Privacy Policy

What we collect

Your email address, an optional display name, the documents you import, your reading positions and settings, basic usage counts (words listened, for the daily allowance), and — when you sign in, sign up, reset a password or make a purchase — your IP address, the country it resolves to, and the device label your app sends. No advertising identifiers, no tracking SDKs, no analytics brokers.

Security and abuse prevention

Sign-in events are logged so we can keep accounts safe and stop sign-up farming: the event, when it happened, the country, and a one-way keyed fingerprint of the network it came from. Your full IP address is kept for at most 30 days and then erased automatically; the country and the fingerprint, neither of which is an address, are kept as aggregate security history. We don't log an address for ordinary reading or listening.

How it's used

Only to run Cedar: signing you in, generating audio, syncing your library between your devices, and enforcing plan allowances. Audio is cached so repeated listening is instant.

Sign in with Apple or Google

If you sign in with Apple or Google we receive your email (or Apple's private relay address) and, if shared, your name. We never see your Apple or Google password.

Marketing

We only email you news and offers if you ticked the box saying we may, and you can opt out at any time.

Sharing

We don't sell or share your data with anyone. Your documents are visible only to your account.

Deletion

Delete your account and your documents, audio cache entries, and personal data go with it. Security events keep no link to you once the account is gone: the account id, the IP address and the device label are stripped, leaving only an anonymous record that something happened.