Lox — Privacy Policy

Last updated: 25 September 2026

Lox is built so that as little of your data as possible ever leaves your device. This page says exactly what does, and why.

1. Who is responsible

The data controller is [OWNER: registered legal entity name], [OWNER: registered address], Croatia. Contact: [OWNER: contact email].

2. What stays on your device

• Your books. Books you import are stored and read on your device. We do not upload, store or keep copies of your books on our servers.
• Your own AI API key. If you configure your own provider key instead of subscribing, that key is stored only on your device and requests go directly from your device to that provider — the key never reaches our servers.
• Reading state and settings. Positions, bookmarks and preferences stay local.

3. What we process on our servers

• Account data — your email address, a hash of your password (never the password itself), and, if you sign in with Google, the email and identifier Google provides. Used to operate your account, verify your email and reset your password.
• Subscription state — whether your account has an active Premium entitlement, reported to us by RevenueCat from Google Play. Payment itself is handled entirely by Google Play; we never see your card or bank details.
• Premium question-answering — when you ask a question in Premium mode, your question and short excerpts of the relevant book pass through our servers to the AI provider generating the answer, and the provider's response passes back. This content is processed transiently to serve the request; we do not store your questions, excerpts or answers, and we do not use them to train anything. We keep per-account usage counters (token totals per month) to enforce the fair-use quota.
• Technical logs — standard server logs (IP address, timestamp, endpoint, status, timing) for security, rate limiting and debugging. Request bodies on authentication and AI endpoints are excluded from logging. Logs are kept for [OWNER: log retention, e.g. 30 days] and then deleted.
• Transactional email — verification and password-reset emails are delivered through our email provider.

We do not sell your data, do not show ads, and do not use third-party tracking or analytics SDKs.

4. Legal bases

We process account and subscription data to perform our contract with you (GDPR art. 6(1)(b)); technical logs and abuse prevention under our legitimate interest in running a secure service (art. 6(1)(f)); anything based on consent only after asking.

5. Who receives data

AI providers receive the text needed to answer — never your name, email or account identity; our servers make those calls under our own provider accounts. Where a recipient processes data outside the EEA, the transfer rests on the European Commission's standard contractual clauses or an adequacy decision.

6. Retention

Account data is kept until you delete your account, then removed. Usage counters are kept per billing month. Logs are kept for [OWNER: log retention, e.g. 30 days]. Backups age out on a fixed schedule.

7. Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and object to legitimate-interest processing. Delete your account directly in the app's settings or at api.loxreader.app/account/delete. For anything else, email [OWNER: contact email]. You can complain to your data-protection authority; in Croatia that is AZOP (azop.hr).

8. Security

All traffic uses TLS. Passwords are stored only as salted hashes. Secrets and provider keys are held in server-side configuration with restricted access. The database is encrypted at rest by Azure.

9. Children

Lox is not directed at children under 16, and we do not knowingly process their data.

10. Changes

We will announce material changes to this policy in the app or by email before they take effect.