DESIRE.

1. Information We Collect

To provide our services, we collect the following types of information:

Required Information

• Email address — for account registration and authentication
• Display name — shown on the platform
• Password — stored securely in encrypted form

Optional Information

• Age — used for content recommendation
• Gender — used for aggregate analytics
• Reading preferences — used for personalised recommendations

Automatically Collected Information

• Reading progress and reading history
• Purchase and payment records
• Basic website usage analytics (page views, feature usage, etc.)

2. How We Use Your Data

The data we collect is used for the following purposes:

• Account management — creating and maintaining your user account
• Service delivery — saving reading progress, processing purchases
• Personalisation — recommending content based on your preferences
• Analytics — aggregated statistics to improve the platform experience (no personal identification)
• Security — preventing abuse and protecting content copyright
• Communications — sending system notifications and in-app messages

We do not sell your personal data to third parties.

3. Data Storage & Security

• All data is stored on Supabase cloud database, hosted in secure data centres
• Data transmission is encrypted using HTTPS/TLS protocols
• Passwords are hashed using industry-standard bcrypt algorithm
• Row-Level Security (RLS) policies ensure users can only access their own data
• Payment processing is handled securely by Stripe and Lemon Squeezy — we do not store credit card information

4. Your Rights

In accordance with the Australian Privacy Act 1988, the General Data Protection Regulation (GDPR), and other applicable privacy laws, you have the following rights:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of inaccurate personal data
• Right to erasure — you may request deletion of your personal data ("right to be forgotten")
• Right to data portability — you may request your data in a commonly used format
• Right to restrict processing — you may limit how we process your data
• Right to withdraw consent — you may withdraw your consent to data processing at any time

You can exercise these rights through the Account Data Management page, or by contacting us using the details below.

5. Cookie Policy

We use only essential cookies required for the normal operation of the website. These cookies are not used for advertising or tracking purposes.

• Session cookies — maintain your login state; automatically cleared when you close your browser
• Authentication cookies — managed by Supabase Auth for secure access

We do not use third-party advertising or tracking cookies.

6. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — database hosting and user authentication
• Vercel — website hosting and deployment
• Stripe — payment processing
• Lemon Squeezy — payment processing and digital product delivery

Each of these services has their own privacy policies, and we encourage you to review them.