Privacy Policy

1. What we collect

• Your account: your email address, the name you show to others, your role, who invited you, and when you accepted the terms.
• What you add: readings (PDFs, EPUB books, saved web pages and pasted text), comments, voice notes and their transcripts, reactions, bookmarks, and who you @mention.
• How you use the app: which comments you've marked as read, where you are in each reading, read-aloud listening sessions, questions you ask the AI assistant, and, if you turn on calendar feeds, the secret that makes up their addresses. For each request to OpenAI that you cause (a read-aloud paragraph, a voice note's transcription, a question to the AI) we record its size, its estimated cost and the group it was in, so admins can see what the service spends.
• Technical information: your sign-in sessions with the IP address and browser they came from, and the request logs our hosting provider keeps.
• On your device: a cookie that keeps you signed in, and your preferences (theme, focus mode, comment order, read-aloud speed, reading positions) in your browser's storage. The installed app also keeps an offline page. Readings you choose to save for offline use (the text or PDF, the comments you can see in it, your bookmarks and your place), and anything you write there without a connection, are stored on your device until you remove them, sign out, or lose access to the reading, when the app deletes the copy the next time it starts with a connection. There are no advertising, analytics or tracking cookies.
• Notifications on your device: only if you turn them on in the account menu. For each device we keep the address your browser's push service gave it, the keys that encrypt messages to it, the browser's name, and when it last received one.

2. How we use it

We use this information to run the service: to sign you in, show your content to your group, send sign-in links, comment digests and notifications, transcribe voice notes, read texts aloud, answer questions put to the AI assistant, handle copyright notices, and keep the service secure and free of abuse. We don't sell personal information or use it for advertising.

3. Who can see it

• A group's readings and comments can be seen by its members and by the service's admins. Private threads can only be seen by their members, admins included. Bookmarks and reading positions are only visible to you.
• Admins can see the email addresses of the people in the app, to manage invitations.

4. Service providers

We use these providers to run the service. They process information for us, under their own terms:

• OpenAI, for voice-note transcripts, read aloud and the AI assistant. Voice notes, the text being read aloud, and the reading and discussion the AI is asked about are sent to OpenAI. The AI assistant can search the web, so searches based on a question go out through OpenAI. Under OpenAI's API policies, this data isn't used to train its models by default.
• Resend, to send email.
• Your browser's push service (run by Google, Apple, Mozilla or Microsoft, depending on your browser), if you turn on notifications. It relays short messages such as “Ben mentioned you in Chapter 1”, which name a person and a reading or meeting, never what a comment says.
• Fly.io (hosting), Neon (database) and Tigris (file storage), in the United States.

We also share information when the law requires it. If you send a counter-notice about a copyright removal, we forward it, with your contact details, to the person who sent the notice, as the law requires.

5. How long we keep it

• Your account information, for as long as you have an account.
• Readings and comments, until someone allowed to delete them does, or the group is deleted.
• Read-aloud audio, until nobody has listened to it for 30 days.
• Records of OpenAI usage (size and estimated cost, not the content), for as long as the service runs, to compare spending over time. They no longer say who you are once you delete your account.
• Records of copyright removals, including who added the removed reading, for as long as we need them to handle repeat infringement.
• Deleted information may remain in our providers' backups for a limited time.

6. Your choices and rights

• You can change your name, turn off email digests and push notifications (all at once, or per device), and delete your comments, voice notes and bookmarks at any time.
• You can delete your account from the account menu. That deletes your login, email address, voice notes, reactions, bookmarks, reading positions, calendar feed addresses, notification settings and group memberships. Your comments stay in their discussions so they still make sense, shown as “Deleted user” (a voice note's transcript stays as its comment's text). Delete any comments you don't want kept before you go.
• You can download a copy of your data at any time from the account menu (“Download my data”): a ZIP file with your profile, your comments with the readings and passages they were about, your voice notes and their transcripts, your reactions, bookmarks and reading positions, in a format other programs can read. It doesn't include other people's comments. A group's owners can likewise download the group's discussions and the list of its readings (but not the readings themselves), including your comments in them; private threads are only included for owners who are part of them.
• Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, or to object to how we use it. You can use several of these rights yourself in the app, as described above; contact us for the rest. We won't treat you differently for using them.
• If you're in the European Union or the United Kingdom: we process your information to provide the service you signed up for, and for our legitimate interests in keeping it secure and handling copyright notices. Your information is stored in the United States. You can complain to your data protection authority.

7. Children

The service isn't meant for children under 13, and we don't knowingly collect their information. If we learn that we have, we delete it.

8. Security

Connections are encrypted, there are no passwords to steal (you sign in with emailed links), and every page and request checks that you're allowed to see what you ask for. No system is perfectly secure, though, so we can't guarantee that information will never be accessed without permission.

9. Changes

We may update this policy. The date at the top shows when it last changed, and we'll tell you about significant changes in the app or by email.

10. Contact

Questions about your information, and requests to use your rights, go to our contact address.