Privacy Policy

Aletay is operated by Sapiox MG, LLC ("Aletay," "we," "us"). This policy explains what we collect, why, and your choices. By using aletay.io or the Aletay app, you agree to this policy.

Information we collect

• Account information: your email address, display name, and password (stored only as a secure hash).
• Signing in with Google or Apple: if you choose "Continue with Google" or "Continue with Apple," we receive a limited set of information from that provider — your name, your email address, and a unique account identifier — solely to create and secure your Aletay account. We never receive your Google or Apple password. We request only your basic profile and email address; we do not request or receive access to your contacts, files, Gmail, Google Drive, Google Calendar, or any other Google service.
• Content you create: books, columns, drafts, descriptions, and related metadata you submit.
• Purchases: when you buy or sell, our payment processor handles your card details. We never see or store full card numbers.
• Usage data: basic logs (pages viewed, reading progress, device and browser type) used to operate and improve the service.
• Push notifications: if you enable notifications in the app, we store a device token so we can deliver alerts (such as reading reminders, new releases from authors you read, and live readings). You can turn notifications off at any time in your device settings.

How we use your information

To provide the service (accounts, reading, publishing, payments, print orders), to communicate with you about your account, to prevent fraud and abuse, and to meet legal obligations. We do not sell your personal information, and Aletay products are ad-free.

Information we receive when you sign in with Google or Apple is used only to authenticate you and to create or access your Aletay account. We do not sell Google user data, and we do not use it for advertising, to train artificial-intelligence or machine-learning models, or to determine creditworthiness or for any lending purpose. Aletay uses information received from Google APIs in adherence to the Google API Services User Data Policy, including the Limited Use requirements.

If you enable them, we use notifications only to alert you about your reading and the authors and events you follow. You can disable them any time in your device settings, and we never use them for advertising.

Service providers we share data with

We share only what each provider needs to do its job:

• Google — sign-in and authentication when you choose "Continue with Google."
• Apple — "Sign in with Apple" authentication, and delivering push notifications to your device through the Apple Push Notification service when you enable notifications.
• Stripe — payment processing and payouts.
• OpenAI — powering optional AI writing and narration features on content you submit for that purpose.
• Cloudflare — file storage and content delivery.
• Resend — transactional email (receipts, notifications).
• Lulu — printing and shipping physical books you order.

We do not sell or rent your personal information to anyone, and we do not share the information we receive from Google or Apple sign-in with third parties except as needed to operate the service or as required by law.

How we protect your data

We protect your information with encryption in transit (HTTPS/TLS) and encryption at rest, restricted internal access controls, and reputable infrastructure providers. Passwords are stored only as salted hashes, and we never store full payment card numbers.

Data retention

We keep your information for as long as your account is active or as needed to provide the service and meet legal, tax, and accounting requirements. You may request deletion of your account and associated personal data at any time — from within the app (Settings, then Delete account) or by emailing us. When you delete your account, we remove your personal data, including any Google or Apple sign-in identifiers associated with your account, except for records we are legally required to retain.

Your rights

You can access, correct, export, or delete your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Children

Aletay is not directed to children under 13, and we do not knowingly collect their personal information. Age-restricted content is labeled and gated so it does not reach minors.

Changes

We may update this policy. Material changes will be posted here with a new "last updated" date.

Contact

Questions about privacy? Email support@aletay.io.