Privacy
A working draft. Have a lawyer review this before launch.
What we hold
- Account: email, handle, display name, date of birth, time zone.
- Reading: which pages you have read and when, your position in each book, your streak.
- Your marks: likes, highlights, and personal book ratings.
- Reading companion: monthly request counts and the time of your last request, to enforce usage limits. We do not store personal phrases or their explanation answers. Card translations are stored by public book card and language, and may be reused by other paid readers.
- Subscription: Stripe customer/subscription identifiers, renewal/end date, membership state, and founding-offer reservations. Card/payment details are handled by Stripe, not stored by Potpuri.
- Social: friendships, and requests you have sent or received.
- Technical: session records with approximate IP and browser, kept for security.
Why we hold it
To run the service you asked for: remembering your place, counting your daily pages, keeping your streak, and showing friends what you are reading when you allow it. The legal basis is performance of our contract with you. Security logging rests on our legitimate interest in keeping accounts safe.
Date of birth
We ask for it to confirm you are old enough to use Potpuri, and we keep it so we do not have to ask again. It is not shown to anyone else.
What we do not do
- No advertising, and no sale of your data.
- No third-party analytics on what you read.
- No profiling of minors.
What a person reads can reveal a great deal about them. We treat reading history as sensitive even where the law does not require it.
Who can see your reading
Your profile is visible to friends by default. You can set it to public or to only you, and you can hide an individual book from your profile at any time.
Optional AI explanations and translations
When you submit a phrase to Puri, we send that phrase, your chosen answer language, and explanation or translation instructions to OpenRouter and Google Gemini. When you request a card translation, we send only the current card text and the chosen language, then store its translation for reuse. We do not send your account details, reading history, or the whole book. Do not submit sensitive information. We request providers that disallow data collection and support zero data retention; provider billing and operational metadata may still be processed under their own policies.
OpenRouter privacy policy ·Google privacy policy ·Stripe privacy policy. AI answers may be inaccurate; using the companion is optional.
How we protect it
- Passwords are hashed with Argon2id and are never recoverable.
- Two-factor secrets are encrypted before they are stored.
- Session cookies are HttpOnly, and only a hash of each session is stored.
Your rights
You can access, correct, export or delete your data. Emailprivacy@bookworm.example and we will respond within one month. You may also complain to your local data protection authority.
Keeping
We keep your data while your account is open. Closing your account removes your personal data; anonymous aggregate counts, such as how many people liked a page, may remain.