1. About this policy
This Privacy Policy explains what Compendium ("we," "us") collects about you, why we collect it, and what choices you have. This policy applies to your use of Compendium on the web, iOS, and Android (the "Service"). Compendium is run by Compendium LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States, which is responsible for your personal data. Contact us at [email protected].
2. What we collect
Information you give us:
- Account: email address, authentication information, and full name (optional).
- Library and account activity: books you save, account status, and basic account activity such as sign-in and first-listen timestamps, so we can provide your library and secure your account.
- Billing: subscription and payment-related information needed to provide paid access.
- Support correspondence: emails you send us and the information needed to resolve your request.
Information collected automatically:
- Listening activity: progress and activity needed to resume playback, provide your library, improve the Service, and keep it reliable.
- Technical information: information your browser and device provide when you use the Service, used for reliability, security, and abuse prevention.
- Product analytics: a record of key steps in your use of the Service (for example creating an account, playing or finishing a chapter, reaching the paywall, starting checkout, and subscribing), tied to your account's internal ID rather than your name or email, plus how you first found us (the campaign tags and ad click IDs on the link you followed, the referring website's address, and the first page you visited). We use this to understand which parts of the Service work and where people come from. It is sent from our servers to an analytics provider that processes it on our behalf. We don't use it for advertising and don't sell or share it for cross-context behavioral advertising. On the website, visits before you have an account are counted with a random ID saved in your browser. In the UK, EU, EEA and Switzerland we ask first, and you can say no. Saying no stops the browser ID and visit counting. Steps taken in an account, such as subscribing, are still recorded from our servers, and you can object to that by emailing us. Change your choice
3. How we use what we collect
We use your information to (a) provide the Service (stream the right chapter to the right person), (b) provide paid access and customer support, (c) communicate about your account, (d) keep the Service secure and reliable, (e) understand and improve how the Service is used and found, and (f) comply with legal obligations (tax records, lawful requests).
Our legal reasons, where UK or EU law asks for them: contract, for (a), (b) and (c); legitimate interests, for (d) and for the server records in (e), which you can object to; your consent, for the browser ID on the website where we ask first; and legal obligation, for (f).
Who receives your data: service providers working for us, including companies that provide hosting and databases, website and audio delivery, security and bot checks, sign-in, product analytics, error tracking, and email. Payments, tax and receipts are handled by Stripe and its Link service. Apple and Google also receive data if you sign in with them or use their stores. You can ask us for the names of the companies that received your data. We may disclose data when the law requires it, or as part of a sale or reorganization. We don't sell your data.
Transfers: Compendium is based in the United States and most of these providers process data there. Where UK or EU law requires it, we rely on the provider's data transfer terms, such as standard contractual clauses or the Data Privacy Framework.
4. Cookies and similar technologies
Compendium uses essential cookies and browser storage to authenticate you, preserve preferences, and operate security controls. Necessary cookies may also be set during authentication and payment flows. We also keep a small record in your browser's storage, for up to 30 days, of how you first arrived (campaign tags, referring website and first page) so it can be attached to your account if you sign up. Your browser also keeps a random ID so we can see how visitors move through the site before signing up (for example, which pages lead to an account). It doesn't contain your name or email. If you create an account, we connect it to your account, and it then forms part of your account data. Clearing your browser storage removes it from your browser. In the UK, EU, EEA and Switzerland we only save this ID and the first-visit record if you say yes. We don't use advertising cookies or share this identifier with advertisers.
5. How long we keep your data
We keep personal information only as long as needed for the reasons in this policy:
- Account, library and listening progress: until you delete your account.
- Billing and tax records: 6 years.
- Support emails: 3 years.
- Product analytics: up to 24 months.
- Security and error logs: up to 12 months.
- First-visit record in your browser: up to 30 days.
We may keep something longer if the law requires it or to resolve a dispute.
6. Your rights
You can:
- Access the data we hold about you — email [email protected] and we will respond as required by applicable law.
- Correct your name or email from your account page.
- Delete your account from the delete account page, or by emailing us from the address associated with it. We will verify an emailed request and act on it subject to applicable law and the retention exceptions in §5.
- Object to a particular use, or restrict processing — email us as above.
- Withdraw consent where we relied on it; doing so doesn't affect prior processing.
- Complain to the privacy regulator or attorney general that has jurisdiction over you: in the EU, your local data protection authority; in the UK, the Information Commissioner's Office.
7. Additional privacy rights
Depending on where you live, you may have additional privacy rights under applicable law. To make a request, email [email protected]; we may verify requests against your account before acting.
8. Children's privacy
Compendium is not intended for children under 13, or under the higher age your country sets for agreeing to online services. We do not knowingly collect data from anyone in that age range. If you believe a child has created an account, email [email protected].
9. How we secure your data
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. We review these measures as the Service changes.
No system is perfectly secure. If a personal-data breach occurs, we will notify regulators and affected users as required by applicable law.
10. Do Not Track
Compendium has no behavioral-advertising tracking to disable. We don't change our behavior based on Do Not Track signals because there's nothing we'd turn off.
11. Changes to this policy
We may update this policy from time to time; the latest version is always at /privacy. Where required, we will provide notice of material changes.
12. Contact
Data protection inquiries: [email protected]