Privacy Policy

Last updated: July 2026 (rev. 6)

Plain-language summary of how Page by Page works with your data. It is provided for transparency and is not legal advice. If you operate or rely on this service commercially, have it reviewed by a qualified lawyer for your jurisdiction.

Who we are

Page by Page is operated by Synect Limited, a private limited company incorporated in Ireland under the Companies Act 2014 (CRO: 814346; VAT No: IE 4734166RH). Registered address: The Tara Building, 11–15 Tara Street, Dublin 2, D02 RY83, Ireland.

For any privacy-related questions or requests, contact us at: hello@synect.ai. We are the data controller for the personal data described in this policy.

The short version

  • Page by Page is local-first: your books and saved words live on your device.
  • You can read without an account. An account simply lets you sync across devices and use AI features.
  • We only send content to AI services when you choose to use an AI feature.
  • We don’t sell your data, and we don’t use your reading content to advertise to you.

Lawful basis for processing

Where GDPR applies, we process your personal data under the following lawful bases (GDPR Article 6):

Processing activityLawful basis
Account creation and managementContract (Article 6(1)(b))
AI features (OCR, chat, definitions)Consent (Article 6(1)(a))
Vocabulary and library syncContract (Article 6(1)(b))
Analytics (GA4)Consent (Article 6(1)(a))
Security and fraud preventionLegitimate interests (Article 6(1)(f))

What we store, and where

When you read without an account, your library, pages, and vocabulary are stored locally in your browser (on your device). This data does not leave your device unless you sign in to sync.

If you create an account, we store your email address and authentication details with our hosting provider, and we mirror your library, pages, and vocabulary to your account so they appear on your other devices. You can delete this content at any time.

When AI is involved

AI features are optional and run only when you trigger them. Depending on the feature, we send the minimum needed to deliver it to trusted third-party AI and speech providers:

  • Definitions, translation, and chat use the relevant page text.
  • Reading scanned or image-only files and live mode use the image you choose to share.
  • Premium read-aloud sends the text to be spoken so audio can be generated.

These providers process the request to return a result. We don’t sell this content, and free on-device read-aloud never leaves your device. Provider processing is governed by their own terms and privacy policies.

We never use your content to train AI models. The pages you scan, the questions you ask, and your saved vocabulary are used only to deliver the feature you requested — never for model training, advertising, or profiling.

AI transparency

Page by Page uses artificial intelligence to process your content, including optical character recognition (OCR), text definitions, translations, and conversational AI responses.

AI features are optional and clearly marked throughout the app. You are always in control of when AI processes your content. This disclosure is made in accordance with EU AI Act (Regulation (EU) 2024/1689) Article 50 transparency obligations.

Sub-processors

We use the following third-party services that may process your data:

Sub-processorPurposeLocation
Google (Gemini API)AI OCR, chat, definitionsUSA (SCCs apply)
Google Cloud TTSPremium text-to-speech voicesUSA (SCCs apply)
SupabaseDatabase (text only) and authenticationAWS eu-west-1, Ireland
VercelWebsite hosting and API routesUSA (SCCs apply)
UsercentricsCookie consent managementEU
Google Analytics (GA4)Usage analytics (consent-gated)USA (SCCs apply)
StripePayment processing (when billing is live)USA (SCCs apply)

International transfers to the USA are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

Data retention

Data typeRetention period
Account dataUntil account deletion
Scanned page text (OCR)Up to 180 days, then removed automatically (page text is study-session material — your vocabulary cards are what you keep long-term). Also removed earlier if you delete the book or your account
Vocabulary wordsUntil you delete them or delete your account
AI chat messagesNot stored — each message is processed to generate the reply and exists only on your screen
Content reports you send usKept while we review and act on them; unlinked from your account if you delete it
Analytics data26 months (GA4 default)

You can export a copy of your data, and delete your account and all associated data, at any time from Settings → Privacy & data. Account deletion is immediate and permanent.

Accounts and authentication

Accounts are handled by our authentication provider. We use a secure session cookie to keep you signed in. We do not store your password in plain text. Signing in is optional and only required for syncing and AI features.

Cookies and analytics

We use a consent management platform (Usercentrics) to ask for and record your cookie choices. The consent record itself is strictly necessary and is stored regardless of your selection.

Only if you opt in via the banner do we load Google Analytics 4 (provider: Google Ireland Ltd) to understand, in aggregate, how the site is used. It sets _ga / _ga_<id> cookies (about a 13-month lifetime) and does not log your full IP address. Nothing non-essential runs before you opt in, and you can withdraw consent at any time by reopening the consent banner.

We also use a small, strictly necessary cookie to keep you signed in when you use an account.

Payments

Paid plans are billed through a third-party payment processor (Stripe). When online checkout is enabled, we never see or store your full card details — the processor handles them directly.

Your rights under GDPR

As a user in the EU/EEA, you have the following rights:

  • Right of access — request a copy of your personal data.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request deletion of your data.
  • Right to portability — receive your data in a machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to restrict processing — limit how we use your data.
  • Right to withdraw consent — withdraw consent at any time.

To exercise any of these rights, contact us at hello@synect.ai. We will respond within 30 days.

Your choices

  • Use the app without an account to keep everything on your device.
  • Delete books, pages, or saved words at any time — deletions sync to your account.
  • Request deletion of your account and associated data by contacting us.

Data breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours of becoming aware of the breach, and will notify affected users without undue delay.

Children

Page by Page is not directed at children. Creating an account requires you to be at least 16 — the digital age of consent in Ireland, where we are established — or to have the consent of a parent or guardian. We do not knowingly collect personal data from children below that age.

We show no advertising and build no behavioural profiles of any user, so younger readers who use the free, on-device reading features (which need no account and send us no data) are not tracked.

Changes

We may update this policy as the product evolves. We’ll revise the “last updated” date above and, for significant changes, aim to notify signed-in users.

Supervisory authority

You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe we have not handled your personal data in accordance with applicable law.

Data Protection Commission
6 Pembroke Row
Dublin 2, D02 X963
Ireland
Website: dataprotection.ie
Phone: +353 (0)1 765 0100

Contact

For any privacy-related questions or requests, contact us at hello@synect.ai, or read our Terms of Service.