Privacy Policy

Last updated: [DATE]

Draft. Pending legal review. Replace every [BRACKETED] placeholder before publishing.

Kabiteo is run by [COMPANY NAME], [ADDRESS] ("we"). This policy explains what the Kabiteo app and website collect, why, and your choices. Contact: [SUPPORT EMAIL].

The short version

• Reading needs no account. Your books, reading position, highlights, notes and audiobooks stay on your phone.
• Audiobook read-along sync runs on your phone. It reads the audiobook file itself, never uses the microphone, and uploads nothing.
• The AI companion (an account feature) sends text from your book to our servers and to an AI provider so it can answer. It only uses the parts you have already read.
• We do not sell your data or use it for advertising.

What stays on your device

EPUB files, audiobook files, reading progress, highlights, notes, reading statistics, appearance settings and read-along sync maps are stored only on your phone. Removing the app deletes them.

What we collect when you create an account

• Account: your email address and a hashed password.
• Book identity: for books you use with the companion, a fingerprint of the text (a hash), the title, the author and the number of sections. We never store your EPUB file.
• Book analysis: to build character sheets, the star map and recaps, the app sends the book's text in parts to our servers, where AI models extract characters, relationships, events and short summaries. We keep that analysis so the companion works offline from the analysis later. [LEGAL REVIEW: analysis for the same edition may be shared between readers of that edition. Confirm wording.]
• Companion activity: your questions, the answers, theories you save, your reading checkpoint (so answers stop at your bookmark), and highlights you choose to sync.
• Subscription: your plan and its status. Payments are handled by [Google Play / Apple App Store / Stripe]. We never see your full card details.
• Error reports: when something breaks, a technical report (what failed, the error message, app version, device type), linked to your account if you are signed in. Passwords, tokens and similar secrets are removed before it is stored.

AI providers

Companion requests are processed by AI models accessed through [OpenRouter and the model providers it routes to]. We only route to endpoints that do not keep your data or use it for training (zero data retention). [LEGAL REVIEW: list processors and transfer safeguards.]

Why we use your data (legal bases)

• To provide the companion and your account (performance of a contract).
• To keep the service secure and fix errors (legitimate interest).
• To meet tax and accounting duties for subscriptions (legal obligation).

How long we keep it

Account data is kept while your account exists. When you delete your account in Settings, we delete your account and your server records within [30] days, except what we must keep by law (for example invoices).

Your rights

You can access, correct, export or delete your data, object to processing, and complain to your data protection authority (in Romania, the ANSPDCP). Delete your account any time in the app under Settings. For anything else, email [SUPPORT EMAIL].

AI transparency

Character sheets, recaps and companion answers are generated by AI. They can be wrong. The book is always the authority.

Children

Kabiteo accounts are not intended for children under [16].

Changes

If we change this policy in a meaningful way, we will tell you in the app before the change applies.