BriefBook — Privacy Policy

Effective Date: April 16, 2026 · Last Updated: April 16, 2026

1. Introduction

Welcome to BriefBook ("we," "us," or "our"). BriefBook is a gamified book-summary mobile application available on Android ("the App"). We respect your privacy and are committed to protecting the personal data you share with us.

This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and what rights you have regarding your data. By creating an account or using the App, you agree to the practices described in this policy.

BriefBook is developed and operated by BriefBook, an individual developer based in Brazil. If you have any questions or concerns, please contact us at hello@mybriefbook.com.

2. Information We Collect

2.1 Account Information

When you create an account via Firebase Authentication, we collect:

Email address — used to identify your account, send transactional emails (e.g., password resets), and communicate important updates.
Display name — the name you choose to appear within the App (e.g., on your reading profile).
Authentication provider data — if you sign in via Google, we receive your name, email, and profile picture URL from Google. We do not receive or store your Google password.

2.2 Usage & Reading Data

As you use BriefBook, we collect data related to your in-app activity:

Reading progress — which book summaries you have read or completed.
XP, streaks, and achievements — your experience points, daily reading streaks, completed quests, and milestones.
Owl collection — which owl characters you have unlocked, including Founding and Beta owls.
Preferences — your selected themes, language preferences, and reading settings.

2.3 Subscription & Payment Data

BriefBook offers optional paid subscriptions (monthly and yearly plans) processed entirely through Google Play Billing. We do not collect, process, or store your credit card number, billing address, or any direct payment credentials.

What we do store:

Subscription status — whether you are on a free, monthly, or yearly plan.
Subscription period — start and expiration dates, to manage access to premium features.
Google Play purchase token — an anonymous identifier used to verify your subscription with Google's servers.

2.4 Analytics & Diagnostics

We use Firebase Analytics and Firebase Crashlytics (provided by Google) to understand how the App is used and to identify and fix crashes:

Analytics events — anonymized data such as screen views, feature usage frequency, session duration, and user engagement patterns.
Crash reports — device model, OS version, stack traces, and app state at the time of a crash.
Device identifiers — Firebase may collect anonymous instance IDs and advertising identifiers. These are not linked to your personal identity.

2.5 Data We Do NOT Collect

BriefBook does not collect:

Your precise or approximate location
Your contacts, call logs, or SMS messages
Photos, files, or media from your device
Microphone or camera data
Health, fitness, or biometric data

3. How We Use Your Information

Data	Purpose	Legal Basis
Email & name	Account creation, login, password recovery, and transactional communications	Contract performance
Reading progress & stats	Powering your gamified experience — XP, streaks, quests, owl unlocks, and personalized recommendations	Contract performance
Subscription status	Managing access to premium content and features	Contract performance
Analytics events	Understanding feature usage, improving the App, and prioritizing development	Legitimate interest
Crash reports	Diagnosing bugs, improving stability, and resolving technical issues	Legitimate interest

We do not sell, rent, or trade your personal data to third parties for advertising or marketing purposes.

4. Third-Party Services

BriefBook integrates with the following third-party services, each of which has its own privacy policy:

Service	Provider	Purpose	Privacy Policy
Firebase Authentication	Google LLC	User sign-up, login, and account management	Firebase Privacy
Cloud Firestore	Google LLC	Storing user data (reading progress, preferences, owl collection)	Firebase Privacy
Firebase Analytics	Google LLC	Anonymized usage analytics	Firebase Privacy
Firebase Crashlytics	Google LLC	Crash reporting and diagnostics	Firebase Privacy
Google Play Billing	Google LLC	Processing subscription payments	Google Privacy

All Firebase services are hosted on Google Cloud infrastructure. Data may be processed in any country where Google operates data centers. Google complies with applicable data protection regulations, including GDPR Standard Contractual Clauses for international transfers.

5. Data Storage & Security

Your data is stored in Google Cloud Firestore using Firebase's security rules to ensure that each user can only access their own data. We implement the following security measures:

Encryption in transit — all data transmitted between the App and our servers is encrypted using TLS/SSL.
Encryption at rest — data stored in Firestore is encrypted at rest by default (Google-managed encryption keys).
Firestore security rules — server-side rules ensure users can only read and write their own documents.
Firebase Authentication — access tokens are short-lived and automatically refreshed.

While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

Account data — retained until you delete your account.
Reading progress & stats — retained until you delete your account, so you never lose your progress.
Subscription data — retained for the duration of your subscription plus any legally required retention period for financial records.
Analytics data — Firebase Analytics retains event data for 14 months by default. Crash data is retained for 90 days.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you.
Correction — request that we correct inaccurate or incomplete data.
Deletion — request that we delete your personal data (you can also delete your account directly in the App via Profile → Identity → Close account).
Portability — request your data in a structured, machine-readable format.
Restriction — request that we restrict processing of your data under certain circumstances.
Objection — object to processing based on legitimate interest (e.g., analytics).
Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@mybriefbook.com. We will respond within 30 days.

Brazilian Users (LGPD)

If you are located in Brazil, you have additional rights under the Lei Geral de Proteção de Dados (LGPD), including the right to request information about public and private entities with whom your data has been shared. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

8. Children's Privacy

BriefBook is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that a user is under 18, we will take steps to delete their account and associated data promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@mybriefbook.com.

9. How to Delete Your BriefBook Account

You can request deletion of your BriefBook account and all associated data at any time:

Open BriefBook on your Android device.
Go to Profile → Identity.
Tap Close account and confirm.

If you no longer have access to the app, email hello@mybriefbook.com from the address registered to your account and we will process the deletion within 30 days.

What is deleted

Your profile (display name, username, email, avatar selection)
All listening progress, streaks, points, badges, owls, and titles
Your notes, quotes, and personal to-dos
Friend connections and activity feed entries
Push notification tokens
Your Firebase Authentication record

What is retained

Aggregated and anonymized analytics (cannot be linked back to you), retained per Google Analytics retention policy.
Crash reports referencing your prior installation, retained for up to 90 days, used solely to improve app stability. These do not contain personal data.
Records required by law (e.g., billing/tax records related to subscription purchases), retained per applicable jurisdiction.

Note: Active subscriptions should be cancelled through Google Play before deleting your account. Deleting your BriefBook account does not automatically cancel your Google Play subscription.

10. Advertising

BriefBook does not display third-party advertisements within the App. We do not share your data with advertising networks or ad exchanges.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the App or via email. The "Last Updated" date at the top of this page reflects when the policy was most recently revised.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

BriefBook
Email: hello@mybriefbook.com
Location: Brazil