1. Overview and Local-First Architecture
epup is built with a local-first design. Your reading documents, book progress, highlights and companion pet data remain on your device by default. We do not sell your personal data to third parties or advertising brokers.
2. Information We Process
If you link an online account, we process your email address, user ID, authentication session tokens and cloud sync metadata via Supabase. If you participate in social features, we process your chosen username, avatar configuration, friend code, club membership, cooperative raid progress and public leaderboard statistics.
3. Reading Data and Document Processing
Imported EPUB and PDF documents are parsed locally on your device to extract chapters, render pages and generate cover previews. Reading notes, highlights, bookmarks, focus timer session logs and reading metrics are stored locally and synced as lightweight progress metadata when cloud sync is enabled. epup does not upload your raw book files to epup servers.
4. Google Drive Cloud Backups
If you enable Google Drive backups, your imported book files and cover images are uploaded directly to the private application data folder in your personal Google Drive account. epup only accesses its designated application folder and cannot view other files in your Google Drive.
5. Device Permissions and Foreground Services
Depending on the features you use, epup may request specific permissions: notifications for reading reminders and streak notices, camera access strictly for on-device QR friend code scanning, photo library access to choose a profile avatar and a foreground service on Android to ensure accurate focus timer synchronization during active reading sessions.
6. Third-Party Service Providers
We rely on trusted third-party providers to operate application functionality: Supabase for authentication and database management, Expo for push notification delivery, Google Drive for optional personal book file backups and Gutendex or dictionary endpoints when you search for public domain titles or word definitions.
7. Data Retention and Account Deletion
Local data remains on your device until you reset app data or uninstall the application. Cloud data is retained while your account remains active. You can permanently delete your cloud account and all associated remote records at any time in Settings or through our website account deletion portal.
8. Children's Privacy and Age Guidance
epup is designed for general audiences and readers of all ages (rated 4+). Core reading and companion features operate entirely offline without requiring registration or collecting personal information. For users under the age of 13 (or the applicable digital consent age in your region), online account creation, cloud backup and social features should only be used with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal data from unsupervised children under 13 without parental consent. If you believe an unsupervised child has provided personal information, please contact us for prompt removal.
9. Your Privacy Rights and Save Exports
You have the right to access, export, modify or delete your data. You can download a complete JSON export of your local save data at any time from the app settings, manage device permissions in system settings and request full cloud data erasure.
10. Policy Updates
We may update this Privacy Policy periodically. Significant changes will be reflected by updating the "Last Updated" date and communicating notices through the app when appropriate.
11. Contact Us
If you have any questions or requests regarding your privacy and data, please contact us by email at: team@epup.dev