Privacy Policy

• We collect what a reading and soundtrack service needs: your account, your library, your reading, and the things you write.
• We don't sell personal data, we don't show ads, and we don't use advertising trackers.
• Private content stays private. Section 5 lists the few cases in which someone on our team may open it.
• You decide which emails and notifications you get. Any email that isn't about your account carries an unsubscribe link.
• You can download your data or delete your account yourself, from Settings, whenever you like.

Novelody is run by RinVTech, 77 Puławska, Apt. U.5, 02-595 Warszawa, Poland ("we", "us"). RinVTech is the data controller for everything described here, and the EU General Data Protection Regulation (GDPR) applies wherever you use Novelody from. You can reach us at [email protected].

Account. Your email address, your display name and your sign-in details. If you sign in with Google or Apple, the identifier and basic profile details that company gives us. We never see your Google or Apple password.

Trying Novelody before signing up. If you try Novelody without an account, what you add is kept under a guest record on our servers, with no name or email attached. Creating an account turns that record into your account. Guest records that are no longer used are deleted.

Your library and reading. The books you add and what you record about them, your reading sessions, your goals and progress, and any library you import.

Soundtracks and chapter maps. The soundtracks and chapter maps composed for you, your changes to them, and anything you publish.

What you write and add. Notes, quotes, messages in read-together groups, photos you choose to add, feedback and reports.

Reading with others. Your read-together groups, friend streaks, the nooks you follow, gifts, and readers you have blocked.

Your nook. How you set up and decorate it, and its share link if you made one.

Purchases. If you buy Plus, the details of the purchase and the identifiers Stripe or Apple give us. Your card number never reaches us.

Settings. Your preferences, such as language, time zone and which notifications and emails you switched on.

Devices and usage. Technical information about the devices and browsers you use, what we need in order to send you notifications, how the service is used, and what we need to enforce limits and prevent abuse.

Email delivery. Which messages we sent you, and whether they could be delivered.

• To run your account and the features you use (account, library, reading, soundtracks, writing, nook, groups, streaks): performance of a contract, GDPR Art. 6(1)(b).
• To take payment for Plus and keep the records tax law asks for: contract, and legal obligation, Art. 6(1)(c).
• To send emails about your account (confirming your address, password resets, sign-in notices, Plus receipts and renewal notices): contract.
• To send the reminders, notifications and reading updates you switched on, and to ask about a chapter if you turned chapter notes on: consent, Art. 6(1)(a).
• To keep the service safe (limits, reports, moderation): legitimate interests, Art. 6(1)(f).
• To see how Novelody is used and fix what breaks (usage events, feedback, technical traces): legitimate interests.

You can withdraw consent at any time in Settings or with the unsubscribe link in an email. We don't use your data for advertising or to train AI models, and no decision with legal effect is made about you automatically.

Emails about your account go out when they are needed. Everything else is off until you turn it on: the daily reminder, reading updates by email, and notifications on your phone or in your browser. Each has its own switch in Settings, and each of those emails ends with an unsubscribe link.

Our team will only access the content of your account to fix a problem or recover something on your behalf, to look into a report of abuse, or where the law requires it. Each access is recorded.

Nothing, until you share something. What you publish carries your display name. A nook share link shows your nook, your profile and your library to whoever has it. Members of a read-together group and friends on a streak with you see your name and your progress, and the notes you post in the group.

Your email address, your notes and quotes, and your reading sessions are never shown to other readers.

We don't sell personal data and we don't hand it to anyone for their marketing. We share it only with the companies that help us run Novelody, and only as far as their part requires:

• Hosting and network: Microsoft Azure and Cloudflare.
• Payments: Stripe on the web and Apple in the iPhone app.
• Sign-in: Google and Apple, if you use them to sign in.
• Email and notifications: Resend for email, and Apple or your browser's push service for notifications.
• Composing: Anthropic provides the AI model that composes soundtracks and chapter maps. It receives details of the book and of your request, not your name, email address or reading history.
• Music: Audius and Apple send music, previews and cover art directly to your device, under their own privacy policies (Audius, Apple).
• Bookshops: some links to bookshops are affiliate links. We send the shop nothing about you.

We also disclose data when the law requires it. If Novelody were ever transferred to another operator, your data would go with it under this policy.

Our servers are in the United States, and several of the companies in section 7 are based there too. Where personal data leaves the European Economic Area, the transfer rests on the EU–US Data Privacy Framework if the company is certified under it, and on the European Commission's standard contractual clauses if it is not.

Novelody sets only the cookies it cannot work without: the ones that sign you in and keep you signed in. There are no advertising or third-party cookies, which is why you see no cookie banner.

The app also keeps some things on your device, such as your settings and copies of your books and reading, so that it works quickly and without a connection. Signing out or clearing the app's data removes them.

We keep your data for as long as you have an account. Deleting the account removes your personal data from our systems, apart from what is listed below. A Plus membership bought on the web is canceled as part of the deletion. One bought through the App Store has to be canceled with Apple. Deletion is permanent and we cannot undo it.

A few things remain:

• What you published stays available without your name. Unpublish it first if you would rather it went with the account.
• Records we have to keep by law, such as payment records for tax and accounting, for as long as the law requires.
• What we need to stop writing to an address that asked us to, or to prevent abuse.
• Backups, until they expire.
• Stripe and Apple keep their own payment records, as the law requires of them.

Under the GDPR you can see, correct, delete and get a copy of your personal data, object to how it is used or ask us to restrict that, and withdraw a consent you gave. Most of it needs no request:

• Download my data, in Settings, gives you a file with the data that belongs to your account.
• Delete my account, also in Settings, erases it as described in section 10.
• Your name, goal, emails and notifications can be changed in Settings at any time.

For anything else, write to [email protected]. We answer within one month. You can also complain to the data protection authority in your country; in Poland that is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

You must be 16 or older to use Novelody. If we learn that an account belongs to someone younger, we delete it. If you think that has happened, please tell us.

We protect your data with technical and organizational measures suited to the risk, including encrypted connections and restricted access. No system is perfectly secure. If a breach affects your data, we will tell you and the authority, as the law requires.

When this policy changes, the date at the top changes with it. If a change is significant, we will let you know.

RinVTech, 77 Puławska, Apt. U.5, 02-595 Warszawa, Poland. [email protected].