We collect as little as possible.

When you sign up, we ask for your email address. That’s it. If you sign in with Google, we also receive your name and profile picture from Google — you can clear those from your account at any time.

We don’t collect your location, your contacts, your phone’s advertising identifier, or anything else from your device.

• To create your account and sign you in.
• To send transactional emails — subscription confirmations, password resets, receipts, and trial-ending reminders.
• To occasionally tell you about meaningful changes. You can turn these off in settings.

Your library, your reading progress, your saved quotes, your streak — all of it lives on your phone. We don’t send any of it to our servers unless you ask us to.

If you tap Sync now in settings, a copy of your library and reading progress is uploaded to your account so you can restore it on another device. Sync is strictly manual — it never runs automatically on launch, on sign-in, or in the background. If you never tap it, nothing leaves your phone. Deleting the app without syncing means that data goes with it.

When you use Listen mode to have a book read aloud, the audio is generated on your phone by an on-device neural voice. The text of the book never leaves the device for narration, and we don’t record or transmit the audio.

When you tap a word or phrase to translate, the translation runs locally using Google’s on-device ML Kit models. The selected text isn’t sent to Google or to us.

We use PostHog (hosted in the EU) to understand which features people actually use, so we can build better ones. PostHog sees:

• Which screens you opened (e.g. “library”, “reader”).
• Which actions you took (e.g. “set goal”, “lock app”).
• Anonymous device info — OS, app version.

It does not see your account email, the contents of what you read, the names of your books, your saved quotes, or anything else identifying. Sessions are tied to a random ID.

To diagnose layout and interaction bugs we also record anonymous session replays of the app’s UI. While you’re reading a book you imported yourself (an EPUB or PDF from your phone), the reader is automatically excluded from recording so the contents of your personal files are never captured.

When something breaks, we use Sentry to receive an anonymous report of what went wrong — a stack trace, the screen you were on, the OS version. It doesn’t include the contents of what you were reading, your books, or your saved quotes. These reports help us actually fix the problem.

To run the service we use a few specialist providers. They only see what they need to do their job:

• Supabase — stores your account, your email, and any reading data you explicitly choose to sync.
• Apple / Google — process your subscription payments. Receipts go to them, not to us. We never see your card.
• RevenueCat — relays the App Store / Google Play receipt so we can tell whether your subscription is active. It receives the store’s anonymous transaction ID; not your card or your email.
• PostHog — anonymous usage analytics and session replay, as above.
• Sentry — anonymous crash and error reports, as above.
• Cloudflare — hosts this website and delivers the free books from our curated library.
• Google — only if you choose to sign in with Google, in which case Google tells us your verified email, name, and profile picture.

You can:

• See what we have on you. It’s your email, plus anything you’ve manually synced.
• Change your email at any time in settings.
• Delete your account from Profile → Account → Delete account inside the app. Everything we have on you goes with it, immediately.

If you can’t reach that screen for any reason, email hello@tryfirstpage.app and we’ll do it for you within 7 days.

FirstPage isn’t designed for people under 13. We don’t knowingly collect data from kids.

If we change anything material here, we’ll email you before the change takes effect.

Questions, concerns, or corrections — hello@tryfirstpage.app.