Privacy Policy

1. What we store

• Account: your e-mail address, a hash of your password (never the password itself), the time of sign-up and of sign-ins.
• Books: the files you upload, the text extracted from them, and what the Service found in them (structure, language, what each part is about).
• Choices: the level, language, manner, drawing style, voice and file formats you chose, and the examples from your own life that you typed. What you type there is sent to the AI provider as part of the request, so put nothing in it you would not want there.
• Courses: the lectures, drawings and narration generated for you, including samples.
• Token ledger: top-ups, the codes used, what was set aside, every charge and the book it was for.
• Technical: server logs with the IP address, browser and time of each request, kept by our hosting provider for a short period to run and secure the Service.

The player keeps its own settings (language, theme, what to show) in your browser’s storage, not on our servers.

2. Why, and on what legal basis

• To provide what you asked for: uploading, making and keeping courses, the balance (performance of a contract, Art. 6(1)(b) GDPR).
• To keep the Service secure, prevent abuse and limit spending (our legitimate interest, Art. 6(1)(f)).
• To keep the token ledger and meet accounting duties (legal obligation, Art. 6(1)(c)).
• To write to you about your account and the Service: a finished job, a change to the terms (performance of a contract). We send no marketing e-mail unless you ask for it.

3. Where it is kept

The database with accounts, extracted texts, courses and the token ledger is a Neon Postgres database in the EU (Frankfurt, Germany).

Uploaded files and generated files are kept in Vercel’s file storage, and the application runs on Vercel’s servers; these may be in the EU or in the US.

Where data leaves the EU, it goes to providers covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

4. Who processes it for us

• Vercel Inc., US: hosting and file storage.
• Neon Inc., US, with servers in the EU: the database.
• OpenAI: extracts of your book’s text, your choices and the examples you typed are sent to OpenAI’s API to write the lectures and make the drawings. Under OpenAI’s API terms this data is not used to train its models and is kept by OpenAI for a limited period (up to 30 days) to watch for abuse.
• Voice providers, once studio narration is available ([voice provider, for example Microsoft Azure AI Speech or ElevenLabs]): the lecture text is sent to make the recording.

Nobody else. We do not sell data, and we use no advertising or analytics trackers. We count page views ourselves: the day, the page and the site you came from are kept, with nothing that says who looked.

5. Cookies

The Service sets two cookies, both necessary for it to work: a visitor cookie, so that a book you upload before signing in is still yours when you do, and a session cookie once you sign in. Neither is used for tracking or advertising, which is why there is no cookie banner.

6. How long

• Your account, books and courses are kept while the account exists. You can remove a book from your account at any time; its files, text and courses are deleted with it within [30] days.
• When you close your account, we delete it and everything in it within [30] days, except the token ledger entries we must keep for accounting, which are kept for the period the law requires ([5] years in Poland).
• Books uploaded without signing in and never claimed by an account are deleted after [30] days.
• Server logs are kept by the hosting provider for a short period.

7. Your rights

You can ask for access to your data and a copy of it, for its correction or deletion, for its processing to be restricted, for a portable copy, and you can object to processing based on our legitimate interest. Write to privacy e-mail; we answer within a month and may ask you to confirm the request from the account’s e-mail address.

You can complain to the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or to the data protection authority of your own country.

8. Security

Passwords are stored hashed, connections are encrypted, and access to the database and the files is limited to what runs the Service. No system is perfectly safe; if a breach affects you, we tell you as the law requires.

9. Children

The Service is not meant for people under 16. We delete accounts we learn belong to younger children.

10. Changes

We update this policy as the Service changes, for instance when payment or studio narration is connected, and note the date at the top. Material changes are announced on the site or by e-mail.