Privacy Policy

Xabier Lahuerta, contact: xlahuerta@protonmail.com.

• Your books (EPUB files you import) are processed and stored in the app's storage on your iPhone and sent to your Apple Watch over Apple's WatchConnectivity, directly between your paired devices. They are never uploaded by the app.
• Your reading positions, typography settings, a random device identifier (see below) and, if sync is on, progress waiting to be synced are stored in the app's settings on the device. Your typography settings are also sent to your paired watch.
• Dictionaries you download are stored on your iPhone and your Apple Watch. Words are looked up on the watch itself, so what you look up never leaves the device. You can delete dictionaries in the iPhone app (Settings › Dictionaries).
• Your sync login, only if you turn sync on (server address, username, password), is stored in the Keychain on your iPhone and, because the watch syncs on its own, also sent to your paired watch over WatchConnectivity and stored in the watch's own Keychain. It is never sent to the developer, and over the internet it goes only to the sync server you entered (see the next section).
• The app does not use iCloud. Deleting the app removes this data from that device.

Sync is off unless you turn it on. You do not need any account to import and read books. If you enter a KOReader Sync server, username and password and turn sync on, the app sends requests only to that server. (The server field suggests https://sync.koreader.rocks, the public KOReader server; nothing is sent to it until you save a username and password, and you can change it to your own server.) The app does not create accounts; you use an account you already have on that server. Requests can include:

• your username and an MD5 hash of your password (this is how the KOReader Sync protocol authenticates; your password itself is not sent to the server);
• a book identifier, which is a hash computed from the content of the EPUB file (not the file, its title or its text);
• your reading position in that book (a position reference and a percentage);
• the device name "Folito" and a random identifier generated by the app on first launch (it is not derived from your device's hardware and is not an advertising identifier).

The app does not send a timestamp; the server records its own. As with any internet request, the server sees your IP address. That server is run by whoever operates it (you, or a service you chose), not by the developer; its own privacy policy and retention rules apply, and the app cannot delete data stored there (ask the server operator). If you use http:// (allowed only for local-network addresses; iOS asks for local network permission the first time) the traffic is not encrypted. If you do not turn sync on, no sync requests are made.

Looking up a word sends nothing anywhere: the dictionaries are on your watch. Only when you tap Download or Update in Settings › Dictionaries does the iPhone download a dictionary file over HTTPS from www.reader-dict.com (reader.dict, which compiles the files from Wiktionary). The request contains only the file's address, which shows the language you chose, and a User-Agent naming the app; the site sees your IP address and handles it under its own policy. While that screen is open, the app also asks the site (same information, no file transferred) whether an installed dictionary has changed. The iPhone then converts the file and sends it to your watch over the Apple Watch connection. No word, book title, text or reading position is ever sent.

• No analytics, crash-reporting, advertising or other third-party SDKs, and no tracking across apps or websites.
• No accounts with the developer; the developer receives no data from the app.
• No sale or sharing of data.

The app is not directed at children and the developer collects no personal information from anyone.

Sync is optional. To stop syncing, open Settings › Progress Sync on the iPhone and tap Turn Off Sync and Remove Login: the login is removed from your iPhone and your Apple Watch, and progress waiting to sync is discarded (your books and reading positions are kept). You can also remove the login on the watch alone (Settings › Remove Credentials), delete dictionaries, or delete the app at any time. For data held by a sync server or the dictionary download site, contact that service. For questions about this policy, write to xlahuerta@protonmail.com.

If the app's behaviour changes, this page will be updated and the date above changed.