Privacy policy.

Responsibility for your information

The tenant library provider determines how its library service uses personal information. The application owner and infrastructure suppliers process information for their respective operational roles. The responsible entities and contact details appear with this notice. Appropriate processor arrangements are required. This notice does not exempt either party from obligations imposed by law.

Information processed

Account information includes your name, email, date of birth, mobile number, profession, gender, how you heard about the library and selected subjects. Verification codes, authentication challenges, sessions and any enrolled authenticator are processed to protect access. Optional identity providers supply the identity information authorized during sign-in.

Reading records include saved books, shelves, page positions, bookmarks and private notes. Membership records include the tier, amount, payment references, status and access period. Support messages, notification preferences, administrative audit events and service diagnostics are also processed. Hosting and abuse-prevention systems may process network and browser information such as IP addresses and request identifiers.

The library does not receive full card credentials through the hosted payment flow. The payment provider handles payment instruments under its own notice. Do not put payment credentials or other sensitive secrets in support messages.

Purposes

We use this information to create and verify accounts, deliver reading features, check entitlements, process subscription records, provide support, send operational notices, prevent abuse, diagnose faults and meet applicable legal obligations. Reading records and notes are not public community content.

The library's use of data must be limited to the purposes explained to you and any lawful additional basis. Marketing choices should be separate from essential service messages. Personal information is not sold by the library as part of this service.

Service providers and disclosures

Depending on tenant configuration, providers may include hosting and database services, an identity provider or Google sign-in, an SMTP mail provider, a payment gateway such as Razorpay and Google reCAPTCHA. They receive information necessary for their functions and may process it in other locations. You may request details of the vendors, processing locations and relevant safeguards from the contact below.

Google services may process browser or device information under Google's privacy policy. Legal disclosures may be made where required or permitted by law, with access limited to the relevant purpose. Neither party claims immunity for unlawful disclosure.

Cookies and browser storage

The application uses session/security cookies and browser storage or caching needed for authentication and the reading experience. It does not inspect arbitrary personal files on your device. Online reading still transfers document data to your browser. Third-party identity, payment and anti-abuse services may use their own cookies or telemetry; a blanket promise of no cookies, no local storage or no third-party tracking would be inaccurate.

Security

Production access uses HTTPS and tenant-aware authorization and session controls. Administrative actions are audited and selected credentials are protected. These measures reduce risk but cannot guarantee absolute security, uninterrupted operation or encryption of every database, backup and log. The provider is responsible for its hosting, access restrictions, patching, backup and retention configuration and for legally required incident response.

Retention and requests

Information is retained only as needed for the explained purposes, account operation, legal records, dispute handling and security, then deleted or anonymized where appropriate. Applicable retention criteria include statutory accounting requirements, unresolved disputes and security investigations; backup records may persist until their retention cycle ends. Ask the contact below for the retention arrangements that apply to your information.

Use account controls to edit supported profile fields, manage sessions and export or remove supported reading records. Contact support to request access, correction, erasure, withdrawal of consent or grievance review as applicable. Withdrawal can affect features dependent on that processing, but does not authorize retention without a lawful basis or remove mandatory rights. Legal recordkeeping requirements may limit immediate erasure; the provider should explain any refusal and available escalation route.

Children

Children's use requires the consent and safeguards applicable to the service and law. The provider must implement a suitable age and parental-consent process where required, rather than relying on this notice alone. Do not intentionally collect children's data beyond the permitted purposes or use it in prohibited ways. Contact support if a child's information has been submitted without appropriate authority.

Policy changes and contact

This notice describes the published version shown above. New purposes or material changes require appropriate notice and, where necessary, renewed consent. Existing consent is not deemed to cover every later edit. Use the public privacy and grievance contact below or Library support.