Privacy policy
Last updated: 20 September 2026
Smarter keeps as little as it can, and tells you what. This page names every piece of data, what it is for, and the exact table it sits in — so you can check rather than take our word for it.
What we keep
| Data | What it is for | Where it sits |
|---|---|---|
| Email address, and the identity returned by Google or Facebook | Opening your account and finding it again on another device | Supabase Auth |
| Smarter ID, language, age range, interests | Naming you in duels and steering the catalogue | profiles |
| Smart Points, books read, quiz scores | Keeping your progress, your grade and the leaderboard | smart_points, reading_sessions |
| Duels and revision sessions | Running the competition between players | duels, revisions |
| Ratings and reviews of books | Showing a summary's rating | book_reviews |
| Notification token, platform, time zone | Sending reminders — and above all not sending them between 9 pm and 9 am where you are | push_tokens |
| Customer, subscription and transaction references, amount, status | Keeping your subscription and tracing a disputed payment | subscriptions, payment_transactions |
| App launches, session length, narration playback | Measuring overall use of the service | analytics_events |
What we do not keep
This list matters as much as the one above, and it is held by the code, not by an intention.
- No passwords in our tables. Authentication is delegated entirely to Supabase Auth: passwords, tokens, sessions, email confirmation and password resets never pass through us.
- No banking data. No card number, no security code, no 3-D Secure code: they go straight to the payment provider. We keep only opaque references that let us find a record on their side.
- No notification history. We do not know which ones you received, nor which ones you opened. Your device token carries a reference to the last announcement sent, and only so we do not send it twice.
- No location, no advertising identifier, no third-party tracker. The time zone we store is the one your phone reports, and it serves the night-time silence and nothing else.
- Your reading history stays on your device until you open an account. Guest mode creates no row on our side.
Why we are allowed to
Account, progress and subscription data are processed to deliver the service you asked for: without them there is no account, no leaderboard and no Premium.
Notifications rest on your consent, given at the system prompt and withdrawable at any time in your phone's settings — the server then stops writing to you.
Usage measurement rests on our legitimate interest in knowing whether the service works. It is not used to profile you: it counts launches and durations, and never receives your address or a device identifier.
For how long
Your account and everything attached to it live as long as you keep it. Deleting it immediately erases the account, the summaries read, the Smart Points, the duels, the reviews and the notification tokens.
Payment transactions are kept for as long as accounting requires, even after the account is deleted: that is a legal obligation, not a choice.
Past usage measurements are not erased but made anonymous: the row loses every link to you and only counts towards a total. Without that, past charts would change retroactively every time someone leaves.
Who we entrust data to
We sell nothing and rent nothing. The only third parties that see anything are the ones that make the service work:
- Supabase — database and authentication. Every table named above lives there.
- Google and Facebook — only if you choose to sign in with them. They then return your name, your email address when you have one, and your profile picture.
- Firebase Cloud Messaging (Google) — delivery of push notifications to your device.
- CMI and Lemon Squeezy — subscription payments. They, and only they, see your banking data.
- Anthropic and ElevenLabs — writing and narration of the summaries. They receive books, never your data: no information about you is sent to them.
Your rights
You may request access to your data, its correction, its erasure, its portability, or object to a processing operation. Erasure is done straight from the app, without writing to us — see the « Delete my data » page.
For everything else, one email is enough, and we answer within thirty days.
Under thirteens
Smarter does not create a standalone account for a child under thirteen. The youth space opens from a parent's account, and no data is collected outside that arrangement.
If this page changes
The date at the top of the page governs. A change that would widen what we collect will be announced in the app before it takes effect — not after.
Writing to us
Data controller: [LEGAL ENTITY TO BE COMPLETED], [ADDRESS TO BE COMPLETED].
For any question about your data: contact@smarter.app.