Privacy Policy

Last updated: 29 September 2026

This policy covers nexorareads.com and the Nexora Reader iOS application. Website purchases are separate from local PDF reading in the app.

1. Who to contact

NexoraReads is responsible for the information it processes to operate these services. For privacy questions, access or deletion requests, contact [email protected]. Please identify the service and, for a purchase, the email address used at checkout. Do not send passwords, payment-card details or private download links.

2. PDF reading in the iOS app

You choose a PDF using Apple's file picker. The app accesses the selected file, makes a copy in its private storage and reads its text locally to provide Book mode. It does not upload your PDFs or extracted text to NexoraReads. Local reading does not require a NexoraReads account.

The app stores PDF copies, titles, a file-content fingerprint used to avoid duplicates, last-opened dates and archive visibility. It also stores reading positions, text size, reading mode and sound preference on the device. Archive lists recently opened PDFs. Hide removes an item from the visible list but does not delete its stored copy. Reimporting that PDF can make it visible again.

To remove the app's local data, delete the app using iOS (offloading is different and may keep data). Your original PDFs in Files are unaffected. Device or iCloud backups may retain app data according to your Apple settings; manage those backups separately. Selected files stored with iCloud Drive or another file provider are retrieved through that provider.

The native reader does not include an advertising SDK, analytics SDK, location tracking or a service that sends reading history to us. Search opens our Shop in an in-app browser; website processing described below applies when you browse or buy there. Apple may independently process App Store or diagnostic information under your Apple settings and its own privacy policy.

3. Website and purchase information

If you allow analytics, we use Google Analytics through Firebase on public reading and Shop pages to measure visits, traffic sources and website usage. Google may process device/browser information, approximate location and cookie identifiers. You can decline or withdraw permission using “Analytics preferences” in the footer. Firebase Analytics is not loaded before you allow it. See Google’s Privacy Policy. Existing first-party website statistics are described below.

• Creator accounts: name, email address, password hash, account permissions and protected authenticator setup information where enabled. Security records may include login times, IP addresses, browser information and login or reset outcomes.
• Purchases: buyer email, ebook and order identifiers, price, currency, payment status, timestamps and payment-provider references.
• Creator subscriptions: Whop checkout and membership references, plan, trial and billing status, access start and expiry dates, and administrator-issued access grants. These records are used to verify access to creator tools; card entry remains with the payment provider.
• Delivery: email delivery status and attempts, private-link access status, download counts and expiry or revocation information.
• Support and partnership: messages and information you choose to provide. Anonymous feedback does not ask for your name or email; account recovery asks for an email address. Collaboration and affiliate applications ask for a name or organization, email and proposal. Creator referral interest is linked to the signed-in account. Hosting and security services may process technical data such as an IP address.
• Usage: pages or content viewed, checkout clicks, a pseudonymous browser identifier, dates and approximate country when supplied by our network provider.
• Technical and security information: IP addresses, request information and server/security logs processed by hosting and network services.

Payment entry is handled by our checkout provider, Whop and its payment partners. Our application uses payment references and status to deliver ebooks; it does not ask you to enter full card details on our own checkout form.

4. Purposes and legal grounds

We process order and delivery information to fulfil your purchase and provide support. Where applicable, this is necessary to perform our contract with you. We use appropriate technical data to secure the service, investigate abuse and maintain reliable delivery, based on legitimate interests. We may retain transaction information to meet legal obligations. Where applicable law requires consent for analytics or other non-essential storage, consent is the relevant basis; withdrawing it does not affect processing that was lawful before withdrawal.

5. Cookies and local storage

The website uses a local-storage identifier called nexora-visitor for reach measurement. A hash of this identifier is used in our statistics with view/click counts and country information. It is pseudonymous, not a guarantee of anonymity. Clearing site storage resets it. Administrator login uses a session cookie; network services may also use security cookies.

Browser settings let you remove or restrict site storage, although this can affect functionality. You can manage optional analytics using “Analytics preferences” in the footer.

6. Service providers and disclosures

Service providers receive information needed for their role: Hetzner for hosting, Cloudflare for network delivery and security, Whop and payment partners for checkout, and Google for analytics when you allow it. Our mail service processes purchase and support emails. Authorised administrators can access customer, order, delivery and usage records, including exporting customer email addresses for service administration. Creators can access customer and order information for their own products to fulfil orders and provide support; they must keep it confidential. Content you publish, including post text, product descriptions and images, is public. We may disclose information when required by law or necessary to protect legal rights. We do not provide your locally imported app PDFs to these providers.

Provider information: Hetzner, Cloudflare, Whop and Apple. Their own notices apply to processing they independently control.

7. International processing

Hosting and service providers may process information outside your country, including in Europe and the United States. Applicable transfer requirements depend on the provider, service and jurisdiction. You may contact us for information about the safeguards relevant to your data.

8. Retention and deletion

Local reader copies and preferences remain on your device until removed with the app's data. Website records are kept for their operational purpose, such as fulfilling purchases, handling support, preventing abuse and meeting applicable recordkeeping obligations. Current website statistics do not have an automatic expiry. Contact us to request review or deletion of identifiable records. Information subject to a legal retention requirement may be retained despite a deletion request. Deleted information may remain in protected backups until those backups expire.

9. Your rights

Depending on your location, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict processing, object to processing based on legitimate interests, or withdraw consent. You may complain to your competent data-protection authority. Contact our privacy email to exercise applicable rights. We may ask for proportionate information to verify ownership of a purchase or request. We cannot remotely access or erase the PDF archive on your device.

10. Children and security

The services are intended for a general audience, not specifically for children. If you believe a child has provided personal information inappropriately, contact us. We use access controls and protected connections to limit unauthorised access, but no system guarantees absolute security. Keep your device and private download links secure.

11. Changes

We will update this page when our practices change and revise the date above. Material changes may also be communicated through the service or another appropriate channel.