Data Safety
MPReader collects a minimal set of data required to provide its core features. We do not sell data, use it for advertising, or share it with unrelated third parties.
Overview
Data Sharing & Collection Summary
Last reviewed: June 2025
🔗 Data Shared with Third Parties
Data type
Shared?
Purpose
Personal info (email)
No
—
App activity (reading progress)
No
—
Device or other IDs
No
—
📦 Data Collected by the App
Data type
Collected?
Purpose
Email address
Yes
Account creation & authentication
Password
Yes
Account security (stored as hash)
Reading progress
Optional
Cloud sync (requires account)
Library metadata (book titles)
Optional
Cloud sync (requires account)
EPUB file content
No
Files stay on-device only
Location data
No
—
Device identifiers
No
—
Crash / diagnostic data
No
—
Browsing / search history
No
—
Financial info
No
—
🛡️ Security Practices
Data in transit
All data is encrypted in transit using HTTPS / TLS.
Password storage
Passwords are hashed server-side via Supabase Auth. We never store plain-text passwords.
Data deletion
You can request full account and data deletion at any time. Deletion is completed within 30 days.
Third-party audit
Backend infrastructure is provided by Supabase, which maintains its own security certifications.
Ad / tracking SDKs
None. The app contains no advertising or tracking SDKs.
⚙️ User Controls
Account optional
Core reading features work without an account. An account is only required for cloud sync.
Delete account
Use the Account Deletion form to
permanently delete your account and all associated data.
Data access
Contact xcmp.labs@gmail.com
to request a copy of your data.
Questions?
If you have any questions about data safety or want to exercise your data rights, please contact us at xcmp.labs@gmail.com or read the full Privacy Policy.