Privacy Policy

1. Information We Collect

Account Information

When you create a PageCrush account, we collect:

• Your email address (required for account creation)
• Your display name (optional, set during registration)
• If you sign in with Google: your Google display name, email address, and profile photo URL provided by Google

We do not store your password. Passwords are managed exclusively by Firebase Authentication (Google) using industry-standard hashing.

Reading Activity

To power your personal library and reading stats, we store:

• Books you have added to your To Read list
• Books you are currently reading, including your current page
• Books you have completed, including completion dates
• Books you have read via Compressed Reading (synthesis-based)
• Your preferred genres selected during onboarding
• Your monthly synthesis count (to enforce the 3 free reads/month limit)

AI Chat Messages

When you use the AI Chat feature (PageCrush Pro), the messages you send and receive are stored in your user profile on Firestore to maintain conversation history across sessions.

Device & Usage Data

We do not collect device identifiers, analytics events, crash logs, or advertising identifiers. We do not use any third-party analytics SDK.

2. How We Use Your Information

We use the information we collect solely to provide and improve the PageCrush service:

• Authenticate your identity and maintain your session
• Sync your personal library and reading progress across devices
• Enforce the free tier's monthly synthesis limit
• Personalise book discovery based on your selected genres
• Provide AI-powered book chat using your conversation history as context
• Manage your subscription status (Pro vs. Free)
• Respond to support requests you initiate via email

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

3. Data Storage & Security

All user data is stored in Google Firebase Firestore, a cloud database operated by Google LLC. Your data is stored in a document at users/{your-user-id}, accessible only to your authenticated account.

Security measures

• Firestore Security Rules enforce that only you can read or write your own data (request.auth.uid == userId)
• All data is transmitted over HTTPS/TLS
• Passwords are never stored by PageCrush — Firebase Authentication manages credentials
• Our AI Chat API key (Anthropic) is stored exclusively as a server-side environment variable on Vercel and is never exposed to the app client

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong, unique password for your account.

4. Third-Party Services

PageCrush integrates with the following third-party services, each with their own privacy policies:

Google Firebase (Authentication & Database)

Used for user authentication and cloud data storage. Google may collect limited diagnostic data as part of operating Firebase services.

Firebase Privacy Policy ?

Anthropic (AI Chat)

When you use the AI Chat feature, your messages (along with the relevant book synthesis as context) are sent to Anthropic's Claude API via our secure serverless proxy. Anthropic processes this data to generate responses. Your conversation is not used to train Anthropic's models by default under our API agreement.

Anthropic Privacy Policy ?

RevenueCat (Subscriptions)

If you purchase a PageCrush Pro subscription, RevenueCat processes your subscription status and receipt validation. RevenueCat does not have access to your payment card details — all payment processing is handled by Apple (App Store).

RevenueCat Privacy Policy ?

Apple App Store (Payments)

All in-app purchases are processed by Apple. We do not collect or store your payment information. Apple's privacy policy governs the payment transaction.

Apple Privacy Policy ?

5. Subscriptions & Payments

PageCrush offers a free tier and a paid Pro subscription (monthly, annual, or lifetime). Subscription purchases are made through the Apple App Store and are governed by Apple's terms.

• We receive confirmation of your subscription status from RevenueCat (active, expired, cancelled) but never your payment details
• Your subscription tier is stored in your Firestore user profile to unlock Pro features
• To manage or cancel your subscription, go to iOS Settings ? Apple ID ? Subscriptions
• Refund requests must be submitted to Apple — we do not process refunds directly

6. AI Chat Feature

The AI Chat is available to PageCrush Pro subscribers. When you use it:

• Your messages are sent to our secure API endpoint (hosted on Vercel) which acts as a proxy to Anthropic's Claude API
• The book's synthesis is provided as context to the AI — we send up to 15,000 characters of synthesis text per request
• We send only your last 10 messages per request, each capped at 2,000 characters, to limit data transmission
• Conversation history is stored in your Firestore document and is visible only to you
• You can delete your account at any time from the Profile screen, which permanently erases all your data including chat history

7. Data Retention

We retain your data for as long as your account exists. Specifically:

• Active account: all data is retained and synced while your account is active
• Account deletion: deleting your account from the Profile screen permanently removes your Firestore document (library, reading history, chat history, genre preferences) and your Firebase Authentication record. This action is irreversible.
• Inactive accounts: we may delete accounts that have been inactive for more than 24 months, with prior notice to the registered email address

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your data (you can also do this directly in the app via Profile ? Settings ? Delete Account)
• Portability: request your data in a machine-readable format
• Objection: object to certain processing of your data

To exercise any of these rights, contact us at ilyas.moud.pro@gmail.com. We will respond within 30 days.

GDPR (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing your data is the performance of our contract with you (providing the PageCrush service). You may also lodge a complaint with your local supervisory authority.

CCPA (California Residents)

California residents have the right to know what personal information is collected, to opt out of its sale (we do not sell personal data), and to request deletion. Contact us at the email above to exercise these rights.

9. Children's Privacy

PageCrush is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. If the changes are material, we will notify you via email or via an in-app notice.

Your continued use of PageCrush after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: ilyas.moud.pro@gmail.com
• App: Profile ? Contact Us (in the PageCrush app)

We aim to respond to all inquiries within 5 business days.