Privacy Policy

FluttX Reader ("we", "our", or "us") is an EPUB reader application developed by the FluttX team. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our mobile application FluttX Reader (the "App"). Please read this policy carefully. If you disagree with its terms, please discontinue use of our App.

We operate on a privacy-first, offline-first principle. The App is fully functional without an internet connection. Cloud-based features (Cloud Sync, analytics, crash reporting) are optional or operate transparently in the background to improve your experience. We never sell your personal data.

We collect information only to the extent necessary to provide and improve the App. Below is a detailed breakdown of what we collect and why.

We use the information we collect for the following purposes:

• Provide core app functionality — reading books, tracking progress, managing your library
• Cloud Sync — synchronizing your reading data across multiple devices when you opt in
• App improvements — analyzing usage patterns to prioritize features and fix usability issues
• Bug fixes — diagnosing and resolving crashes and errors using Crashlytics reports
• Push notifications — sending reading reminders and important app updates you have subscribed to
• Subscription management — verifying your premium subscription status to unlock features
• Customer support — responding to support requests you submit via email

We do not use your data for targeted advertising, profiling, or any purpose beyond what is listed above.

FluttX Reader uses several Firebase services provided by Google LLC. Firebase acts as a data processor on our behalf under Google's standard data processing terms. The Firebase services we use are:

Data processed through Firebase is subject to Google's Privacy Policy, available at policies.google.com/privacy. Firebase stores data on Google Cloud infrastructure, primarily in the United States, with compliance for global data protection regulations.

FluttX Reader offers premium subscriptions, themes, and reading atmospheres for purchase through Google Play Billing. All payment processing is handled entirely by Google Play.

We do not collect, process, or store any payment information — including credit card numbers, billing addresses, or bank details. All financial transactions occur within Google's secure payment infrastructure.

For subscription and purchase records, we receive a purchase token from Google Play which allows us to verify your entitlement to premium features. This token does not contain any payment details.

For questions about billing, refunds, or purchase history, please refer to your Google Play account or contact Google Play support.

Cloud Sync is an optional premium feature that allows you to back up and synchronize your reading data across multiple devices.

• Opt-in only: Cloud Sync is disabled by default. You must explicitly enable it and sign in with your Google account.
• Your data stays yours: All data synced to Cloud Firestore belongs to you. You can delete your cloud data at any time from within the App.
• Offline-first: The local SQLite database on your device is always the source of truth. Cloud Sync is a backup layer — the App works fully without it.
• Data security: Firestore security rules enforce that only your authenticated account can read or write your data. No other user or FluttX employee can access your synced reading data.
• Backup files: When you create a local backup file (.fluttxbackup), it is stored on your device. If you upload it to Cloud Storage, it is protected by the same security rules.

With your permission, FluttX Reader may send push notifications to remind you of your reading goals, streaks, and app updates.

• Notification permission is requested at an appropriate moment during onboarding and is entirely optional.
• You can withdraw notification permission at any time in your device Settings under Apps > FluttX Reader > Notifications, or in the App's Settings > Notifications.
• We do not send promotional or advertising notifications to third parties. Notifications are sent only on your behalf (e.g., your own reading reminders).
• Your FCM push token is stored only for the purpose of delivering notifications to your device and is not shared with any third parties.

We retain different categories of data for different periods based on the purpose for which they were collected:

• Local data (books, progress, notes, highlights) — stored on your device indefinitely until you delete it or uninstall the App.
• Cloud Sync data — retained in Firebase Firestore as long as your account is active. Deleting your account or disabling Cloud Sync removes your data from our servers.
• Crash reports — retained by Firebase Crashlytics for 90 days from the date of the crash.
• Analytics events — retained by Firebase Analytics per Google's standard retention periods (up to 14 months).
• Account information — retained while your account is active. Deleting your account removes your Firebase Auth record and associated Firestore data within 30 days.

To request deletion of your data, contact us at [email protected].

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — You can update or correct inaccurate personal information through your Google account settings or by contacting us.
• Right to Erasure — You can request deletion of your personal data. You may delete your Cloud Sync data directly from within the App, or contact us to request full erasure.
• Right to Data Portability — You can export your local reading data using the built-in backup export feature (Settings > Backup & Restore > Export Backup).
• Right to Opt Out of Analytics — You can disable Firebase Analytics collection in Settings > Privacy > Data & Analytics.
• Right to Withdraw Consent — You may withdraw consent for Cloud Sync at any time by signing out in Settings > Account > Sign Out.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

FluttX Reader is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and you believe your child under 13 has provided personal information to us through the App, please contact us at [email protected]. We will promptly delete such information from our records.

If you are under 18, please review this policy with a parent or guardian before using Cloud Sync or making in-app purchases.

We take the security of your data seriously and implement appropriate technical and organizational measures:

• Encryption in transit — All data transmitted between the App and Firebase servers is encrypted using TLS/HTTPS.
• Encryption at rest — Data stored in Firebase Firestore and Cloud Storage is encrypted at rest by Google Cloud.
• Firestore security rules — Our Firestore database is protected by rules that restrict each user to accessing only their own data.
• Secure storage — Subscription entitlement data is stored using Android's Keystore-backed secure storage.
• No password storage — We do not store passwords. Authentication is delegated entirely to Google Sign-In.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will notify you by:

• Updating the "Last updated" date at the top of this page
• Displaying an in-app notification on the next launch after the change
• For significant changes, sending a push notification (if you have enabled them)

Your continued use of the App after the effective date of any changes constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.