Privacy policy
Who is responsible
ReadFlow is provided by Nedelya Labs, an independent developer brand. Nedelya Labs is not a registered company: it is operated by an individual, who is the person responsible for the data described in this policy. For privacy questions, or to exercise your rights, write to readflow@linkcrit.com.
In short
- You sign in with Apple or Google. ReadFlow has no password of its own.
- The PDF or EPUB you choose is sent to our server and, only to produce your result, to the service providers listed below.
- ReadFlow 2.0 contains no advertising and no analytics software, and we do not track you across other companies' apps or websites.
- You can delete your account inside the app. Our files and records are then removed, except the anonymised transaction records described below.
- Uploaded files and generated EPUBs are not deleted automatically while your account exists (see How long we keep data).
Data we process
| Data | What it is and why we need it |
|---|---|
| Sign-in identity | The identifier Apple or Google gives us for you, your email address and whether the provider has verified it (Apple may give a private relay address instead of your real one) and, when the provider shares it, your name (Apple shares it only the first time). We use it to sign you in and to keep your credits and books with your account. We never merge accounts by email address. |
| Sessions | A sign-in session for each device so that you stay signed in. It ends when you sign out or delete your account. |
| Your files and their contents | The PDF or EPUB you submit, the text taken from it, the EPUB we generate, and the progress of a translation. We use them only to do the job you asked for, including the price quote and the free translated sample. |
| Job records | For each conversion or translation: the file name, status, language and credit cost. They feed the Shelf and History in the app. |
| Credits and purchases | Your credit balance and credit history, and the identifiers of your App Store or Google Play purchases (transaction identifiers). We never receive your card number or your Apple or Google password. |
| App and device information | A random installation identifier created by the app, the app version and the platform. On Android, Google Play services' App Set ID is also used for fraud prevention. |
| App integrity checks | A token from Apple App Attest (iOS) or Google Play Integrity (Android), issued through Firebase App Check, which tells the server a request comes from a genuine copy of ReadFlow. |
| Free-preview usage | How many free previews an account or device has used, so the free allowance cannot be reset by deleting an account. |
| Technical logs | Our server records a fixed list of technical fields (such as the request type, result and timing) in Google Cloud Logging. Google Cloud's default 30-day retention applies. We do not put the contents of your files in the logs. |
| Messages to support | What you write to us, including your email address. |
Earlier Android versions (1.x) also include Google's Firebase Analytics, which collects usage information. ReadFlow 2.0 does not.
Sign in with Apple and Google
If you use Sign in with Apple, Apple tells us your Apple identifier, your email address or a private relay address, and your name if you share it. If you delete your ReadFlow account, we also ask Apple to revoke ReadFlow's sign-in connection with your Apple Account. If you use Google, we receive Google's identifier for you and your email address. You can link both sign-in methods to the same account from the Account screen.
Service providers
These companies process data for us. They may process data in other countries, including the United States.
| Provider | What it does for ReadFlow |
|---|---|
| Google Cloud | Hosts the ReadFlow server and stores data: Cloud Run and Cloud Storage in Belgium (europe-west1), the Firestore database in Google's European multi-region (eur3), and background job queues. Document AI (EU) reads text from scanned PDF pages when a conversion needs it. |
| OpenAI | Text taken from your file is sent to OpenAI's API to translate it and to structure converted books, whenever you request a price quote, a free sample, a conversion or a translation that needs it. |
| Apple | Sign in with Apple, App Store purchases and App Attest. |
| Google sign-in, Google Play purchases, Play Integrity and Firebase App Check. |
We do not sell your data and we do not use advertising networks.
How long we keep data
- Finished books in the app
- Translated EPUB downloads are guaranteed for at least 14 days after successful translation completion, not job creation. Please save a local copy. After 14 days, the authenticated owner may continue downloading while the file still exists, but availability is no longer guaranteed. Re-downloading an existing translation does not consume additional credits. History keeps at most the 10 most recent items. An EPUB you saved on your device stays there until you remove it.
- Uploaded files and generated EPUBs in our storage
- Automatic deletion after the 14-day guaranteed download period is not currently enabled. Uploaded files and generated EPUBs remain in our cloud storage until you delete your account, which removes them. We have no automatic deletion schedule for these files today; if that changes we will say so here.
- Temporary translation files
- Working files created during a translation are deleted when the job ends and in any case within about two days.
- Account, credit and history records
- Kept until you delete your account.
- Transaction records after deletion
- Records of purchases and of credit movements are kept after you delete your account, with your account identifier removed. We keep them to prevent the same purchase from being credited twice and to answer payment, refund and fraud questions. They contain no name or email address. We have not set an end date for them.
- Free-preview usage
- Kept without an account identifier, for the reason given above.
- Technical logs
- 30 days (Google Cloud Logging default).
Deleting your data
Open Account → Delete account in the app. The account deletion page explains each step and what is removed or kept.
Your rights
You can ask us for a copy of your data, to correct it or to delete it by writing to readflow@linkcrit.com. Depending on where you live, data protection law (for example the GDPR in Europe or the KVKK in Türkiye) may give you further rights, including the right to complain to your data protection authority. This page does not limit those rights.
Security
The app talks to our server over HTTPS, and Google Cloud encrypts stored data at rest. No system is perfectly secure, so please keep a copy of books that matter to you.
Children
ReadFlow is a general-purpose document tool. It is not designed for children, and we do not knowingly collect personal information from children.
Changes and contact
If this policy changes we will publish the new version here with a new date. Questions: readflow@linkcrit.com.