Privacy Policy

Draft for review. This draft describes what the software does today. It has not been reviewed by a lawyer and is not legal advice. Fill in every [bracketed] item and have it reviewed before launch.

Last updated: [date]

learnyou.me ("we", "us") is operated by [legal entity name], [address]. This policy explains what we collect when you use the learnyou.me website and mobile apps, why, and what choices you have. Questions: [privacy contact email].

What we collect

Account details. When you sign in with Apple or Google, we receive your email address, your name if the provider shares it, and an account identifier. We use Amazon Cognito to manage sign-in. If you choose Apple's "Hide My Email", we receive a relay address instead of your real one.

What you read and study. The books you schedule, the courses you create (the topic you type, your level, hours per week and finish date), the works in each course, and each sitting you mark as done: the date, the pages or minutes covered and the time spent. We use this to plan your daily reading and show your progress.

Your settings. Reading speed, listening speed, study style, your time zone (taken from your device so that "today" means your today), whether the morning letter and push reminders are on and the time you chose for each, and which of these you have already been offered, so we ask only once.

Push reminder devices. To send push reminders, we store an address for each phone or browser that can receive them, linked to your account. We collect it only while push reminders are on for your account. In a browser, this is the push subscription the browser creates (an address at your browser's push service and the keys used to encrypt messages to it). In the iPhone and Android apps, it is the push token Expo issues for the app on that phone. A phone or browser sends us its address when you turn reminders on there and allow notifications, and again, while reminders stay on, each time you sign in or open learnyou.me there and whenever the address changes. It does this only where notifications are allowed for learnyou.me, so turning reminders on in one place can also add a phone or browser where you allowed notifications before. While reminders are off, the app and the website never ask for notification permission or register an address, on every version of Android and iOS. We also store which kind of device it is (iPhone, Android or web) and when it was added or last updated.

Delivery records. To avoid sending the same letter or reminder twice, we record your account identifier and the date each one was sent, and delete that record after about three days.

Purchases. If you buy a course or subscribe, payment is handled by Stripe on the web and by Apple or Google through RevenueCat in the mobile apps. We do not receive or store your card details. We receive a record of what you bought, its status, and a customer or transaction identifier.

Technical data. Our servers keep standard logs (request time, the route called, response status and errors) for up to 30 days to run and secure the service. We do not use advertising trackers or sell analytics data.

The morning letter and push reminders

Both are off until you turn them on. We offer each once, in a card when you start using learnyou.me, and you can turn them on or off later in Settings, in the app or on the website.

The morning letter is an email listing that day's unfinished reading, sent at the time you choose, on days when there is reading left. It goes to the email address on your account, which is the one your sign-in provider gave us. If that is an Apple "Hide My Email" address, Apple forwards it to you. We send it through Amazon SES. It has no images, tracking pixels or tracked links, and we do not record whether you open it or click anything in it. If a letter bounces or is marked as spam, Amazon SES adds the address to a suppression list for our account and stops sending to it.

Push reminders are a short notification, once a day at the time you choose, on days when today's reading isn't done. The text can name what's left to read (for example "Today: Middlemarch, pp. 212–240 (30 min)"). On the mobile apps we send it to Expo's push service, which passes it to Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android). In a browser we send it to that browser's push service (run by Google, Mozilla, Apple or Microsoft, depending on the browser), encrypted so that only your browser can read it.

Why and on what basis. For these features, we use your email address and your push device records only to send the letter and reminders you turned on. Our basis for this is your consent, which you give by turning each one on and can withdraw at any time. [Confirm consent is the right lawful basis, rather than performance of the contract.]

How to stop them.

• The morning letter: turn it off in Settings, in the app or on the website, or use the "Stop these letters" link at the foot of any letter. Mail apps that support one-click unsubscribe can also turn it off directly.
• Push reminders: turn them off in Settings, in the app or on the website. This stops reminders to all your devices at once and deletes their push device records, as described under "How long we keep it". You can also block notifications for learnyou.me in your phone's settings or your browser's site settings.

How course generation works

When you create a course, the topic you type and your settings for it (level, hours, finish date, preferred formats and reading speed) are sent to Anthropic, which provides the AI model that suggests the reading list. We do not send your name or email with that request. To check that suggested books are real, their titles and authors are looked up in the Open Library catalogue; we do not send anything that identifies you.

Who we share data with

We share data only with the service providers that run learnyou.me, and only what each one needs:

We do not sell your personal information, and nothing you read or study is shown to other users.

How long we keep it

We keep your account and study history while your account is open. If you delete your account, we delete your data within [30] days, except purchase records we must keep for tax and accounting purposes ([7] years).

Your email address is part of your account, so we keep it until you delete your account, whether or not the morning letter is on. Turning the letter off stops the emails but doesn't delete the address. An address on the Amazon SES suppression list stays there after you delete your account. [Decide whether account deletion must also remove the address from the suppression list.]

We delete a push device's record when reminders are turned off on that device; when you turn them off somewhere else, each of your other phones and browsers deletes its own record the next time you open learnyou.me there. We also delete it when you sign out on that device or in that browser, when you delete your account (all your devices at once), and when the push service tells us the device is no longer registered, which we learn the next time we send it a reminder. If a phone or browser finds it is still registered while reminders are off, for example from an older version of the app, it removes that record the next time you open learnyou.me there. There is no time limit on a device record while reminders are on. [Decide whether to set a maximum retention period for device records that haven't been updated.]

Your choices and rights

You can change your settings at any time, turn the morning letter and push reminders off as described above, delete individual schedules, courses and logged sittings, and delete your account in Settings. You can also ask us for a copy of your data or to delete your account by contacting [privacy contact email]. [In-app export is planned.] Depending on where you live, you may have further rights, such as to correct your data or to object to processing; contact us to use them. [Add region-specific sections, e.g. GDPR lawful bases and the California notice, as advised.]

Children

learnyou.me is not directed at children under [13/16], and we do not knowingly collect their data.

Security

Data is encrypted in transit and at rest. Access is limited to the services that need it, and sign-in tokens on mobile are kept in the device's secure storage. The morning letter is sent encrypted (TLS) whenever the receiving mail server supports it; once delivered, it is stored by your email provider.

Changes

If we change this policy in a meaningful way, we will tell you in the app or by email before the change takes effect.