1. Information We Collect
When you use read-pal, we may collect the following information:
- Account information: email address and name (provided during registration)
- Reading data: books you upload, reading progress, and reading session history
- Annotations: highlights, notes, bookmarks, and tags you create
- AI conversations: messages exchanged with the AI reading companion
2. How We Use Your Data
Your data is used solely to provide and improve the Service:
- To deliver reading features, annotations, and the AI companion experience
- To generate AI responses in the context of your reading material
- To build personal reading books and knowledge graphs from your annotations
- To track reading streaks, statistics, and flashcard review schedules
3. Data Storage
read-pal is a self-hosted, open-source application. Your data is stored on the server where you (or your administrator) deploy the application. Data is kept in a PostgreSQL database under your control. We do not operate a centralized cloud service — the instance you use is managed by whoever deployed it.
4. Third-Party Sharing
We do not sell, trade, or share your personal data with third parties. As an open-source, self-hosted application, your data stays on your server. The only external service involved is the AI language model provider (see section 9).
5. Tracking and Analytics
read-pal does not include any third-party tracking, analytics, or advertising SDKs by default. No Google Analytics, no Facebook Pixel, no telemetry. Your reading habits are your own.
6. Cookies
The Service uses a single HTTP-only cookie containing a JWT authentication token. This cookie is required to keep you logged in and is not used for tracking. No other cookies are set.
7. Data Retention
Your data is retained for as long as your account exists. If you delete your account, all associated data — including books, annotations, AI conversations, flashcards, and reading statistics — will be permanently removed from the database.
8. Your Rights
You have full control over your data:
- Export: Download all your data at any time via the Export API (JSON, CSV, Markdown, and other formats)
- Delete: Delete your account and all associated data permanently through Settings
- Self-host: Deploy read-pal on your own infrastructure for complete data sovereignty
9. AI Data Processing
When you chat with the AI reading companion, your messages and relevant book context are sent to the AI model provider (Zhipu AI / GLM API) for processing. The provider's own privacy policy applies to data they receive. Conversations are stored in your local database and are not used to train AI models by read-pal.
10. Contact
For privacy-related questions or data requests, please open an issue at github.com/pengdd1998/read-pal/issues.