Your privacy.

Samples and reader accounts

You can read lessons and subscribe without providing an email address. The app creates a private reader identity through Supabase to deliver your free introduction, recognize your subscription, and maintain your collection. Supabase processes the reader identifier, authentication records, and session. If you choose to add an email for recovery and access on another device, Supabase also processes that address and Resend delivers a confirmation code, processing its recipient, message, and delivery information. Adding an email is optional and does not subscribe you to marketing emails.

Our service stores an account identifier, the date you started, your time zone when you enrolled, introductory lesson deliveries, subscription access, and the lessons available in your collection. This lets us deliver the introduction, check subscription access, and recover your collection when you sign in with an optional linked email. Without a linked email, deleting app data or losing the phone can prevent recovery of the collection; restoring a store purchase does not guarantee recovery of its lesson history. Your time zone is not GPS location. We do not record how far you scroll through a lesson.

Subscriptions

RevenueCat processes an account-linked billing identifier, purchase and subscription history, product identifiers, transaction information, and subscription status so we can check access, restore purchases, and understand subscription activity. We use an opaque identifier rather than sending your email address to RevenueCat as a customer attribute.

For purchases through Apple or Google Play, the platform processes payment and maintains its own transaction records under its privacy policy. We do not receive your full payment card details. During app testing, subscription transactions may be simulated; these test records are kept separate from live subscription access.

Information on your device

The app saves lesson copies for offline reading, your text-size choice, and reminder settings on your device. A reader credential is kept in the device’s secure storage so the app can recognize your reader identity without asking for an email. Reminders are scheduled locally, with your permission; we do not send your chosen reminder time to a push-notification service. You can change or turn off reminders under Options.

The app does not request access to your contacts, camera, microphone, or precise location. We do not collect health information about you. Reading a lesson about worry, sleep, or another topic does not create a health profile.

Website and connection information

When your browser or app connects to our services, the providers receive technical information such as your IP address, request time, requested page or service, and browser, device, or app information. Provider logs can also contain approximate location derived from an IP address, connection timing, and security identifiers. Operational and security logs help deliver content, investigate errors, and protect the service; the app does not request GPS location.

Our website and lesson service use OpenAI Sites and Cloudflare infrastructure. Supabase supports reader sign-in, Resend delivers sign-in and contact-form emails, and RevenueCat supports subscriptions. These providers process information needed to operate their services. Services may process information outside your country. An external website or your app marketplace handles information under its own privacy practices.

Support and the private lesson desk

If you contact support, we receive your email address and whatever information you include, such as your name, message, or screenshots. We use it to answer your request, verify an account request where needed, and resolve problems. Our email provider processes and stores the correspondence. Please do not send passwords, sign-in codes, or payment card details.

The private lesson desk is for authorized editors. It uses ChatGPT sign-in to check an editor’s account identifier and email address against the approved access list. Authentication may use necessary session cookies. Lesson drafts and versions are stored so editors can manage and restore readings.

Contact form protection

Our contact form uses Google reCAPTCHA to help detect automated spam. Google processes browser and device information, IP addresses, and interactions with the form, and may use cookies for this security check. Google processes this information to provide the security service and prevent fraud and abuse. See Google’s reCAPTCHA data-processing information. If you cannot use the form, an email alternative is available on the contact page.

Resend delivers your submitted email address, selected topic, and message to our support mailbox. We do not send your message content to reCAPTCHA. We keep short-lived, hashed request-limit records to limit repeated submissions; expired records are removed during later requests.

Sharing and security

We do not sell personal information or share it for targeted advertising. The app and website do not include advertising trackers. We use service providers for hosting, sign-in, email, and subscriptions as described above. We may disclose information when required by law or necessary to address fraud, abuse, or security threats.

Connections to our services use HTTPS encryption. Access to private account services requires authentication. No system can guarantee complete security.

How long information is kept

We retain your reader account and collection while the account exists, including after a subscription ends so you can keep reading retained lessons. Deleting your account removes the active reader account, its lesson-access records, and the associated RevenueCat customer records. Provider deletion processing may take additional time.

The service retains a security record consisting of a one-way account hash, a deletion-confirmation hash, and completion status, with no set expiry. It contains no email address or lesson content and prevents old requests from restoring deleted account records. It is not used for marketing.

We retain unresolved support correspondence until the request is resolved. Completed correspondence, including forwarded copies, is deleted 30 days after resolution unless a legal obligation requires longer retention. This is a manual support procedure. Hosting, authentication, and email logs and backups follow each provider’s retention settings and schedules; account deletion does not instantly erase all such copies. We have not set a single retention period across those systems. Apple and Google retain their own purchase records under their policies and legal obligations.

Your choices and account deletion

In the app, open Options → Delete my reader data (or Delete account if you linked an email). You can also request account and data deletion from our website without reinstalling the app. That page explains verification, what is removed, and what may remain.

Deleting your account removes your saved collection and access history. It does not cancel an Apple or Google Play subscription. Manage or cancel that subscription separately through the platform where you bought it. Cancelling a subscription alone keeps your account and retained lessons.

Uninstalling the app does not request deletion of your server account or cancel a subscription. Locally saved information on other devices or in device backups is not remotely erased by a website request. Sign out and remove local app data on devices you control if you want those copies removed.

For access, correction, or other questions about your personal information, contact us below. We may need to verify your identity before acting on a request.

Changes to this policy

We will update this page when our information practices change and revise the date above.