Privacy Policy

We collect only what we need to run your account and the reader:

• Account information. When you sign in with Google or Apple, we receive your name and email address from that provider. We use them to create your profile and an internal account identifier, and to identify you when you return. We do not receive your password.
• Reading progress. We store which work and section you are reading so your place syncs across your devices.
• Profile details. A public handle and an optional short bio that you choose. These are visible to others on your public profile page, along with your profile name. Your email address is not displayed there.
• Highlights and notes. If you sign in and save a highlight, we store the selected text, its book and location, its color, and any note you add. These are private to your account.
• Community content. On surfaces where community features are available, we store comments, reactions and abuse reports. Comments and profile details may be public. Comments may be processed by our AI providers for moderation and thread summaries. Public comments are disabled in the iOS app for this release.
• Optional analytics. With your permission on this device, PostHog collects page visits and reader feature interactions. Analytics is off by default. We do not send your name, email, notes or highlights to these services, or include profile handles and URL query strings in analytics URLs. Session recording is disabled.
• Service information. Our hosting and authentication providers process connection information, such as IP addresses, browser information and request logs, to deliver and protect the service.

• We do not sell your personal data.
• We do not show ads.
• We do not charge you for the texts — the literary works presented are in the public domain in the United States.

Authentication and data storage are handled by Supabase. Your account information, profile, reading progress, highlights, notes and community content are stored in Supabase. Vercel hosts the web service. Sign-in is performed through Google or Apple OAuth via Supabase Auth; we never see or store your provider password. When available, an Apple authorization token is retained in encrypted form to revoke the sign-in connection when you delete your account.

When you sign in, we set a session cookie so that you stay signed in as you move between pages. This cookie is necessary for the account features to work. You can clear it at any time by signing out or clearing your browser data.

You can change this choice here at any time. Turning analytics off stops future optional events; it does not affect your account or reading.

We retain your account data while you keep your account. You can remove individual highlights and notes, or delete the account. This removes the live records; backups and service logs may persist under our providers’ retention schedules.

Reading preferences and reading history may also be saved on this device. The iOS offline library keeps its own reading place and font size. These stay on the device; its “Clear offline reading history” control removes that history. Necessary sign-in storage is separate from optional analytics.

Open the account button, choose Account and privacy, then “Delete my account.” Deletion permanently removes your authentication account, profile, synced reading progress, highlights, notes, comments, reports and reactions, along with affected cached thread summaries. Other readers’ replies remain as their own comments.

We revoke Apple authorization when a revocation token is available. For an older Apple connection without a token, deletion still completes and we show how to remove the connection in your Apple Account settings.

You can also contact privacy@fractalverse.ai about access, correction, export or deletion of your data.

FractalVerse is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy as the app evolves. When we make a material change, we will update the effective date at the top of this page. Continued use of FractalVerse after a change means you accept the updated policy.

Questions about this policy or your data? Email us at privacy@fractalverse.ai.