Privacy Policy

Last Updated: March 23, 2026

1. Introduction

Innesto is a language learning reader app committed to protecting your privacy. This policy explains what data we handle and how. Our core principle is simple: your data stays on your device.

2. Information We Collect

2.1 Locally Stored Data (on your device only)

The following data is stored exclusively on your device and is never sent to our servers:

• Saved vocabulary (words, phrases, translations, context sentences)
• Review history and spaced repetition scheduling data
• Reading progress and browsing history within the app
• App preferences and settings

2.2 Account Information (Premium only)

If you sign up for a Premium account via OAuth (Google or Apple), we collect:

• Email address
• Display name (from your OAuth provider)
• Authentication tokens

2.3 Premium Cloud Sync Data

If you enable cloud sync (Premium feature), the locally stored data listed in 2.1 is synced to our servers (Cloudflare D1) to enable multi-device access.

2.4 Data We Never Collect

We do not collect:

• Location data
• Contact information
• Device identifiers or advertising IDs
• Data from other applications
• Analytics or usage tracking data

3. How We Use Your Information

• Providing core app functionality (reading, translation, vocabulary review)
• Authenticating Premium users
• Syncing data across devices (Premium)
• Processing subscription payments via RevenueCat and App Store / Google Play

4. Translation and LLM Services

Free tier: Translations are performed by your device's built-in OS translation engine (Apple Translation / ML Kit). No text is sent to our servers.

Premium tier: When you use the detailed explanation feature, selected text is sent to a third-party LLM API for processing. This text is not stored on our servers after the response is delivered.

5. Data Sharing

We do not sell, trade, or rent your personal information. Data is shared only with:

• Cloudflare: Cloud infrastructure for Premium sync and authentication
• RevenueCat: Subscription management and payment processing
• Apple / Google: In-app purchase processing
• LLM API provider: Text processing for Premium detailed explanations

6. Your Rights

You have full control over your data:

• Local data: Delete anytime by clearing app data or uninstalling the app
• Account deletion: Request deletion of your account and all cloud data by contacting us. Data will be removed within 7 days.
• Data export: Export your vocabulary data from within the app

7. Data Security

• Local-first architecture minimizes data exposure
• All network communication uses HTTPS encryption
• OAuth tokens are stored securely on your device
• Cloud data (Premium) is stored in encrypted Cloudflare infrastructure

8. Children's Privacy

Innesto is not intended for users under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

10. Contact

If you have questions about this privacy policy, contact us at:
support@innesto.app