Privacy Policy

1. Scope and contact

This Privacy Policy applies to the Storyglot mobile application, the Storyglot website, support communications, and related services that link to this policy. In this policy, “Storyglot,” “we,” “us,” and “our” refer to the operator of the Storyglot service. Storyglot is the party responsible for deciding how personal information described in this policy is used.

Questions, privacy requests, and complaints can be sent to caden@cadenwurzbacher.com. Please use “Storyglot privacy request” in the subject line. We may need to verify that a request relates to your account before acting on it.

2. Plain-language summary

3. Information we collect

The information we handle depends on how you use Storyglot and which optional features you choose.

Account and identity information

• Guest account: When you begin using the app without registering, Storyglot creates a random Supabase user identifier and a guest profile. This allows essential app functions to work without collecting your name or email.
• Registered account: When you create or link an account, we receive your email address, authentication status, and the date your account was created or updated.
• Profile: If you use account or Community features, we collect the username, display name, target language, profile preferences, and activity-sharing preference you provide.
• Authentication records: Our authentication provider stores the information needed to authenticate your account, such as securely processed credentials, session tokens, and account recovery records. Storyglot does not store a readable copy of your password.

Reading and learning information

• Books added to your library, the source from which a book was added, and completion status.
• Reading progress, last chapter, last-read time, saved words, bookmarks, text-size setting, streak information, and language preferences when those features are available.
• Data stored locally on your device, including cached content and preferences. Local data remains on the device unless it is synced or included in a support report you send us.

Community information

• Your username, display name, friend requests, accepted friendships, blocked relationships, and related timestamps.
• Reading activity made available to accepted friends when you enable activity sharing, such as the book you are reading, chapter progress, and recent reading time.
• Reports, support messages, and evidence you submit about safety or conduct. We may also keep moderation actions needed to prevent repeat abuse.

Subscription and transaction information

• Subscription product, entitlement status, store, purchase and expiration dates, renewal status, trial or introductory status, currency, price, and transaction event identifiers.
• Apple processes the purchase and payment credentials. RevenueCat receives purchase and receipt information from Apple and tells Storyglot whether Premium access is active.
• We do not receive or store your full credit or debit card number.

Optional usage analytics

If you affirmatively enable “Share Usage Analytics,” we may collect events such as onboarding completion, screen and feature use, books opened or completed, translation and audio feature use, paywall and subscription flow interactions, Community actions, error categories, session identifier, book identifier, target language, platform, app version, timestamps, and whether the session used a guest account. Analytics events are associated with your random Storyglot user identifier so we can understand journeys across sessions. We do not include story text you enter, account passwords, payment card numbers, or private message content in analytics.

Device, network, and service records

Our infrastructure and service providers may automatically process IP address, request time, user agent, device and operating system type, app version, authentication logs, crash or error details, and security signals. We use this information to deliver the service, prevent abuse, troubleshoot failures, and maintain security. We do not request precise location, contacts, photos, or microphone access for Storyglot’s core reading features.

Support communications

If you contact us, we receive your email address and the content of your message, plus any screenshots, diagnostics, transaction identifiers, or other information you choose to provide. Do not send passwords, full payment card details, or sensitive information that is not needed to resolve your request.

Website information

The Storyglot marketing site does not use advertising pixels or its own analytics cookies. It loads fonts from Google Fonts, which means your browser may send Google standard connection data such as an IP address, user agent, and the requested font files. If we later add analytics or cookies, we will update this policy and provide any consent controls required by law.

4. How we use information

We use personal information for the following purposes:

• Provide guest and registered accounts, authenticate users, and keep accounts secure.
• Deliver stories, translations, text-to-speech controls, reading progress, saved words, streaks, preferences, offline access, and cross-device synchronization.
• Process purchases, validate receipts, maintain Premium entitlements, restore purchases, and provide subscription support.
• Operate Community profile search, friend requests, friendships, activity sharing, blocking, reporting, and moderation.
• Respond to support, privacy, safety, accessibility, and account recovery requests.
• With consent, understand feature use, improve the reading experience, evaluate content, and measure subscription performance.
• Detect fraud, abuse, security incidents, technical failures, and violations of our Terms of Service.
• Comply with law, enforce agreements, preserve evidence, resolve disputes, and protect users, Storyglot, and others.
• Create statistics and reports that have been aggregated or deidentified so they no longer reasonably identify an individual.

5. Legal bases for processing

Where laws such as the European Economic Area and United Kingdom data protection rules require a legal basis, we rely on:

6. How we share information

We disclose information only as described below. We require service providers that receive user data from Storyglot to provide the same or an equivalent level of protection described in this policy and required by applicable App Store rules, to use the information only for authorized purposes, and to apply appropriate security. Providers also publish their own privacy terms.

Service providers

• Supabase: Cloud database, authentication, serverless functions, and related infrastructure. Supabase stores account, profile, reading, Community, entitlement, and consent data on our behalf.
• RevenueCat: Subscription and entitlement management. RevenueCat processes a Storyglot user identifier and Apple purchase information so we can unlock and restore Premium access.
• Apple: App distribution, in-app purchases, refunds, and subscription management. Apple’s handling is governed by its own terms and privacy policy.
• Google Fonts: The marketing website requests font files from Google as described above.

Legal, safety, and business reasons

We may disclose information when we reasonably believe it is necessary to comply with law or valid legal process, protect the rights and safety of users or others, investigate fraud or abuse, enforce our terms, or defend legal claims. If the Storyglot service or its assets are involved in a financing, reorganization, acquisition, or transfer, information may be reviewed or transferred subject to appropriate confidentiality and this policy’s protections.

No sale, targeted advertising, or third-party ads

Storyglot does not sell personal information for money. We do not share personal information for cross-context behavioral advertising, use third-party advertising SDKs, or display third-party ads in the app. We do not use sensitive personal information to infer characteristics about you.

7. Community privacy and controls

Community is available only to registered users. It is designed around profiles, friendships, and reading activity, not public posting.

• Searchable profile: Your username and display name may be visible to other registered users who search for you. Choose a username and display name that do not reveal information you want to keep private.
• Friend requests: A user who sends or receives a friend request can see the request and the related profile information.
• Friend activity: Sharing is off by default. Accepted friends can see recent reading activity only after you turn on “Share reading activity” in Settings. You can turn it off again without removing friends.
• Blocking: Blocking is intended to stop the blocked account from interacting with you or viewing friend-only activity. Some records may be retained to enforce the block and prevent abuse.
• Reports: Reports and relevant account or activity records may be reviewed for moderation. We limit access to people and providers who need the information for safety and enforcement.

Do not put your email address, phone number, home address, school, exact location, payment details, or other sensitive information in your username or display name. See the Community Rules for conduct requirements.

8. Analytics choices

Usage analytics are optional. Storyglot asks before enabling analytics and records your choice. You can withdraw consent at any time in Settings > Privacy > Share Usage Analytics. When the setting is off, the app stops creating new optional analytics events, clears events waiting to be uploaded, and the analytics ingestion service rejects events for an opted-out profile.

Turning analytics off does not stop essential operational records needed to sign you in, sync data, provide purchases, protect security, process support, or comply with law. It also does not retroactively remove deidentified statistics already created from earlier events. You may request deletion of identifiable analytics by deleting your account or contacting us.

9. Retention and deletion

We keep personal information only as long as reasonably needed for the purposes described in this policy, including providing the service, meeting legal requirements, resolving disputes, preventing abuse, and enforcing agreements.

Delete your account and data

You can start deletion in Settings > Delete Account & Data. The app will explain what is deleted and ask you to confirm. Deletion removes the Storyglot authentication account and associated profile, library, reading progress, saved learning data, friendships, activity, and active entitlement record from our live systems. It also signs the device out and clears Storyglot data stored locally, subject to operating system backups outside our control.

Some transaction, security, support, legal, or deidentified records may remain when retention is necessary and permitted by law. Personal information in restricted backups is isolated from normal use and removed through the backup lifecycle. We will not restore deleted information to active use unless needed for security or disaster recovery, and any restored data remains subject to the deletion request.

10. Your privacy rights

Depending on where you live, you may have the right to:

• Know whether we process your personal information and obtain access to it.
• Correct inaccurate or incomplete information.
• Delete personal information.
• Receive certain information in a portable format.
• Restrict or object to certain processing.
• Withdraw consent without affecting earlier lawful processing.
• Appeal a refusal to act on a request where local law provides that right.
• Complain to your local data protection authority.

Use in-app settings where available, or email caden@cadenwurzbacher.com. Describe the right you want to exercise and the email or username connected to the account. We may request reasonable verification. We will respond within the period required by applicable law. Authorized agents may submit requests where permitted, but we may require proof of authority and direct identity verification.

We will not discriminate against you for exercising privacy rights. Storyglot does not sell personal information and therefore does not offer a “Do Not Sell” mechanism. If our practices change, we will update this policy and provide required controls before the change takes effect.

11. Children and teens

Storyglot is a general-audience language-learning service and is not directed to children under 13. A person under 13 may not create a registered account, use Community, or purchase Premium. We do not knowingly collect personal information from a child under 13. If local law sets a higher minimum age for a child to consent to online data processing, that higher age applies unless a parent or legal guardian provides valid consent through a method we make available.

Users who are under the age of majority should review these terms and any purchase with a parent or legal guardian. A parent or guardian who believes a child submitted personal information without appropriate consent should email caden@cadenwurzbacher.com. We will investigate and delete the information when required.

12. Security and international transfers

Security

We use safeguards designed for the nature of the information we handle, including encrypted network connections, managed authentication, access controls, row-level database policies, least-privilege service access, secret management, logging, and deletion procedures. No method of storage or transmission is completely secure. You are responsible for protecting your device, email account, sign-in credentials, and recovery methods. Contact us promptly if you believe your account or information has been compromised.

International processing

Storyglot and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, provider data processing terms, and other lawful transfer mechanisms. You can contact us for more information about safeguards relevant to your information.

Third-party services and links

Apple, Supabase, RevenueCat, sign-in providers, and websites reached through external links have their own terms and privacy practices. This policy describes Storyglot’s handling and does not replace a third party’s policy. Review the relevant provider’s information before using an external service.

13. Changes and contact

We may update this policy when Storyglot’s features, providers, or legal obligations change. We will post the revised policy with a new effective date. If a change materially affects your rights or how we use personal information, we will provide additional notice in the app or by another appropriate method before the change takes effect when required.