We collect as little as possible.

When you sign up, we ask for your email address. That’s it. If you sign in with Google, we also receive your name and profile picture from Google — you can clear those from your account at any time.

We don’t collect your location, your contacts, or your phone’s advertising identifier. Anything else that leaves your phone is described below.

• To create your account and sign you in.
• To send transactional emails — subscription confirmations, password resets, receipts, and trial-ending reminders.
• To occasionally tell you about meaningful changes. You can turn these off in settings.

Your library, your reading progress, your saved quotes, your streak — all of it lives on your phone. We don’t send any of it to our servers unless you sync it.

Sync is part of Pro. When you tap Sync now in settings, a copy of your library, reading progress, highlights, notes, saved words, reading history, folders, goal and streak, and which apps you lock is uploaded to your account so you can restore it on another device. The book files themselves are never uploaded.

Pro accounts also back up once a day when you open the app. You can turn that off with Sync daily in your account settings. Sync never runs in the background. If you aren’t on Pro, or you turn daily sync off and never tap Sync now, none of this leaves your phone. Deleting the app without syncing means that data goes with it.

When you have a book read aloud, the voice is made in one of two ways.

On your phone. Faster and Balanced voices, Pro voices you download, and every voice on iPhone are made by a neural voice on your device. The text of the book never leaves your phone, and we don’t record or transmit the audio.

Online. On Android, Pro voices can stream instead, and only after you agree to it the first time. Each sentence being read is sent to our server, which passes it to DeepInfra, our speech provider, and sends the audio back to your phone. We don’t keep the text: our server doesn’t log or store it, and DeepInfra states that it doesn’t retain it either. To keep track of your online listening allowance, we store how many seconds and characters of online audio your account used, never what was read.

Chapter summaries (Pro) and Ask about this book (Explain, and Who is this? on Pro) are made by Google’s Gemini AI. For a book you imported yourself, the app asks you the first time you use them in that book. Requests go through our server, and Google doesn’t use them to train its models.

• A summary sends the chapter’s text and the book and chapter titles.
• Explain sends the passage you selected and the text around it.
• Who is this? sends passages that mention the name, up to where you’re reading, and the opening lines of the book.

We keep the summaries and answers in a shared cache, so the next reader of the same book gets them straight away. The cache doesn’t record who asked or the text that was sent. To apply daily limits, we count how many requests each account makes.

Unless you choose on-device translation, words and passages you translate are sent to Google Translate. If you choose on-device, translation runs on your phone with Google’s ML Kit and nothing is sent.

Word pronunciation uses your phone’s own speech engine. When it can’t speak a language, the word is sent to Google to fetch the audio.

If you search a selection on the web, the app opens DuckDuckGo, Bing or Wikipedia with that text as the search.

When you send feedback, we store your message, any screenshot you attach, your account ID, and your device details (app version, operating system, phone model, language). We also email it to ourselves through Resend, with your email address as the reply-to, so we can answer you.

We use PostHog (hosted in the EU) to understand which features people actually use, so we can build better ones. PostHog sees:

• Which screens you opened (e.g. “library”, “reader”).
• Which actions you took (e.g. “set goal”, “lock app”).
• Anonymous device info — OS, app version.

It does not see your account email, the contents of what you read, the names of your books, your saved quotes, or anything else identifying. Sessions are tied to a random ID.

To diagnose layout and interaction bugs we also record anonymous session replays of the app’s UI. While you’re reading a book you imported yourself (an EPUB or PDF from your phone), the reader is automatically excluded from recording so the contents of your personal files are never captured.

When something breaks, we use Sentry to receive an anonymous report of what went wrong — a stack trace, the screen you were on, the OS version. It doesn’t include the contents of what you were reading, your books, or your saved quotes. These reports help us actually fix the problem.

To run the service we use a few specialist providers. They only see what they need to do their job:

• Supabase — stores your account, your email, and any reading data you explicitly choose to sync.
• DeepInfra turns the sentences you listen to into speech when you use an online Pro voice, as above. It receives the text being read, not your email or your account.
• Apple / Google — process your subscription payments. Receipts go to them, not to us. We never see your card.
• RevenueCat — relays the App Store / Google Play receipt so we can tell whether your subscription is active. It receives the store’s anonymous transaction ID; not your card or your email. If you redeem an invite code, it receives your account ID so it can switch on Pro.
• PostHog — anonymous usage analytics and session replay, as above.
• Sentry — anonymous crash and error reports, as above.
• Cloudflare — hosts this website and delivers the free books from our curated library.
• Google runs Gemini for summaries and Ask about this book, Google Translate for online translation and some word pronunciation, as above. If you sign in with Google, it also tells us your verified email, name, and profile picture.
• Resend delivers your feedback to our inbox, as above.

You can:

• See what we have on you. It’s your email, anything you’ve synced, feedback you’ve sent, and counts of how much you’ve used online voices and the AI features.
• Change your email at any time in settings.
• Delete your account from Profile → Account → Delete account inside the app. Everything we have on you goes with it, immediately. Feedback you sent us stays, with your account no longer attached.

If you can’t reach that screen for any reason, email hello@tryfirstpage.app from the address you signed up with. What deletion covers and we’ll do it for you within 7 days.

FirstPage isn’t designed for people under 13. We don’t knowingly collect data from kids.

If we change anything material here, we’ll email you before the change takes effect.

Questions, concerns, or corrections — hello@tryfirstpage.app.