Privacy policy

In short

• No ads, no selling or renting of your data, and no tracking across other companies’ apps or websites.
• The apps contain no analytics, advertising or crash-reporting tools.
• You can browse without an account. We then know only a random device ID, not who you are.
• Nothing you write is sent to AI models. Reading aids are generated from the book’s text alone.
• You can delete your account at any time in Settings.

What we collect

• Account: your email address, and the display name, handle, profile photo link and bio you choose. If you sign in with Apple or Google, we receive the account identifier, name and email address they share (Apple lets you hide your email behind a relay address), and Google’s profile photo.
• Your activity: books on your shelf and its categories, reading and listening progress, bookmarks, liked and saved passages, follows and blocks, posts, comments, collections, reports you file, your reading interests and your settings.
• Recommendation signals: which passages you were shown, how long you stayed, and whether you played, finished, skipped, liked, saved, shared or opened them. Without an account they are tied to a random device ID; when you sign in, they move to your account.
• Device details: the random device ID and, if you allow notifications, a push token with your platform, language, time zone offset and app version.
• Network data: your country, read from your connection on each request to decide which books are available where you are; it is not stored. Your IP address is used briefly to limit abuse, such as repeated sign-in attempts, and these records are deleted within a day.
• Plus: Apple or Google handles payment, and we never see your payment details. We receive your subscription status (plan, renewal and expiry) and keep a daily count of listening time and reading-aid uses to apply plan limits.

How we use it

• To run the service: sign you in, sync your shelf and progress across devices, and show what others share.
• To recommend passages from your interests and recommendation signals.
• To send the notifications you turn on, such as replies, new followers and reading reminders.
• To keep the service safe: limit abuse, review reports and enforce the rules.
• To provide Plus and apply its limits.

We don’t use your data for advertising, sell it, or combine it with data from other companies.

What other people can see

Some of what you do is public so that readers can find and follow each other:

• Your profile: display name, handle, photo and bio.
• Your shelf, unless you make it private in Settings › Privacy. The number of books on it is still shown on your profile.
• Who you follow and who follows you.
• Posts and comments you publish, and collections you make public (collections can also be private or unlisted). You choose who may comment on what you share: everyone, people you follow, or nobody.

Which passages you like stays private (only totals are shown), as do saved passages, progress, bookmarks, blocks and notifications.

Services that process data for us

We share data only with the services that run Paginette for us, and only what each one needs:

• Cloudflare hosts the apps, the API and the database, and keeps short-lived request logs. It runs on a global network, so your data may be processed outside your country.
• Our email provider (Resend or Cloudflare Email Service) sends your sign-in codes; it receives your email address and the code.
• Apple and Google provide Sign in with Apple and Sign in with Google, and take payments in the App Store and Google Play.
• RevenueCat manages Plus subscriptions. It receives your Paginette account ID (not your name or email) and the purchase records from the stores.
• Expo delivers push notifications through Apple and Google’s notification services. A notification carries its text, which can include a short excerpt of a comment or post.
• Recordings stream directly from the Internet Archive, and book covers load from Wikimedia Commons and Project Gutenberg, so those sites see your IP address when you play or view them. On the web, fonts load from Google Fonts.
• Reading aids are written by AI models on Cloudflare Workers AI or, for some tasks, Anthropic. They receive only the passage’s text and a language, never your account details or anything you write.

We don’t use any analytics, advertising or crash-reporting service.

On your device

• The apps keep your sign-in token in the system’s secure storage (Keychain on iOS, Keystore on Android).
• Preferences, recent searches, the random device ID, reading progress, recommendation signals waiting to be sent, and downloaded books are stored on your device. Reading reminders are scheduled on the device itself.
• On the web we use only cookies the site needs to work or to remember your choices: lv_session keeps you signed in (30 days), lv_oauth is set during Apple or Google sign-in (10 minutes), and lv_locale, lv_theme and lv_paper remember your language and appearance (one year). There are no advertising or third-party cookies.
• Signing out removes the sign-in token. Downloads and other local data stay on that device until you delete the app or clear the site’s data.

App permissions

The apps ask only for permission to send notifications, and only when you turn on something that needs it. They play audio in the background so you can listen with the screen off. They don’t use the microphone, camera, photos, location or contacts.

How long we keep data

• Your account and what you create are kept until you delete them or your account.
• Recommendation signals are deleted after 400 days.
• Sign-in codes expire after 10 minutes, sessions after 30 days, and abuse-limit records within a day.
• Deleted data can remain in database backups for a limited period before it is overwritten.

Deleting your account

You can delete your account in Settings, in the app or on the web. This permanently deletes your profile, sign-in methods, shelf, progress, bookmarks, likes, saves, follows, posts, collections, notifications, recommendation signals and Plus records. If you signed in with Apple, we also revoke Paginette’s access to your Apple ID.

Comments you wrote stay in their threads so conversations remain readable, but they are no longer linked to you. Records of store purchase events and of reading-aid requests keep only the former account ID, which no longer leads to any personal details. Deleting your account doesn’t cancel a subscription: cancel it in your App Store or Google Play settings first.

Your choices and rights

In Settings you can view and edit your profile, make your shelf private, choose who may comment, reset your reading interests and turn notifications off. Depending on where you live, you may also have the right to access, correct, delete or receive a copy of your data, or to object to how it is used. To use any of these rights, contact us.

Children

Paginette is not directed at children under 13, and we don’t knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If this policy changes, we will update this page and the date at the top.

Contact

Questions or requests about privacy: