Privacy Policy

1. Information We Collect

When you use ChapterFlow, we collect the following types of information:

• Account information: Your email address and authentication credentials, managed through AWS Cognito.
• Reading activity: Which books and chapters you access, quiz scores, reading time, and chapter completion progress.
• Notes and bookmarks: Chapter notes you write and takeaways you bookmark within the reading experience.
• Preferences: Your display settings, learning mode, reading goals, and notification preferences.
• Gamification data: Insight Points balance, badge progress, streak data, and scenario submissions.
• Device information: A hashed device identifier and coarse network information used solely for abuse prevention. We do not collect precise location data.
• Payment information: Billing is handled entirely by Stripe. We store your Stripe customer ID and subscription status but never see or store your credit card number.
• Optional analytics data:If you enable "Share Usage Analytics" in Settings, we collect technical information such as screen dimensions, browser and device type, operating system, page load performance, and navigation patterns. This data is used to improve the product and is never shared with third parties. You can disable this at any time.

2. How We Use Your Information

• To provide, maintain, and improve ChapterFlow's reading and learning features.
• To track your progress, badges, streaks, and Insight Points balance.
• To personalize your experience based on your chosen preferences and learning style.
• To process payments and manage your subscription through Stripe.
• To detect and prevent abuse, including multi-account exploitation of free book slots.
• To send transactional emails related to your account (e.g., password resets, subscription confirmations).
• To improve product performance and user experience through opt-in analytics data.

3. Cookies and Local Storage

ChapterFlow uses a small number of cookies and browser local storage. For full details, see our Cookie Policy.

• Authentication cookies: Secure, httpOnly cookies for your session tokens, plus a client-readable session expiry cookie for proactive session management.
• Device cookie: A hashed device identifier for abuse prevention.
• Referral cookie: Tracks referral attribution when you sign up through a friend's link.
• Local storage: Your reading preferences, onboarding state, reader progress, theme selection, and chapter state are stored locally on your device for performance.

4. Third-Party Services

• AWS Cognito: Authentication and account management.
• Stripe: Payment processing and subscription management.
• AWS (DynamoDB, S3): Secure data storage and content delivery.

We do not sell your personal information to third parties. We do not use third-party advertising or tracking services.

5. Your Controls

You can manage your privacy preferences directly in ChapterFlow Settings:

• Usage analytics: Opt out of anonymous usage analytics at any time.
• Personalized recommendations: Toggle personalized book and chapter recommendations.
• Reading history: Choose whether your daily reading activity is tracked.
• Data export: Download all your data (reading history, notes, bookmarks, quiz results, badges, and more) in JSON, CSV, or Markdown format.
• Account deactivation: Temporarily disable your account from Settings. Your data is preserved and you can reactivate by signing back in.
• Account deletion: Permanently delete your account from Settings. You can also contact us at support@chapterflow.ca.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your reading progress and preferences are preserved so you can resume if you return.

If you deactivate your account, your data is preserved and your account becomes inactive until you sign back in. If you delete your account, it is marked as deleted and becomes non-functional. Backend data is retained for operational and legal compliance purposes but is no longer used in the product.

To request complete erasure of your data, contact us at support@chapterflow.ca.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), httpOnly secure cookies, hashed device identifiers, and server-enforced access controls. Payment data is handled entirely by Stripe and never touches our servers.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. Continued use of ChapterFlow after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at support@chapterflow.ca.