Privacy Policy

Last updated: October 26, 2025

Introduction

Welcome to Bookchoy ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy applies to both our mobile application and website (collectively, "our Services") and explains how we collect, use, and safeguard your information.

Information We Collect

We may collect the following types of information:

• Account Information: Username and email address provided when creating an account.
• Learning Data: Your progress, vocabulary lists, preferences, and learning history within the app.
• User Content: Text, images, and other content you upload or create for your personal learning.
• Usage Data: Information about how you interact with our Services, including features used and time spent.
• Device Information: Device type, operating system version, and unique device identifiers.

How We Use Your Information

We use the collected information to:

• Provide and maintain our Services
• Authenticate your account and manage your login sessions
• Personalize your learning experience
• Track your progress and provide recommendations
• Sync your data across your devices
• Improve our Services and develop new features
• Communicate with you about updates, support, and service-related announcements
• Detect and prevent fraud or abuse

Data Storage and Security

Your data is primarily stored locally on your device. For users with cloud sync capabilities, data is securely transmitted to cloud servers, possibly including third party providers. We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS)
• Secure authentication mechanisms
• Regular security updates and monitoring
• Access controls and data isolation between user accounts

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or regulatory purposes. Local data stored on your device remains until you uninstall the app or manually delete it.

Third-Party Services

We use third-party services to provide functionality within our Services. These may include, but are not limited to:

• Supabase: Cloud storage, authentication, and data synchronization
• Fly.io: Server hosting for processing requests
• Google Cloud Vision API: Optical character recognition (OCR) for image text extraction
• Microsoft Azure: Text-to-speech for pronunciation features
• AI Language Services (OpenAI, others): Generating translations, explanations, example sentences, lessons, and learning content

The specific providers we use may change as we improve our Services. These services have their own privacy policies governing their use of your information, and we encourage you to review them. We only share the minimum data necessary to provide the functionality of our Services and do not share your account information or personal identifiers with AI service providers unless technically required.

Cookies and Tracking

Website: We use essential cookies only to maintain your login session and authenticate account access. These cookies are strictly necessary for the website to function and cannot be disabled if you wish to use the account management features.

Mobile App: The app does not use cookies or browser-based tracking. The app may store local data on your device for offline functionality.

We do not use cookies or tracking technologies for advertising, analytics, or any non-essential purposes.

Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may disclose your information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations, court orders, or government requests
• To protect our rights, property, or safety, or that of our users or the public
• In connection with a business transfer, merger, or acquisition (you will be notified of any such change)

Your Rights

You have the following rights regarding your personal data:

• Access and Export: Request a copy of your personal data and learning content in a portable format
• Correction: You can update your account information and learning content directly within the app. If you encounter issues with this, please file a bug report or contact us using the information below.
• Deletion: Request deletion of your account and associated data
• Objection: Object to certain types of data processing
• Withdrawal: Withdraw consent for optional data collection at any time

To exercise these rights, please contact us using the information below. We will respond to your request within 30 days.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to your registered email address (for significant changes)
• Displaying an in-app notification when you next use our Services

Your continued use of our Services after such modifications constitutes your acknowledgment and acceptance of the updated policy.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context:

• Contract: Processing necessary to provide our Services to you
• Consent: You have given explicit consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate interests (e.g., improving our Services, security) that don't override your rights
• Legal Obligation: Processing necessary to comply with legal requirements

Governing Law

This privacy policy is governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of law principles. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in San Francisco County, California.

Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Email: support@bookchoy.app

We will respond to all legitimate requests within 30 days.