Privacy Policy

📥 What We Collect

We only collect what's needed to provide the Pathya experience:

• Account info — your email address and the username you choose.
• Sign-in method — if you use Google Sign-In, we receive your name and email from Google via our authentication provider.
• Profile data — display name, bio, avatar, and website link if you add them.
• Reading activity — books opened, progress, time spent reading, and streaks.
• Content you create — chapters and books you write and publish.
• Community activity — groups you join, authors you follow or block, and any content or user reports you submit.
• Notification preferences — push notification settings you configure.
• Device info — basic app version and platform (iOS/Android).

🚫 What We Never Collect

We want to be explicit about what we don't do:

• We do not sell your personal data to anyone, ever.
• We do not track your activity outside the Pathya app.
• We do not access your contacts, camera, or microphone without your explicit permission.
• We do not use your reading habits for any purpose other than improving your experience.

🔄 How We Use Your Data

Your data is used solely to make Pathya work for you:

• Syncing your reading progress and settings across sessions.
• Calculating streaks, XP, and achievements.
• Showing personalised recommendations based on your reading history.
• Delivering notifications you have opted into.
• Improving the platform through anonymised, aggregated usage analytics.

🔒 Data Storage & Security

We take security seriously. Your data is stored via Supabase, a trusted cloud infrastructure provider, with:

• Encryption at rest for all stored data.
• TLS/HTTPS encryption for all data in transit.
• Role-based access controls so only authorised systems can access your data.
• Regular security reviews and dependency updates.

✅ Your Rights

You are in control of your data at all times:

• Access — you can view all your data within the app.
• Correction — update your profile and content at any time.
• Deletion — request account deletion from Settings. You'll be signed out right away, and your account and data are permanently deleted after a 30-day grace period. Signing back in during that window automatically cancels the request.
• Export — contact us to request a copy of your data.

👶 Children's Privacy

Pathya is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, please contact us and we will remove it promptly.

📋 Changes to This Policy

If we make material changes to this policy, we will notify you through the app or by email before the changes take effect.