Privacy Policy
Effective July 29, 2026
1. What We Collect
Account data: your email address, name, and password hash (or your Google account identifier if you sign in with Google). Content: text you submit for translation, PDFs you upload, notes, highlights, and reading progress. Usage data: translations run, achievements, and basic activity used for features like streaks and leaderboards. Payment data: handled entirely by Stripe — we never see or store your card number.
2. How We Use It
To run the Service: storing your library, generating translations, syncing progress across devices, and processing subscriptions. Text you translate is sent to Anthropic (our AI provider) to generate the translation. We use transactional email (for example password resets) via our email provider. We do not sell your personal data, and we do not use your uploaded documents to train AI models.
3. Who Can See What
Your library, notes, and translations are private by default. Social features are opt-in by action: things you explicitly share (public profile, shared reports, leaderboard standing, followed users' feeds) are visible to others. You can delete shared items at any time.
4. Third-Party Processors
We rely on a small set of processors to run the Service: Anthropic (AI translation), Stripe (payments), Google (optional OAuth sign-in), our email delivery provider, and our hosting provider (Hetzner, servers in the United States/Europe). Each receives only the data needed for its function.
5. Cookies
We use essential cookies only: a session cookie to keep you signed in and a CSRF token for security. No third-party advertising or tracking cookies.
6. Retention and Deletion
We keep your data while your account is active. You can delete individual documents, notes, and translations at any time. To delete your entire account and its data, contact us at the address below and we will remove it within 30 days, except records we must keep for legal or accounting reasons.
7. Security
Passwords are stored as bcrypt hashes, traffic is encrypted in transit, and access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data we will notify you promptly.
8. Your Rights
Depending on where you live (for example under GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we will honor valid requests.
9. Contact
Privacy questions or requests: marcusorangeau@gmail.com.