Privacy Policy

1. The Serlot website

Our website is primarily informational. You can browse it without creating an account.

Information we collect

• Contact form: If you contact us, we collect your name, email address, subject, and message.
• Technical data: Our hosting provider (Cloudflare) may process standard server logs such as IP address, browser type, and pages visited to deliver and secure the site.

How we use it

• To respond to your inquiries and provide support.
• To operate, secure, and improve the website.

Website service providers

• Cloudflare — hosting, security, and CDN.
• Cloudflare Turnstile — spam protection on the contact form.
• Resend — delivers contact form messages to our support inbox.

We do not sell personal information collected through the website.

2. The Sepher mobile app

Sepher turns books into audio. When you use Sepher, we may collect and process the following information.

2.1 Camera and media

Sepher requests camera access so you can photograph book pages. Images you capture are:

• Stored locally on your device.
• Synced to your private cloud account if you sign in (Firebase).
• Used for OCR (text extraction) and text-to-speech processing.

2.2 Account information

If you sign in or link an account with Google or Facebook, we receive:

• Email address
• Profile photo (if available from your sign-in provider)
• Public profile information (such as your name, when provided by Facebook)
• A user ID for account management and sync

Sign-in is handled through Firebase Authentication. Google and Facebook are separate sign-in options, and you may link multiple providers to the same Sepher account from the app's Account settings. Facebook Login requests access to your email address and public profile. We use this information solely for account management and cloud synchronization.

2.3 Content you create

Sepher stores content you add, including:

• Book metadata (titles, cover images)
• Page images and imported files (PDFs, ebooks)
• Extracted and translated text
• Generated audio files

This content is stored on your device and, when signed in, in your private cloud storage. Your private library stays private to you unless you explicitly choose to publish eligible content publicly.

2.4 Device information

When you submit a support report, we may collect:

• Device manufacturer and model
• Operating system / Android version
• App version

This helps us troubleshoot issues and improve the app.

2.5 Meta App Events and Advertising ID

Sepher uses the Meta (Facebook) SDK on Android for sign-in and marketing analytics. When you use the app, the following may be collected and sent to Meta:

• Meta App Events: Sepher automatically logs app events (such as installs and in-app activity) to help measure and improve the performance of our advertising.
• Advertising ID:On Android, Sepher may access the Google Advertising ID (the device's advertising identifier) for ad attribution and analytics, where permitted by your device settings.

We use this data to understand how users discover Sepher, measure ad effectiveness, and optimize marketing. We do not sell your personal information. Meta processes this information under its own privacy policy (Meta Privacy Policy). You can limit ad personalization or reset your advertising ID in your Android privacy settings, and manage ad preferences in your Facebook account settings.

2.6 How we use Sepher data

• OCR: Page images are sent to trusted processing services to extract text.
• Translation: Text may be sent to translation services when you use translation features.
• Text-to-speech: Text is sent to voice synthesis services (such as ElevenLabs) to generate audio.
• Cloud sync: To back up and sync your library across devices when signed in.
• Subscriptions: Purchases are processed by Google Play Billing; we receive transaction status, not your full payment card details.

2.7 Third-party services used by Sepher

• Google Firebase (authentication, storage, analytics)
• Meta (Facebook) SDK — login, App Events, and advertising attribution
• Google Document AI / OpenAI (OCR and translation)
• ElevenLabs (text-to-speech)
• Google Play Billing (subscriptions and in-app purchases)

These providers have their own privacy policies. We use them only to operate Sepher's features.

2.8 Public publishing (optional)

Sepher lets you optionally publish content to a public library. If you choose to publish:

• You may only publish content you have the rights to publish (e.g., your own handwritten notes or public-domain works).
• For copyrighted materials, only non-infringing metadata (such as a title) may be published publicly.
• You are responsible for ensuring you have the rights to publish any content publicly.

2.9 Data retention and deletion

• Local data remains on your device until you delete it or uninstall the app.
• Cloud data is retained while your account is active. You can delete your account from Sepher settings; deletion is processed within a reasonable period (typically up to 30 days).
• Contact us at [email protected] to request account or data deletion.

3. Data sharing

We do not sell, trade, or rent your personal information. We share data only:

• With service providers that help us operate our website and apps (listed above).
• If required by law or to protect our rights and users.
• With your explicit consent.

4. Security

We use industry-standard measures to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data or account.
• Opt out of cloud sync by not signing in to Sepher.
• Revoke camera or other permissions in your device settings.
• Limit personalized ads or reset your advertising ID in Android settings (Settings → Privacy → Ads).
• Manage Facebook ad preferences in your Facebook account settings.

To exercise these rights, email [email protected].

6. Children's privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.

7. International users

Your information may be processed in countries where we or our service providers operate. By using our services, you consent to such processing subject to applicable law.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page. Continued use after changes means you accept the updated policy.

9. Contact us

Questions about this Privacy Policy? Email [email protected] or use the contact form on our Contact page.