Privacy Policy

What we collect

• Account information — your email address and a hashed password when you sign up. Optionally a display name.
• Study progress — the books and chapters you’ve started, sections you’ve completed, daily streaks, and timestamps of activity. This is what powers your dashboard and progress tracking.
• Audio for pronunciation feedback — when you use the Speak feature, your microphone audio is sent to our backend, transcribed (via OpenAI Whisper or Alibaba DashScope, depending on the speech provider configured at the time), and the transcript returned. Audio is not stored after transcription completes.
• Payment information — handled by Stripe. We store your Stripe customer identifier and subscription status, but we never see or store your card number.
• Operational logs — server logs include request timestamps, status codes, and your account ID for authenticated requests. These help us debug issues. Logs are retained for up to 30 days.

What we don’t collect

• No third-party advertising or analytics SDKs.
• No tracking across other apps or websites.
• No location data (we don’t ask for it; it’s not used).
• No contacts, photos, calendar, or other device data outside what’s strictly needed for the features you use.

Permissions we request

• Microphone — only when you tap Speak. Used to record short clips for pronunciation feedback. The recording stops as soon as you stop speaking (or after a short timeout).

Sharing data with third parties

We share the minimum data necessary with:

• Stripe — to process subscriptions. Subject to Stripe’s privacy policy.
• Speech-to-text provider — currently OpenAI (Whisper) or Alibaba (DashScope), depending on configuration. Audio sent for transcription is governed by each provider’s privacy/retention policies. We do not opt into model training where opt-out is offered.
• MongoDB Atlas / cloud hosting — your account and progress data is stored in MongoDB Atlas.

Your rights

You can:

• Access or correct your data at any time via the app’s Profile screen.
• Delete your account, which removes your account record, progress, and subscription. Email hi@heyedd.com if the in-app option isn’t yet available.
• Request a copy of your data by emailing the same address.

Data security

Data is transmitted over HTTPS. Passwords are hashed with bcrypt. Database access is restricted to authenticated app processes. No system is perfectly secure, but we apply standard practices to reduce risk.

Children

Bookverse is not directed at children under 13. We don’t knowingly collect data from children under 13. If you believe a child has signed up, contact us and we’ll remove the account.

Changes to this policy

We may update this policy as the product changes. Material changes will be communicated in-app or by email. The “Last updated” date above always reflects the most recent revision.

Contact

Questions or requests: hi@heyedd.com