This Privacy Policy explains how 10,000 Books in 10 Minutes (“we,” “us,” or “our”) collects, uses, and protects your information when you use our mobile and web applications and related services (the “Service”). We built 10,000 Books in 10 Minutes to be offline-first and privacy-respecting: most of what you read, highlight, and track lives on your device first, and only syncs when you choose to sign in.

Information we collect

Account information. When you create an account, we collect your email address (and, if you sign in with Apple or Google, the basic profile identifier they return).
Reading progress and streaks. Your library, finished summaries, highlights, daily streaks, and preferences are stored locally on your device and synced to your account so you can pick up across devices.
Subscription status. Your plan and entitlement status are managed through RevenueCat and the Apple App Store or Google Play. We do not receive or store your full payment card details.
AI chat messages. When you use our AI features (such as chatting about a book), the messages you send are processed by OpenAI to generate a response.
Basic analytics and diagnostics. We collect aggregate usage and crash data (such as feature usage, app version, and device type) to keep the app stable and improve it.

How we use your information

To provide, sync, and maintain your account and library.
To track your reading streaks and personalize recommendations.
To process subscriptions and verify your access to paid features.
To power AI summaries and chat responses.
To diagnose problems, prevent abuse, and improve the Service.
To communicate with you about important account or service updates.

Third parties and subprocessors

We rely on a small set of trusted providers to operate the Service. They process data only on our behalf and under their own privacy and security commitments:

Convex — backend database and account sync.
RevenueCat — subscription and entitlement management.
OpenAI — AI summary and chat processing.
Apple App Store and Google Play — billing and payment processing.
Vercel — hosting of our website and supporting services.

We do not sell your personal information.

Offline-first and local storage

10,000 Books in 10 Minutes is designed to work offline. Your library, reading progress, and highlights are written to local storage on your device so you can read on a plane or in a tunnel. When you are signed in and online, this data syncs to your account. You can clear local data at any time by signing out or removing the app.

Data retention

We retain your account information and synced reading data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal, tax, or fraud-prevention obligations. Aggregated, de-identified analytics may be retained indefinitely.

Your rights

You can access, export, correct, or delete your personal data at any time by contacting us. Depending on where you live, you may have additional rights:

GDPR (EU/EEA/UK). Rights to access, rectification, erasure, restriction, portability, and objection, plus the right to lodge a complaint with your supervisory authority.
CCPA/CPRA (California). Rights to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell your data.

To exercise any of these rights, email us at fernando.altuzar@clio.com.

Children's privacy

10,000 Books in 10 Minutes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security

We use industry-standard safeguards — including encryption in transit and access controls — to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data and to notify you of material incidents where required by law.

International data transfers

We and our subprocessors may process and store data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.

Contact us

If you have questions about this Privacy Policy or your data, contact us at fernando.altuzar@clio.com.