate service-critical information (receipts, password resets).
Payment data. Purchases and subscriptions are processed by Stripe, Inc. (stripe.com). We receive a Stripe customer ID and subscription status from Stripe webhooks; we do not store your card number, expiry, or CVV at any point.
Reading activity. We record which books and chapters you have read, your vocabulary review history, and streak/mission progress. This is stored in our Supabase database and used to power your library, vocabulary tracking, and the 90-day reading plan.
Usage analytics. We log anonymised events (page views, feature interactions, error reports) to Sentry (sentry.io) for crash reporting. We do not sell or share these events with advertisers.
Downloaded content. EPUB files and audio you download are stored on your device only. We do not track which files you have saved locally.