🔒

Privacy Policy

Effective Date: September 23, 2026

Last Updated: September 23, 2026

1. Introduction

Welcome to Sumora. We respect your privacy and are committed to protecting your personal data. This Privacy Policy governs your use of the Sumora mobile application (available on iOS and Android) and any associated web endpoints, cloud services, and APIs (collectively, the "App" or "Services").

Please read this policy carefully. By installing, creating an account, or using the App, you acknowledge that you have read and understood how we collect, process, store, and protect your information.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected through device permissions, and information automatically collected through your use of the App.

A. Information You Provide Directly

• Account Registration & Authentication: When you sign up or log in using Google Sign-In or Apple Sign-In, we receive your name, email address, profile picture URL (if provided by the authentication provider), and a unique user identifier (UID). If you choose guest browsing, an anonymous identifier is assigned to preserve your session.
• Profile Customization: You may choose to customize your profile by providing a display name and uploading a profile picture.
• Reading & Learning Activity: We record your reading progress, book summaries viewed, completed chapters, favorites, bookmarks, personal reading streaks, insights count, and audio listening progress.
• User Contributions & Feedback: We collect content you voluntarily submit, including reports on book content, bug reports, and correspondence with our support team.

B. Device & Hardware Permissions

To deliver advanced interactive features, the App requests specific device permissions. You can grant or revoke these permissions at any time in your device settings:

• Microphone (RECORD_AUDIO / NSMicrophoneUsageDescription): Required to participate as an active speaker in live Book Discussion Voice Rooms and record optional voice notes. Audio is processed and transmitted in real-time via Agora RTC. We do not passively record your microphone, nor do we store voice room audio unless you explicitly save a personal audio note.
• Camera (CAMERA / NSCameraUsageDescription): Used exclusively to scan book ISBN barcodes to instantly locate summaries, and optionally to take a photo for your user profile.
• Photo Library (READ_EXTERNAL_STORAGE / NSPhotoLibraryUsageDescription): Used only when you choose to upload an existing image from your device as your profile avatar.
• Push Notifications (POST_NOTIFICATIONS): With your consent, we use Firebase Cloud Messaging (FCM) to send reading reminders, streak milestones, voice room invitations from friends, and service updates.
• Bluetooth & Audio Routing (BLUETOOTH / MODIFY_AUDIO_SETTINGS): Used to route audio seamlessly to Bluetooth headphones, earphones, or external speakers during voice room discussions and text-to-speech audio playback.

C. Information Collected Automatically

• App Tracking Transparency (ATT) & Advertising Identifiers: On iOS devices (version 14.5 and later), we present Apple's App Tracking Transparency prompt. If you grant permission, we collect your Identifier for Advertisers (IDFA). On Android devices, we collect the Google Advertising ID (GAID), subject to your device settings.
• Marketing & Install Attribution (TikTok & AppsFlyer): We use the TikTok Business SDK and AppsFlyer to understand how users discover our app, attribute ad campaigns, measure installs, and track key conversion events (such as CompleteRegistration, InitiateCheckout, CompletePayment, and ViewContent). These services collect device identifiers, IP addresses, operating system version, and campaign referral sources.
• Usage Analytics (Firebase Analytics): We collect anonymized interaction data such as screens visited, buttons pressed, dwell time on book cards, and summary completion rates to continually optimize our user experience.
• Diagnostic & Crash Data (Firebase Crashlytics): To maintain app stability, we collect diagnostic crash reports, stack traces, device model, operating system version, available storage, and memory status at the time of an application crash.
• Deep Link & Referral Tracking: When you open a deep link or referral link (e.g., inviting friends to read or join a voice room), our servers process the link parameters. For referral fraud prevention, we use SHA-256 hashed IP addresses and user-agent strings. Raw IP addresses are not stored.

D. Subscription & Financial Data

We use RevenueCat to manage in-app subscriptions and credit purchases. RevenueCat processes transaction identifiers, entitlement status, product IDs, and purchase timestamps. Sumora does not collect, receive, or store your credit card or payment account details. All payment transactions are handled directly and securely by the Apple App Store (In-App Purchases) or Google Play Store (Google Play Billing).

3. AI-Powered Content & Features

Sumora integrates advanced Artificial Intelligence, including Google Gemini models, to synthesize books, generate chapter overviews, and power interactive book dialogue:

• Data Processing for AI: When you view or request a book summary, the book title, author, and relevant public text excerpts are transmitted to our AI processors. We do not share your personal account information (such as your name, email, or profile photo) with AI service providers.
• Informational Nature: AI-generated summaries and insights are created for educational, research, and informational convenience. They are designed to complement, not replace, reading original literary works. While we employ content filtering and moderation, AI outputs may occasionally contain inaccuracies. Users may report any inappropriate or inaccurate content using the in-app "Report" tool.

4. How We Use Your Information

We use the data we collect for the following legitimate purposes:

• Service Delivery: To generate and deliver book summaries, audio narration, and interactive voice rooms.
• Account Administration: To authenticate your identity, manage your subscription status, and sync reading progress across devices.
• Personalization: To recommend relevant books, categories, and discussion rooms based on your reading history and preferences.
• Communications: To send important account alerts, security notices, and opted-in push notifications.
• Advertising & Attribution: To measure advertising effectiveness, attribute install channels, and prevent referral abuse.
• App Health & Security: To detect and resolve crashes, defend against fraudulent activity, and enforce our Terms & Conditions.

5. Third-Party Service Providers

We partner with trusted third-party service providers who process data on our behalf under strict confidentiality agreements. The table below outlines our primary partners and their functions:

6. App Tracking Transparency (ATT) & Ad Choices

We respect your right to control how your data is used for advertising and tracking:

• iOS Users: On iOS 14.5 and later, we request permission via Apple's App Tracking Transparency prompt before collecting your IDFA or sharing in-app events with TikTok or AppsFlyer for tracking purposes. You can change your choice at any time by visiting iOS Settings > Privacy & Security > Tracking and toggling permissions for Sumora.
• Android Users: You can manage or delete your Google Advertising ID by navigating to Settings > Google > Ads on your Android device.
• Push Notifications: You can disable push notifications at any time in the app's settings or your device's notification management menu.

7. Data Storage, Security & International Transfers

Your data is stored securely using Google Cloud / Firebase data centers with enterprise-grade physical and electronic security. All data transmitted between the App and our backend servers is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3/HTTPS). Data at rest is encrypted using AES-256.

Because our service providers operate globally, your information may be transferred to and processed in countries outside your country of residence (such as the United States). Where applicable, transfers are conducted under recognized legal safeguards, including Standard Contractual Clauses (SCCs).

8. Data Retention & Account Deletion

We retain your personal data for as long as your account remains active or as needed to provide our services. You have the right to delete your account and personal data at any time:

Upon account deletion, your authentication record, personal profile, reading bookmarks, and streak history will be permanently deleted from our primary databases within 30 days. Anonymized, aggregated analytics data that does not identify you may be retained for reporting and compliance.

9. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have specific legal rights regarding your personal information:

A. European Economic Area (EEA) and United Kingdom (GDPR)

If you are located in the EEA or UK, our legal bases for processing your data under the General Data Protection Regulation (GDPR) are:

• Performance of Contract: To provide summaries, manage accounts, and process subscriptions.
• Consent: For microphone, camera, photo library permissions, push notifications, and advertising tracking.
• Legitimate Interests: To improve app performance, prevent fraud, and maintain security.

Your rights include: the right to access, rectify, or erase your personal data; the right to data portability; the right to restrict or object to processing; and the right to lodge a complaint with your local Data Protection Authority.

B. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• Right to Know & Access: You can request details about the categories and specific pieces of personal information we have collected over the past 12 months.
• Right to Delete: You can request deletion of your personal data, subject to certain legal exceptions.
• Notice of Right to Opt-Out of Sale or Sharing: We do not sell your personal data for monetary compensation. However, our use of third-party advertising SDKs (such as TikTok and AppsFlyer) may constitute "sharing" for cross-context behavioral advertising. You can opt out by declining tracking in the iOS ATT prompt or emailing us.
• Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

10. Children's Privacy

Sumora is not intended for use by children under the age of 13 (or under 16 in certain European jurisdictions). We do not knowingly collect personal data from children under these ages. If we discover that a child has provided us with personal information without parental consent, we will promptly delete that information. If you believe a child has provided us with personal data, please contact us at technext96@gmail.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new app features, or regulatory requirements. When changes are made, we will update the "Last Updated" date at the top of this page. In the event of material changes, we will provide additional notice through the App or via email.

12. Contact Us

If you have any questions, concerns, requests, or grievances regarding this Privacy Policy or our data practices, please contact our Data Privacy team at:

Developer / Organization: TechNext
App Name: Sumora (Summerizer)
Email: technext96@gmail.com
Website: https://sumora.app