Privacy Policy

1. Introduction

This Privacy Policy explains how Apocrify (owned and operated by MDS MEDIA LIMITED, "we", "us", "our") collects, uses and protects your personal information when you visit the Service, create an account or make a purchase.

By using the Service, you agree that your use and any privacy-related concerns are subject to this Privacy Policy. We may update this Policy from time to time. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

2. Information we collect

a) Information you give us

We collect personal information when you:

• create a free account or start a trial,
• make a purchase or send a gift,
• invite a second listener,
• write in your journal inside the app,
• contact us by email.

This information may include your first name, email address, shipping address (for physical books), the name and email of a person you invite or send a gift to, your gift message, and payment-related information. Card details are entered on the payment provider's secure page and are never stored on our servers.

b) Information collected automatically

When you use the Service we record what is needed to make it work: your progress in each episode, your favorites, your listening days (for streaks and milestones), your settings, and technical data such as IP address, browser type and device information.

c) Information from third parties

We receive limited information from our payment provider (for example, that a payment succeeded) and, where used, from analytics and advertising partners.

3. How we use your information

• to give you access and keep your place on every device,
• to process payments, trials, renewals and gifts, and to print and ship physical orders,
• to send password emails, receipts, reminders before a charge and gift emails,
• to send the optional morning email with the day's episode (you can turn it off at any time),
• to provide customer support,
• to improve our content and experience,
• to send news and offers (you can opt out at any time),
• to comply with legal obligations.

4. Cookies and similar technologies

We use one essential cookie to keep you signed in, and the browser's local storage to remember settings such as text size and night mode. See our Cookie Policy.

5. Analytics and advertising

We count visits to our sales and gift pages without cookies: each day the server derives an anonymous code from your connection and browser, so we can count unique visitors per day and see which of our emails or posts brought them. The code cannot be turned back into your IP address and changes every day.

We may use analytics and advertising tools, such as Google Analytics and the Meta (Facebook) Pixel, to measure the performance of our ads and deliver relevant messages. If we do, data is handled according to this Privacy Policy and to the policies of those providers. You can opt out through Google's Ads Settings, your Facebook ad preferences, or the Network Advertising Initiative opt-out page.

6. Legal basis (EEA/UK users)

When required under the GDPR, we process data on the basis of:

• performance of a contract,
• legitimate interests,
• consent (for example, newsletters and non-essential cookies),
• legal compliance.

7. Sharing of information

We do not sell your personal data.

We share information only with:

• service providers that run the Service for us (hosting and storage by Cloudflare, email delivery, printing and shipping partners for physical books),
• our payment processor (Airwallex),
• analytics and advertising partners, where used,
• professional advisors,
• law enforcement when legally required.

8. Data retention

We keep personal data only as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes and enforce agreements. You can ask us to delete your account at any time.

9. Data security

We use reasonable security measures to protect your information: encrypted connections, and passwords stored only in an irreversible, salted form that nobody can read. If you sign in with Google, we receive only your name and email address. No method of online transmission or storage is 100% secure.

10. International transfers

Because we use global service providers, your information may be transferred outside your country of residence. We take steps to ensure compliance with applicable laws.

11. Your rights

You may have the right to:

• access the personal information we hold about you,
• request correction or deletion,
• object to or restrict processing,
• withdraw consent for marketing,
• request data portability (your journal can also be downloaded from the "Me" page).

To exercise your rights, write to paul@apocrify.com. We may need to verify your identity before processing your request. California residents: see Do Not Sell My Info.

12. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect their data. If you believe we have collected such information, please contact us so we can delete it promptly.

13. Do Not Track

At this time the Service does not respond to Do Not Track (DNT) signals. You can manage cookies in your browser settings.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Please review this page periodically.

15. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at paul@apocrify.com.