# Privacy policy

> Your books are stored on your device. When you use ChatGPT assistance, the selected text and relevant context are sent directly to OpenAI. This page explains the distinction and your choices.

Canonical page: https://reader.brighteng.org/privacy/
Updated: 2026-09-28

## Who is responsible

Reader and this companion website are provided by **Sihan Teng**, under the **BrightEng** name. This policy covers the Reader app and `reader.brighteng.org`. For questions or privacy requests, use the developer’s [published private-message contact on X](https://x.com/brightengkk). The developer’s public profile is at [me.brighteng.org](https://me.brighteng.org/about/).

## Books, notes, and reading preferences

When you import a PDF or EPUB, Reader copies the file into the app’s storage on your device. It stores library details such as the title, author, cover, reading position, notes, selected excerpts you save with notes, bookmarks, and reading preferences. Older imports may retain a reference to a file you selected in Files instead of a separate copy.

These records let Reader open your books, remember your place, and show your notes. Ordinary reading does not send your library to a BrightEng server. Reader does not require a BrightEng account.

Reader uses Apple’s storage and device services. Device backups and files you obtain from iCloud Drive or another file provider are governed by your Apple or file-provider settings. Where iCloud synchronization is enabled in a supported app configuration, reading metadata may be processed through your Apple account. Reader does not currently provide automatic cross-device transfer of imported book files. Do not rely on Reader as your only backup.

## When you choose ChatGPT assistance

ChatGPT is Reader’s only connected online AI provider. Signing in is optional for ordinary reading. Authentication takes place on OpenAI’s website; Reader does not ask you to enter your OpenAI password into the app.

Before the first online reading action, Reader explains what it will share and asks you to allow reading content sharing. You can choose **Not now** and continue reading without it. Your choice is stored in local app preferences, separately from your ChatGPT login. Review or withdraw it in **Settings → Privacy & Support**. Withdrawing permission blocks new reading requests; it does not remove information OpenAI has already received. A materially changed disclosure requires a new choice.

When you request an explanation, translation, or definition, Reader sends a text request directly from your device to OpenAI. Depending on the action, it can include:

- The selected word or passage and surrounding text needed to understand it.
- The book title and reading location for an explanation.
- Relevant excerpts from earlier pages or chapters for an explanation.
- Your translation language, chosen model, and instructions describing the requested task.
- Account authorization information and, when supplied by your account, an account identifier and processing-region preference.

Reader sends selected and retrieved text, rather than uploading the original book file as an attachment. OpenAI also receives the network information necessary to handle a connection, such as your IP address. The response is displayed in Reader. A connection test sends a short test prompt; loading the model list also contacts OpenAI.

Requests ask OpenAI not to store a response using the request’s `store: false` setting. **That setting is not a promise of zero retention or exclusion from model training.** OpenAI’s processing, retention, account controls, and applicable terms determine how it handles information. Read [OpenAI’s privacy policy](https://openai.com/policies/privacy-policy/) and review your account’s data controls before sending sensitive material.

You can avoid online processing by not invoking ChatGPT actions and by disconnecting your account. If you use an available Apple on-device processing mode in the app, that route processes the request on your device instead of sending it through Reader’s ChatGPT connection. The website’s reading example uses preset text and does not contact an AI provider.

## Account credentials

Reader stores OpenAI access and refresh tokens in the device’s Keychain so you can remain connected. The app marks these credentials as device-only and does not synchronize them through iCloud Keychain or put them in reading notes, the reading database, or website storage.

Choose **Disconnect account** in Reader’s AI settings to remove the locally stored ChatGPT credentials. This does not delete your OpenAI account, cancel a subscription, or revoke a grant on OpenAI’s servers. Use OpenAI’s account controls for those actions. Disconnect before uninstalling if you want to remove the app’s saved credentials; uninstalling an app should not be relied on to clear Keychain items.

## System search

Reader submits book metadata and note text, including saved excerpts, to Apple’s on-device Spotlight index so you can find them in system search. These are not public web-search listings. You can manage Reader’s visibility in system search through your device’s settings. Removing a note or book triggers removal of the associated search entries, subject to the system completing the update.

## Website visits and support messages

This website is a static site hosted on Cloudflare Pages. Its application code does not use advertising trackers, analytics scripts, marketing cookies, or a visitor account system. Fonts and images are served with the site. Cloudflare processes network and request information, such as IP addresses, requested URLs, and browser information, to deliver and protect the website. See [Cloudflare’s privacy policy](https://www.cloudflare.com/privacypolicy/).

If you contact the developer, the contact platform processes the message under its own terms and privacy policy. We use the information you choose to send to answer your request and resolve the issue. Include only what is necessary; never send passwords, access tokens, or entire copyrighted books. We do not sell your personal information or use your books or support messages for advertising.

## Retention and deletion

- **Library files:** use a book’s Delete action to remove its library entry and the app-owned imported file. An original file in Files, a file-provider account, or a backup is separate and is not deleted by Reader.
- **Notes and bookmarks:** delete these separately in the Notebook. Deleting a book does not automatically erase every saved note or bookmark about it.
- **Preferences and cached files:** these can remain in the app’s storage until you delete the app’s data. Offloading the app retains its data. Device backups and any Apple-managed cloud copies have separate controls and retention.
- **ChatGPT credentials:** use Disconnect account as described above. Information already processed by OpenAI is subject to its controls and policy.
- **Support correspondence:** we keep it for as long as needed to handle the request and any related security, dispute, or legal obligations. You can request deletion through the private contact channel. The contact platform may retain its own copies under its policy.

The developer cannot remotely inspect or delete files held only on your device. We can explain how to remove local data and handle requests concerning information actually held by us. Where needed, we may ask for proportionate information to verify that a request comes from the person concerned.

## Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information, object to or restrict certain processing, withdraw consent, or complain to a relevant data-protection authority. Contact the developer privately to exercise rights concerning information held by us. For data held by Apple, OpenAI, Cloudflare, or your contact platform, their own request processes may also apply.

We use information to provide the features you request, respond to support inquiries, maintain security, and meet applicable legal obligations. Optional online AI processing is initiated by your choice to use that feature. Withdrawing that choice does not undo processing that has already occurred. Service providers may process data outside your country under their applicable safeguards and policies.

## Children and changes

Reader is not directed specifically at children. Online AI use must meet the provider’s age and account requirements. A parent or guardian who believes a child has sent personal information to the developer can contact us for assistance.

We will update this page when our practices change and revise the date above. Material changes may also be communicated in the app or release information. Flashcards and learning are not available yet; any new data practices will be described before those features are introduced.
