Privacy Policy

• When you add a book, the app keeps a copy of the file in EnrichReader's storage on your device. We don't upload the file.

• The copy stays until you remove the book, delete your account, or clear EnrichReader's data on your device. Skins you install stay on your device until you remove them with Settings → Storage Management → Clear skin cache, delete your account, or clear that data.

• Reporting a problem sends us part of the book (see section 3.5).

We make Skins in advance, from works that are in the public domain, openly licensed, or used with permission. We use EnrichReader's own AI model, which runs on our own hardware, to help, so a Skin can contain mistakes. Your books are never sent to it. We don't make decisions about you by automated means that affect your rights or your use of the app.

Without an account

You don't need an account to read, and without one we don't have your email. While usage data is on, the app sends usage events (linked to a random ID created on your device) and crash reports (see 3.3). Our server sees your IP address when the app contacts it. You need an account to sync your library and to install Skins. No law requires you to give us data.

3.1 Your account (optional)

• Account: your email address. With Google sign-in, also your Google account ID. We don't ask for your name or photo.

• Password: stored only as a one-way hash.

• Sessions and sign-ins: your IP address, browser and device type, a random device ID and the time.

• Sign-up source: when you create your account, we save the campaign tags in the link you followed (such as utm_source), the domain of the site that sent you (not the full address), and whether you signed up on the web or in the Android app.

• Privacy choices: each answer you give about feedback emails or usage data (yes, no, or a later change of mind). We save when you answered, where (sign-up, Library, after a book survey, Settings, or a reply to us), which version of the question you saw, and your app language. A usage-data choice you make without an account stays on your device, and goes to your account only if you sign in.

• Rating request: whether you rated the app or asked us to wait, and until when, so a reinstall or another device doesn't ask you again.

3.2 Your library (only if you sign in)

For each book: title, author, description, publisher, publication date, language, number of chapters, whether it has a cover, the folder you put it in, and your reading position. We also store which Skins you installed and your app settings.

Book titles, here and in usage events, can reveal things about you, such as your religion, health or politics. We never use them to work out such things, or for advertising.

3.3 Usage data and crash reports

• Usage events (on unless you switch them off): opening, starting and finishing a book, page turns, reading time, chapters completed, guided-reading actions, and character profiles you look up (with the character's name). They show the book and chapter, and are linked to your account ID or, without an account, to a random device ID.

• Crash reports, sent to Rollbar (on unless you switch them off): the error message, your browser, the page address and what the app was doing just before the error. Before a report leaves your device, the app removes book titles, chapter text and your notes. If you are signed in, a report includes your user ID, so we can find your errors when you contact us. Rollbar may also record your IP address.

• If your browser sends a Global Privacy Control or Do Not Track signal, usage events and crash reports start off.

• Page views, on our website and in the app: we count visits with Umami, which runs on our own server. On the website it records the page address and title and the page you came from. In the app it records only which kind of screen you opened (for example "a book" or "a character profile"), never a book, chapter or character, and the site you came from on the first screen. Both record your browser, operating system, device type, screen size, language and approximate location (country, region and city, worked out from your IP address, which it doesn't store). It sets no cookies and groups visits under a scrambled ID that changes every month. It doesn't count your visits if your browser sends a Global Privacy Control or Do Not Track signal. The usage data switch in Settings doesn't change this count.

3.4 Survey answers (optional)

When you finish a book you added, the app may ask a few optional questions. If you send answers, we store them with the survey's name and version, your app language, whether you used the website or the Android app, and the Skin you read with, if any.

We don't store your account, email address, device ID or IP address with your answers, and we don't try to link them to you. So if you ask to see or delete your answers, we usually can't tell which ones are yours. We keep them with no set end date. Please leave personal details out of the free-text answer.

3.5 Reports you send us

• A chapter problem: we receive the chapter's text as the app prepared it for reading, the book and chapter titles, and your note. The report screen tells you this before you send it.

• A wrong character fact: we receive the character's name, the fact, the book title and your note.

Reports are linked to your account. We delete chapter reports 12 months after you send them, and all reports when you delete your account.

We use your data only for these purposes, each with a legal basis under the GDPR (Art. 6) and the LGPD (Art. 7).

• Account, sync and Skins: to run your account, keep you signed in, let you install Skins and sync your library and settings. Basis: contract (GDPR Art. 6(1)(b); LGPD Art. 7, V).

• Account security: session and sign-in records. Basis: legitimate interests.

• Proof of your choices: a record of each privacy choice, kept until you delete your account. Basis: exercise of our rights (LGPD Art. 7, VI) and legitimate interests (GDPR Art. 6(1)(f)).

• Sign-up source and rating prompt: to learn how people find us and not to ask twice. Basis: legitimate interests.

• Reports: to fix what you reported. Basis: contract.

• Usage data and crash reports: to fix bugs and learn which features help readers. Basis: legitimate interests (GDPR Art. 6(1)(f); LGPD Art. 7, IX). We don't use this data for advertising or sell it. You can object at any time: switch off Settings → Notifications & privacy → Usage data and crash reports. That stops usage events and crash reports on that device. If you are signed in, the choice applies on your other devices too. If your browser sends a Global Privacy Control or Do Not Track signal, they start off. You can also write to privacy@enrichreader.com.

• Page-view statistics: to see how many people visit enrichreader.com and use the app, and which pages and screens they use, we use Umami (see 3.3). Basis: legitimate interests. To object, turn on Global Privacy Control or Do Not Track in your browser; neither our website nor the app then counts your visits.

• Service emails: we use Resend to send sign-up confirmation and password reset emails, and may email you about a security problem with your account. We don't send marketing emails. Basis: contract; legal obligation for security notices.

• Feedback emails (optional): if you say yes (at sign-up, on the Library screen, after answering a book survey, or in Settings → Notifications & privacy → Feedback emails), someone on our team may email you now and then to ask how reading with EnrichReader is going, or to invite you to a short interview. A person writes and sends each of these emails from their own Gmail mailbox, which Google provides to us (see section 5). They never advertise anything. You don't have to reply, and saying no doesn't change anything about the service. You can change your mind at any time in Settings → Notifications & privacy → Feedback emails, or reply to one of these emails and ask us to stop. We keep a record of every answer you give so we can show what you agreed to, and we delete it when your account is deleted. Feedback emails are for readers 18 and over. If you tell us you are under 18, we delete your consent and don't email you. Basis: consent (GDPR Art. 6(1)(a); LGPD Art. 7, I).

• Book surveys (optional): when you finish a book you added, the app may ask how it went: how much the Skin helped, whether you'd read your next book in EnrichReader, and what was missing. Every question is optional. We use the answers to improve Skins and the app. If you are under 16 in the EU or under 18 in Brazil, a parent or guardian must agree before you answer. Basis: consent.

• Access records required by Brazilian law: the Marco Civil da Internet (Art. 15) requires us to keep records of access to the app (date, time and IP address) for 6 months. We keep each sign-in record for 6 months after the session ends, even after you delete your account, and then delete it automatically. We also use them to keep accounts secure, and give them to others only when a court orders it. Basis: legal obligation (LGPD Art. 7, II); legitimate interests under the GDPR.

• Legal claims: we may keep records needed to establish or defend a legal claim. Basis: LGPD Art. 7, VI; GDPR Art. 6(1)(f).

Our backend and database run on a server we rent from Hetzner Online GmbH in Helsinki, Finland (EU). Our page-view statistics (Umami) run on the same server, so no analytics company receives them. These companies process data for us:

• Hetzner: hosting and server backups. Everything we store on the server.

• Rollbar: crash reports. Error details, browser, page address, IP address, user ID.

• Resend: confirmation and password emails. Your email address.

• Google (Google Workspace, Gmail): feedback emails we write by hand, and our replies to you. Your email address and messages.

With Google sign-in, Google gives us your Google account ID and email.

We don't sell your data or give it to advertisers or data brokers. The Android app asks only for internet access. It doesn't ask for your device's location, camera, microphone, contacts or advertising ID, and it doesn't send phone notifications.

If the company is sold or merged, your data may pass to the new owner, who must keep to this policy. If you have an account, we will email you before that happens. Sites we link to have their own privacy policies.

Data travels over encrypted connections (HTTPS). Access to our server is restricted. Passwords are stored as one-way hashes. To keep you signed in, we use a secure cookie that scripts on the page can't read. Your browser, or the Android app, keeps it in its private storage. Our server lets each signed-in account reach only its own data. No system is perfectly secure. If a breach puts you at risk, we will tell you and the authorities as the law requires.

• Account, library, settings, privacy choices, rating answer and sign-up source: while you have an account; deleted within 30 days after you delete it.

• Reports: chapter reports for 12 months after you send them. All reports are deleted with your account.

• Emails between you and us: kept while we need them to help you, and deleted when you delete your account, unless we need them for a legal claim.

• Sign-in records: 6 months after each session ends, then deleted automatically. Sessions you are still signed in to are kept while they last.

• Usage events: 24 months, then we remove the account ID and device ID, so they no longer link to you or your device. Events linked to your account are deleted with it.

• Crash reports: deleted by Rollbar after 30 days.

• Page-view statistics: kept on our server with no set end date. They contain no name, account or IP address.

• Survey answers: no set end date, because they aren't linked to you.

• Backups: our hosting provider keeps backup copies of the server and overwrites each one after about a week. Deleted data can stay in a backup until then.

The app stores your books, Skins, settings and a random device ID on your device, and uses a cookie to keep you signed in. The app and our website count page views without cookies. We don't use ad networks or cross-app tracking.

We are in Brazil. Our server is in Finland, in the EU. Rollbar, Resend and Google (for feedback emails and Google sign-in) may process data in the United States. We use safeguards the law allows, such as standard contractual clauses. Ask us for details at privacy@enrichreader.com.

You can ask us to: confirm whether we hold your data and send you a copy; correct it; delete it, or anonymize or block data we don't need; send it to you in a common, machine-readable file you can take elsewhere; tell you who we share it with; and stop using it where we rely on legitimate interests. You can withdraw consent at any time, and we will tell you what changes if you do. Email privacy@enrichreader.com. We answer, and send copies of your data, within 15 days.

In the app you can also delete your account (Settings → Delete account), switch off usage data and withdraw consent to feedback emails.

Without an account, your usage events are linked to a random ID on your device, not to your name or email. To get a copy or have them deleted, copy the ID from Settings → Notifications & privacy → Your device ID and email it to privacy@enrichreader.com. Switching off usage data stops new events, and after 24 months we remove that ID from them.

You can complain to the ANPD (Brazil) or to the data protection authority where you live.

Deleting your account

Use Settings → Delete account in the app, or email privacy@enrichreader.com from your account's email address with the subject "Delete my account". Within 30 days we delete your account and everything linked to it (email address, library, reading data, usage events, reports, privacy choices and our emails with you) and, if you asked by email, confirm by email. Deleting in the app also clears your books and Skins from that device. We keep sign-in records for 6 months after each session ends, as Brazilian law requires (see section 4), then delete them. We also keep anything needed for a legal claim. Backups are overwritten after about a week, and Rollbar deletes crash reports after 30 days. Survey answers and page-view statistics aren't linked to your account, so they stay.

We don't sell personal information or share it for targeted advertising. You can use the rights in section 10 wherever you live. In Quebec, the person in charge of protecting personal information is Radamés Roriz (privacy@enrichreader.com).

EnrichReader is for people aged 13 and over. If you are under 16 in the EU, or under 18 in Brazil, a parent or guardian must agree before you answer a book survey. Feedback emails are for readers 18 and over: if you tell us you are under 18, we delete your consent and don't email you. If you think a child under 13 has given us personal data, email privacy@enrichreader.com and we will delete what we can link to them, such as their account.

We may update this policy. If a change means we collect more data, keep it longer, use it for something new, or reduce your rights, we will tell you in the app, and by email if you have an account, at least 30 days before it takes effect. Changes that add a privacy control or remove a use of data take effect when we post them. The date at the top shows the latest version.

If you live in Brazil, you can go to court where you live, and unclear wording in this policy is read in your favor. Wherever you live, you keep the rights your local law gives you.