Privacy Policy
Last updated: April 15, 2026
This Privacy Policy explains how CODEBOOKUSA ("we", "us", "our") collects, uses, and protects information about you when you use our website, mobile application, and related services (the "Service"). We care about your privacy and aim to be transparent about the small amount of data we need to run the Service.
1. Information We Collect
We collect only the information needed to create your account, deliver purchases, and improve the Service:
| Category | Examples | Why |
|---|---|---|
| Account info | Name, email address, trade (optional), password hash | Create and secure your account |
| Sign-in provider data | Name, email, profile picture from Google or Apple (if you use those sign-in options) | Let you sign in without a password |
| Purchase info | Products purchased, amount paid, transaction ID | Fulfill your purchase and grant access |
| Library activity | Highlights, bookmarks, notes, quiz and study progress | Sync your reading and study data across devices |
| Technical data | IP address, browser, device type, pages viewed | Operate, secure, and improve the Service |
We do not collect or store full payment card numbers. Payments are processed by Stripe, which handles your card details directly.
2. How We Use Your Information
- To provide, operate, and maintain the Service;
- To process purchases and deliver digital products;
- To sync highlights, bookmarks, and study progress across your devices;
- To authenticate you and protect against fraud and abuse;
- To send transactional emails (receipts, password resets, account notices);
- To respond to support requests;
- To comply with legal obligations.
We do not sell your personal information, and we do not share it with advertisers.
3. Service Providers We Use
We rely on a small number of trusted third parties to run the Service. Each of them receives only the information they need to perform their function:
- Supabase — hosts our database and manages user authentication.
- Google — if you choose "Continue with Google", Google provides us your name, email, and profile picture.
- Apple — if you choose "Continue with Apple", Apple provides us your name and a relay email.
- Stripe — processes payments. Stripe receives your card details directly; we only receive a transaction ID and the amount charged.
- Cloudflare — hosts the website and protects against attacks.
Each of these providers has its own privacy policy governing how they handle data.
4. Cookies and Local Storage
We use a small number of browser cookies and localStorage entries to keep you signed in, remember your preferences (like dark mode), and preserve your cart and library between visits. We do not use advertising cookies or third-party tracking pixels.
5. How We Protect Your Information
Your data is transmitted over HTTPS and stored on encrypted database servers provided by Supabase. Row-level security policies ensure that one user cannot access another user's highlights, bookmarks, purchases, or study data. Passwords are never stored in plain text — they are hashed by our authentication provider.
No system is 100% secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.
6. Your Rights
You have the right to:
- Access the personal information we hold about you;
- Correct information that is inaccurate or out of date;
- Delete your account and associated data;
- Export your highlights, bookmarks, and notes in a machine-readable format;
- Opt out of non-essential emails at any time.
To exercise any of these rights, email us at [email protected].
7. Data Retention
We keep your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain records (for example, transaction history for tax and accounting purposes).
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.
9. International Users
CODEBOOKUSA is operated from the United States. If you access the Service from outside the U.S., be aware that your information will be transferred to, stored, and processed in the United States.
10. California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we have collected, the right to request deletion, and the right not to be discriminated against for exercising these rights. We do not sell personal information as that term is defined under the CCPA. To make a CCPA request, email [email protected].
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, provide additional notice (such as an email or in-app notification).
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, email [email protected].