Privacy Policy

Last updated: 3 October 2026

This policy explains what information we collect when you use the Librena mobile app, what we use it for, who we share it with and what rights you have.

In short

• Librena has no ads. We don't sell your data and we don't use an advertising ID.
• The characters' replies are written by AI. To do this, your messages and chat history are sent to our AI providers (Google, and OpenAI for some books).
• A chat you delete leaves your list right away and is permanently deleted from our servers after 30 days.
• You can delete your account from within the app at any time. When you do, your data is deleted immediately.

Who we are

Librena is developed and operated by Abdullah Karacabey, an individual developer based in Istanbul, Türkiye. In this policy he is referred to as "we", and he is the controller of your personal data. You can reach us at abdullahkaracabey@gmail.com.

Information we collect

• Account information. On first launch the app creates an anonymous account for you. If you sign in with Google or Apple, your email address, your name and the provider you used are stored with your account. If you use Apple's "Hide My Email", we only see the relay address Apple gives us. You can change your name on the Profile screen.
• Chat content. The messages you write and the characters' replies; translations of those replies; the moment you chose to meet a character; your progress in quests (including notes the quest system draws from the conversation); chat summaries; your reactions to replies, chat ratings and comments; and quotes you highlight.
• Reader identity and memory. How you introduced yourself to a character and, if this feature is on, short memories of what you talked about. You can see, change or erase these on the character's page.
• Feedback and reports. Feedback you send from the app and the conversation that follows, an email address if you choose to give one, and device information (platform, operating system version, app version, language). If you report a reply, the reason you chose, your note and the text of the reported reply.
• Device and usage information. Your device's notification token, platform and language, so we can send notifications; your message counter and your device's time-zone offset, to apply the daily message limit; usage events that Firebase Analytics collects automatically (such as app opens and session length) and an identifier specific to your app installation; and crash reports that Firebase Crashlytics sends when the app crashes (device model, operating system, technical details of the error).

What we don't collect: location, contacts, photos, camera, microphone, payment information or advertising ID.

What stays only on your device: drafts you haven't sent, your search history, and preferences such as theme and text size.

How we use your information

• To provide the service: to write, and translate, the characters' replies, run quests, store your chats and reader identity, and notify you when a reply arrives.
• For safety: messages pass through an automatic check designed to detect a risk of self-harm; if a risk is detected, the character does not reply and a support message from outside the story is shown instead. We apply daily limits to prevent abuse.
• For review and quality: replies you report, low ratings and replies stopped for safety reasons go to our small team's review list. Authorized team members can view chat records to investigate problems, keep people safe and improve reply quality. Every access is logged.
• To improve the product: aggregate usage and quality measurements (for example reply length, empty-reply rates, processing used).
• To respond to you: to answer your feedback and support requests.

We don't sell your data, we don't use it for advertising, and we don't use it to train our own AI models.

AI providers

• Google (Vertex AI, Gemini models). Characters' replies, translations, chat summaries, memory notes and the safety check are produced with Google Cloud Vertex AI. For this, your message, your chat history and the character's instructions are sent to Google. These requests are processed at Google's global endpoint, which means they may be processed on servers outside the European Union. Your message is also turned into a numerical vector on servers in Belgium (europe-west1) to find relevant passages in the book.
• OpenAI. Characters from some books (currently Alice's Adventures in Wonderland and Crime and Punishment) run on OpenAI models. In these chats your message, your chat history and the character's instructions are sent to OpenAI in the United States. We ask OpenAI not to store the replies; under its own policy OpenAI may keep requests for up to 30 days to monitor abuse.

These providers process your data on our behalf to provide the service. Under their terms, they don't use data sent this way to train their models. Replies are produced by AI and can be wrong; you can report any reply you find inappropriate from within the conversation.

Other service providers

• Google Firebase and Google Cloud: authentication, database (Cloud Firestore, Belgium, europe-west1), server (Cloud Run, Belgium, europe-west1), notification delivery (Firebase Cloud Messaging), usage analytics (Firebase Analytics), crash reports (Firebase Crashlytics) and hosting for this website (Firebase Hosting).
• Apple and Google: to verify your identity if you sign in with them.

These providers may process your data outside your country, including in the United States. These transfers rely on safeguards such as the Standard Contractual Clauses the providers offer.

Legal bases

• Performance of a contract: to open your account, provide chats and quests, and store your data.
• Legitimate interests: safety, abuse prevention, fixing errors, reviewing replies and improving the product.
• Legal obligation: where the law requires it.

How long we keep data

• While your account is open we keep your chats, reader identity and settings.
• A chat you delete leaves your list right away. Its record on the server (including messages and quest state) is kept for 30 days for safety and product analysis only, then permanently deleted.
• Messages you delete (from one message to the end of the chat) leave your chat and the character's memory right away. Their record on the server is kept for 30 days for safety and product analysis only, then permanently deleted.
• When you delete a memoir, that identity and its memories are deleted right away and its chats after 30 days.
• When you delete your account, your chats, messages, quests, reader identities and memories, highlighted quotes, feedback, reported replies, device registrations and your account are deleted immediately.
• An anonymous account you never signed in with is deleted with its chats and all its data if you don't open the app for 90 days. If, while anonymous, you sign in with a Google or Apple account you already have, your anonymous chats move to that account, your earlier chat with the same character is archived, and the anonymous account is deleted.
• Server logs (not chat content, but account and chat identifiers and technical details) are kept for 30 days. Firebase Analytics and Crashlytics data is kept for the periods Google sets for those services. Audit records of our team's administrative actions may keep your account identifier; these records contain no chat content.

Notifications

If you turn on notifications, a notification may show the character's name and the first lines of the reply when a character answers. You can turn off the preview, or notifications entirely, in the "Notifications and sound" section of the Profile screen.

Age limit

Librena is not intended for anyone under 18, and people under 18 should not use the app. If we learn that someone under 18 has given us data, we will delete their account and data. If you notice this, please write to us.

Your rights

Depending on the law where you live (for example the GDPR), you have the right to:

• Access and portability: ask for a copy of the data we hold about you.
• Rectification: change your name in the app, and write to us for other corrections.
• Erasure: delete your account and data with Profile → My data → "Delete my account and all my data". Details are on the account deletion page.
• Objection and restriction: object to processing based on legitimate interests, or ask us to restrict processing.
• Complaint: lodge a complaint with the data protection authority in your country.

Send requests to abdullahkaracabey@gmail.com; we will respond within 30 days. To verify your identity, we may ask that the request come from the email address linked to your account.

Security

All communication between the app and our servers is encrypted (TLS). Data is stored encrypted on Google's infrastructure. Access to chat records is limited to authorized team members and is logged.

Changes

We may update this policy. If there is a significant change, we will announce it in the app or on this page. The date at the top of the page shows the latest update.

Contact

Abdullah Karacabey, Istanbul, Türkiye abdullahkaracabey@gmail.com