Privacy Policy

Effective date: May 1, 2026

DoubleSpeak ("we", "our", "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

When you create an account or use the app, we may collect:

• Account information — your name and email address, provided directly or via Sign in with Apple / Google.
• Language preferences — the native and target languages you select.
• Reading progress — which books you have read and how far you have progressed.
• Purchase information — subscription status and transaction identifiers (processed by Apple; we do not store payment card details).
• Device information — device type, OS version, app version, and approximate location derived from your IP address, used for debugging and analytics.

2. How We Use Your Information

• Provide and personalise the app experience (sync progress, remember preferences).
• Process and manage subscriptions.
• Send transactional emails (e.g. password reset) — we do not send marketing emails without your consent.
• Improve the app through aggregated, anonymised analytics.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases (GDPR Article 6):

• Performance of a contract — account information, language preferences, reading progress, and transactional emails are processed to deliver the service you signed up for.
• Legitimate interests — device information and anonymised analytics are processed to maintain, debug, and improve the app. These interests do not override your privacy rights.
• Legal obligation — we may retain certain data where required by applicable law.

4. Where Your Data Is Stored

Your account data and reading progress are stored in Supabase, a cloud database provider. Data is stored on servers located in the United States. Supabase's privacy policy is available at supabase.com/privacy.

If you are located in the EEA or United Kingdom, please note that your data is transferred to the United States. Supabase relies on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers, providing appropriate safeguards in accordance with GDPR Chapter V.

5. Third-Party Services

We integrate with the following third-party services, each with their own privacy policy:

• Sign in with Apple — Apple, Inc. handles authentication. When you use this option, Apple may share your name and email (or a private relay address) with us. See Apple's Privacy Policy.
• Sign in with Google — Google LLC handles authentication and shares your name and email with us. See Google's Privacy Policy.
• RevenueCat — We use RevenueCat to manage in-app subscriptions. RevenueCat receives your app user identifier and purchase history. See RevenueCat's Privacy Policy.

6. Cookies and Tracking Technologies

This website does not use advertising or tracking cookies. The app itself uses secure local storage to maintain your authenticated session with Supabase. No cross-site tracking or advertising identifiers are used.

If you access the app via a web browser in the future, essential session cookies may be set to keep you logged in. These cookies are strictly necessary for the service to function and are not used for advertising.

7. Sale of Personal Information

We do not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes. We do not sell personal information as defined under the California Consumer Privacy Act (CCPA) or any other applicable law.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law.

9. Deleting Your Account

You can request account deletion at any time by emailing support@doublespeakapp.com. We will delete your account and associated personal data within 30 days of your request. Note that deleting your account does not automatically cancel an active subscription — you must cancel separately via the App Store.

10. Children's Privacy

DoubleSpeak is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Under the California Consumer Privacy Act, we do not sell or share personal information of any users, including those between the ages of 13 and 16, and we do not knowingly target minors for data collection beyond what is necessary to operate the app.

11. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (see Section 9).
• Object to or restrict certain processing.
• Data portability — receive a copy of your personal data in a structured, machine-readable format and transmit it to another controller (GDPR Article 20).
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@doublespeakapp.com.

12. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

• Right to know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to delete — You may request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to opt out of sale — We do not sell your personal information. No opt-out action is required.
• Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised a privacy right.

To submit a verifiable CCPA request, contact us at support@doublespeakapp.com. We will respond within 45 days.

13. Business Transfers

If DoubleSpeak is involved in a merger, acquisition, asset sale, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email or an in-app notice before your personal information is transferred and becomes subject to a different privacy policy.

14. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (HTTPS/TLS) and stored using industry-standard security practices provided by Supabase. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, by an in-app notification.

16. Contact

Questions or concerns? Email us at support@doublespeakapp.com.