Your reading is nobody else's business.

When you create an account we keep:

• Your email address and name, to identify your account and send you password resets.
• A hash of your password. We never store the password itself and cannot recover it.
• The books you import — the EPUB file and its cover — so your library opens on any device you sign in from.
• The words you save, their translations, the passages you met them in, and your review history. This is the product.
• Your reading position, streak and settings, so the app resumes where you stopped.
• A record of AI requests, used only to enforce usage limits and deleted automatically after 40 days.

We do not sell your data, show advertising, use tracking cookies, follow you across other websites, or use your reading or vocabulary to train any model.

We count visits to our public pages — this one, the blog, the home page — so we know which are worth writing. That counter is cookieless, records no identifier of any kind, and cannot tell one visit from another. It does not run inside the reader, so what you read and which words you save are never part of it.

Running the service means some data passes through other companies. Each is used for one purpose only:

• Neon — hosts the database holding your account, vocabulary and progress.
• Cloudflare R2 — stores your book files and covers.
• OpenAI — receives the word you tapped and the sentence around it in order to explain it, and the text you ask to hear in order to pronounce it. It does not receive your name, email or any identifier.
• Resend — sends account email such as password resets, and keeps the mailing list: the address you give our newsletter or reading challenge, and which of them you joined. Nothing is added unless you ask, and every email has a link that unsubscribes you at once.
• Stripe — takes payment for a paid plan and keeps your card details; we never see or store your card number. It holds your email, name, billing address and the plan you pay for, and works out any tax due for your country.
• Fly.io — hosts the application itself.

Data is held on servers in the United States. If you are in the UK or the European Economic Area, this means your information is transferred outside your region.

You can ask for a copy of everything we hold about you, correct anything wrong, or have your account and its contents deleted. Deleting your account removes your books, vocabulary and review history permanently. Email us and we will action it.

The reader sets two kinds of cookie: one that keeps you signed in, and one that remembers your language choices. Both are strictly necessary for the service to work. There are no advertising or tracking cookies.

The service is not intended for children under 13, and we do not knowingly create accounts for them.

If this policy changes in a way that affects you, we will say so before the change takes effect rather than quietly updating the date at the top.

For anything in this policy, including requests about your data, contact support@verbeto.com.