the small print

Privacy Policy

What Darak collects

• Name, email address, and profile photo URL from Sign in with Apple or Google, so we can identify your account.
• Reading progress: which cards you've reviewed, when, and your review scores. This powers the spaced repetition algorithm that decides what to show you next.
• Personal notes you write about books, stored locally on your device.
• App preferences such as favorite books, display settings, and reminder times, stored locally on your device.
• A unique user ID created when you sign up, used to link your progress to your account.

What Darak does not collect

This list is short because Darak is funded by subscriptions, not data.

• No advertising or ad identifiers.
• No analytics, crash reporting, or behavioral profiling.
• No location, contacts, or health data. We do not read your photo library. When you save a share card, the image is written to your Photos at your request.
• No device fingerprinting.
• No cookies or cross-app tracking.
• We do not sell, rent, or share your data with anyone for marketing purposes.

How we use your data

Everything we collect serves one purpose: making Darak work. Your name and email identify your account. Your reading progress drives the spaced repetition algorithm and syncs across devices. That's it. We have no analytics dashboard, no engagement metrics, no A/B testing on your behavior.

Legal basis for processing (GDPR)

• Contract performance: your account data and reading progress are necessary to provide the Darak service you signed up for.
• Your consent: for optional features like notifications, which you can withdraw at any time.
• We do not sell or share your personal information as defined by the California Consumer Privacy Act (CCPA).

Where your data lives

Your reading progress lives on your device first (local storage), then syncs to your account on Supabase, our backend provider. Supabase runs on Amazon Web Services infrastructure and is SOC 2 Type 2 audited. Data is encrypted in transit (TLS) and at rest.

Third-party services

• Supabase (supabase.com) hosts your account and reading progress. They act as a data processor under our instructions. Their privacy policy: supabase.com/privacy
• Sign in with Apple provides authentication. Apple gives us a unique identifier and, optionally, your name and email. Apple does not tell us which other apps you use.
• Google Sign-In provides authentication. Google shares your name, email, profile photo, and a unique identifier. Google may collect your IP address for fraud prevention. Google's privacy policy.
• Apple StoreKit handles payments. We receive a transaction receipt confirming your purchase but never see your payment details.

Your rights

Regardless of where you live, you can:

• Access your data: your reading progress is visible in the app. For a full export, email us.
• Correct your data: update your name or email through your Apple or Google account.
• Delete your data: tap Delete Account in Settings. This removes everything from our servers immediately and cannot be undone.
• Withdraw consent: sign out anytime. Your local data stays on your device until you delete the app.

If you're in the EU or UK, you also have the right to data portability, to restrict or object to processing, and to lodge a complaint with your local data protection authority. Email us at hello@darak.day and we'll respond within 30 days.

Account deletion

When you delete your account in Settings, we immediately remove your account record, all reading progress, and all synced data from our servers. This cannot be undone. Local data on your device is also cleared. Note that Apple and Google retain their own records of your sign-in, which is outside our control.

Data retention

We keep your data for as long as your account exists. When you delete your account, everything is removed immediately. We don't keep backups of deleted accounts. If you simply stop using Darak without deleting your account, your data remains on our servers indefinitely.

Notifications

Darak can send daily reading reminders. These are local notifications scheduled entirely on your device. No data is sent to any server for this. You can disable them in Settings or in your device's notification preferences.

Children

Darak is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us at hello@darak.day and we'll delete it.

Changes

If we make meaningful changes to this policy, we'll update the date below and note what changed. For significant changes, we'll notify you in the app.

Contact

Darak is operated by Alexis Leger, based in France.

Questions, concerns, or data requests: hello@darak.day