SunoKitab Privacy Policy
Effective & last updated: 24 August 2026
SunoKitab is an audiobook app. This policy explains what we collect, why, and how you can control it. In short: we collect the minimum needed to run your account and library, we don't run ads or third-party analytics, we never see your card details, and you can delete everything yourself at any time from My Account.
1. Information we collect
Account information
- Email address — collected at registration/login — required to identify your account and send transactional email.
- Password — collected at registration (email/password sign-up only) — stored as a salted hash; we never store or can read your plaintext password.
- Name — collected at registration, or supplied by Google — optional for email sign-up.
- Google account ID & email — collected when you use "Continue with Google" — used only to authenticate you; we don't request any other Google scopes.
Device & app identifiers
- Device ID — collected on every login/token refresh — a random identifier generated on-device (not derived from hardware) so we can cap how many devices share one login. It cannot be used to identify you outside the app.
- Push notification token — collected if you enable push notifications — an Expo push token tied to this install, used only to deliver the notification types you've switched on.
Library & listening activity
- Listening progress — collected while you listen — playback position and completion status per episode, so you can resume where you left off on any device.
- Saved books — collected when you tap "Save" — powers your library / "Saved" tab.
- Episode likes — collected when you tap "Like".
- Ratings & reviews — collected when you submit one — your rating, review text, and the fact that it's linked to your account are visible to other users on the book page.
- Notification preferences — collected on the notification settings screen — which alert categories (new releases, recommendations, marketing) you've opted into.
Subscription & purchase data
- Plan, billing cycle, status — collected when you purchase or renew SunoKitab Premium — managed through RevenueCat and the App Store / Play Store. We store your plan and renewal date, never your card details.
Not collected: precise location, contacts, photos, microphone or camera input, browsing history outside the app, or advertising identifiers.
2. Device permissions
- Notifications — used for delivering the alert types you've opted into (see Section 1).
- Audio playback / foreground service — used for keeping an audiobook playing while the app is backgrounded or the screen is locked.
- Modify audio settings — used for ducking/routing audio correctly (e.g. around phone calls, Bluetooth).
3. How we use it
- Create and authenticate your account, and keep you signed in across sessions.
- Sync your library, playback position, and preferences across your devices.
- Process and manage your SunoKitab Premium subscription.
- Send the notifications you've opted into, and respond to support requests.
- Enforce the per-account device limit that keeps a subscription tied to one household rather than shared indefinitely.
- Maintain the security of accounts and infrastructure (e.g. detecting abuse, rotating tokens).
We do not use your data to build advertising profiles, and we do not run any ad network or third-party analytics SDK in the app.
4. How we share it
We don't sell your personal information. We share the minimum necessary with the service providers that make the app work:
- Google Sign-In — receives OAuth token exchange — for authenticating "Continue with Google."
- RevenueCat — receives purchase/subscription events and an anonymous customer ID — for subscription management and receipt validation.
- Apple App Store / Google Play — receives the purchase transaction — for processing in-app purchases. Card details never reach SunoKitab's servers.
- Expo — receives your push token — for delivering push notifications.
- Our hosting/database provider — receives all of the above, at rest — for running the SunoKitab backend.
We may also disclose information if required by law, or to protect the rights, safety, and security of SunoKitab, our users, or the public.
5. Retention & deletion
We keep your account data for as long as your account is active. When you delete your account from My Account → Delete Account, we permanently delete your profile, saved books, listening progress, reviews, and subscription record. This action is immediate and cannot be undone. Some records (e.g. transaction records required for tax/accounting law) may be retained for a limited period where we're legally obligated to.
6. Your choices
- Delete your account at any time from My Account — no need to contact support.
- Unsave a book, remove a like, or clear listening progress individually from the relevant screen.
- Turn off any notification category from the Notifications screen, including marketing messages.
- Request a copy or correction of your data, or ask us a question about this policy, by emailing us (see Section 11).
If you're in the EEA, UK, or a jurisdiction with similar data-protection law, these choices correspond to your rights to access, correct, delete, and port your personal data, and to object to or restrict certain processing.
7. Security
Passwords are salted and hashed, never stored in plain text. Sessions use short-lived access tokens with rotating refresh tokens; refresh tokens and other on-device secrets are stored using the platform's secure, encrypted storage (iOS Keychain / Android Keystore), not plain local storage. All traffic between the app and our servers is encrypted in transit. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.
8. Children's privacy
SunoKitab is not directed to children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we'll delete it.
9. International transfers
Your information may be processed and stored on servers located outside your country of residence. Where we transfer personal data internationally, we take steps to ensure it receives an equivalent level of protection.
10. Changes to this policy
We may update this policy as the app changes. If we make material changes, we'll notify you in-app or by email before they take effect. The "Last updated" date at the top of this page always reflects the current version.
11. Contact us
Questions about this policy, or a request about your data: support@sunokitab.app
Data controller: [your registered business name and country/address] — fill this in before publishing; Play Console's data-safety section asks for it as the entity responsible for the app.