Privacy Policy

1. Information we collect

Account information: your email address, username and a hashed password when you register, and email verification codes (stored only as hashes and short-lived).

Reading data: books in your library, reading progress, reading history and reading time, so your bookshelf and place in a book stay in sync across devices.

Transaction data: orders, coin balances, whole-book buyout records and payout records. For cryptocurrency payments we record the receiving address shown for your order and the transaction hash you submit or that is matched to your order on-chain.

Device and usage data: IP address, device and browser type, app version, and product analytics events — such as app opens, page views, book views, chapter starts, library changes and purchases — with timestamps. When you are signed in, events are linked to your account; anonymous events may carry a device identifier supplied by your app.

Content you provide: manuscripts and chapters you publish, reports, feedback and business enquiries you send us.

Website analytics: we use Google Analytics and Firebase (Google's analytics services) to understand where our visits come from and how our pages perform, such as page load times and network request durations.

2. How we use information

We use the information above to run the Service: signing you in, syncing your library and progress, unlocking chapters, generating listening audio, processing and verifying payments, preventing fraud and abuse, measuring usage so we can improve the product, and sending transactional email such as verification codes, receipts and security notices.

We do not use your personal information for third-party advertising, and we do not sell personal data.

3. Cookies and local storage

We use a session cookie to keep you signed in and a language-preference cookie to remember your language. The app and website also store settings and reading position locally on your device. We do not set third-party advertising cookies.

4. Cryptocurrency payments and public blockchains

Cryptocurrency payments settle on public blockchains. Wallet addresses and transaction hashes are public by design and can be viewed by anyone through block explorers; we cannot edit or delete on-chain records. We associate an on-chain transaction with your order only to verify and credit your purchase.

5. Listening audio

When you ask to listen to a chapter, the chapter text is processed to generate speech audio. Generated audio is cached on our servers so it can be played again without regenerating it.

6. Sharing

We share information only where needed to operate the Service — for example with email delivery and hosting providers, and with public blockchain networks when you pay — or where required by law, or to protect the Service, our users, or our rights. Service providers may process data only on our instructions.

7. Retention and account deletion

We keep account information while your account is active. You can request account deletion in your account settings: after a 7-day cooling-off period (during which you can cancel the request), your account is anonymised — your identity details and credentials are destroyed and your reading data is erased. Financial records are retained in de-identified form only where needed for accounting, security and dispute handling.

8. Your rights

Subject to the law that applies to you, you may request access to, correction of, a copy of, or deletion of your personal data, and may object to or restrict certain processing. Send requests to support@xnoval.com and we will respond within a reasonable time.

9. Children

The Service is not directed to children under 13, or under the minimum age required in your region. Minors may use the Service only with the consent of a parent or guardian. If we learn that a child has registered without such consent, we will remove the account.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date. Continuing to use the Service after the effective date means you accept the updated policy.