Privacy Policy

1. Data Controller

For the purposes of the GDPR, the Service operates as the data controller. If you have any questions regarding this Privacy Policy or your data protection rights, you can contact us through the application's official support channels.

2. Data We Collect and Process

We minimize data collection to strictly what is necessary to provide our reading and translation services:

• Text Input Data: When you click on a word or sentence within an EPUB to request a translation, that specific text is processed dynamically to generate the translation via our integrated AI providers (Anthropic API).
• Technical and Connection Data: We process your IP address (verified securely via Cloudflare as CF-Connecting-IP) strictly for security logging, abuse prevention, and rate-limiting enforcement.
• Local Storage Data: We utilize your browser's localStorage to save your application preferences, core status flags, and your privacy consent choices locally on your device.

3. Legal Basis for Processing

We process your data under the following GDPR legal bases:

• Performance of a Contract (Article 6(1)(b) GDPR): To process the text queries you explicitly submit for translation and deliver the core functionality of the Service.
• Legitimate Interests (Article 6(1)(f) GDPR): To enforce automated rate-limiting, prevent service abuse, and defend our infrastructure against malicious traffic or spoofing attempts.
• Consent (Article 6(1)(a) GDPR): For non-essential tracking or preferences where you explicitly grant permission via our privacy interface.

4. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data. To fulfill translation requests, text inputs are securely transmitted to our trusted AI infrastructure sub-processor:

• Anthropic, PBC: Text inputs are sent via private API endpoints to the Claude model infrastructure. This data is handled strictly in accordance with enterprise data privacy standards and is not used to train public models.

5. International Data Transfers

When data is transferred outside the European Economic Area (EEA), specifically to our infrastructure components in the United States, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, are maintained by our sub-processors to guarantee an equivalent level of data protection.

6. Data Retention

• Translation Queries: Text queries sent for translation are processed ephemerally and are not permanently stored on our application databases.
• Security Logs: Connection details and rate-limiting telemetry are kept for a minimal duration necessary to resolve security anomalies and are regularly pruned automatically.

7. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request confirmation as to whether your data is being processed.
• Right to Erasure (“Right to be Forgotten”): You can request the deletion of your telemetry data.
• Right to Restriction of Processing: You can object to or restrict certain processing activities.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your EU Member State if you believe our processing violates the GDPR.

8. Amendments to this Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in our services or legal obligations. Your continued use of the Service after updates constitute acceptance of the revised policy.