Privacy Policy

Privacy Policy

Effective Date: November 15, 2025

Last Updated: July 23, 2026

This Privacy Policy explains how Koby, a product of Luar AI ("we," "us," or "our"), collects, uses, and protects your personal information when you use our service. We are committed to transparency and compliance with GDPR, CCPA, and other privacy regulations.

1. Data We Collect

1.1 Data You Provide

• Account Information: Email address, display name, profile picture (via Google OAuth)
• Reading Data: Books you've read, highlights, annotations, vocabulary words (from your Kobo database)
• Saved Web Content: Articles you explicitly save with the Koby browser extension or import features (their text, images, and source URL), stored in your private library so you can listen on any of your devices
• Privacy Settings: Your visibility preferences and privacy controls
• Social Interactions: Follows, likes, comments (if you use social features)
• Subscription & Billing: If you subscribe to Koby Pro, your payment is processed by Stripe. We do not receive or store your full card number; Stripe handles that. We retain a Stripe customer/subscription identifier, your plan, and its status so we can grant and manage your Pro access.

1.2 Automatically Collected Data

• Usage Data: Pages visited, features used, time spent (if you opt-in to analytics)
• Device Information: Browser type, operating system, IP address (for security only)
• Performance Data: Error logs, crash reports (for debugging)

1.3 Data We Don't Collect

When you use Offline Mode:

• ❌ We do NOT upload your Kobo database to our servers
• ❌ We do NOT track your reading activity
• ❌ We do NOT share your data with anyone
• ✅ All processing happens locally in your browser

1.4 Cloud Audio & AI Features

Some features, such as the Listen audiobook player's cloud voices and AI descriptions of images, charts, and comic pages, work by sending content to our servers and trusted AI providers for processing. When you use these features:

• Passages of your book's text are sent to our cloud rendering service (Google Cloud Run) to generate narration audio.
• Images from your book may be sent to Google's Gemini AI to generate a spoken description.
• This content is processed to produce your audio/descriptions and is not used to train third-party models or sold to anyone.

If you prefer to keep everything on your device, use the on-device voice, which performs all narration locally without sending your book to our servers.

1.5 Browser Extension

The Koby browser extension is a save button, not a tracker:

• It only reads a page when you explicitly save it (toolbar button, keyboard shortcut, or right-click menu).
• It does not collect your browsing history, track the sites you visit, or run any analytics.
• What you save goes to your private library on your Koby account. Saved articles are private by default and never appear on your public profile unless you change their visibility yourself.
• The extension stays signed in through your Koby account; it stores only its own session credentials and a local list of pages you've saved (used to show the "already saved" checkmark).

2. How We Use Your Data

2.1 Primary Uses

• Provide Services: Display your highlights, enable exports, generate analytics
• Improve Features: Understand usage patterns to build better features
• Security: Detect and prevent abuse, fraud, or security threats
• Communication: Send important updates (you can opt-out of non-essential emails)

2.2 Analytics (Opt-In)

If you enable analytics in your privacy settings, we collect anonymous usage data using:

• Google Analytics 4 (anonymized IP addresses)
• Firebase Analytics (app performance monitoring)

You can disable analytics at any time in Privacy Settings.

2.3 Social Features (Opt-In)

If you choose to use social features (following, public highlights), your data may be visible to other users based on your privacy settings:

• Public: Anyone can see your content
• Friends Only: Only users you follow who follow you back
• Private: Only you can see your content

3. Data Sharing & Third Parties

3.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal data to third parties for marketing purposes. Period.

3.2 Third-Party Services We Use

• Firebase (Google Cloud): Cloud infrastructure, authentication, database hosting
  • Privacy Policy: firebase.google.com/support/privacy
  • Location: United States (GDPR-compliant)
• Stripe: Payment processing for Koby Pro subscriptions. Stripe handles your card details directly under its own privacy policy.
  • Privacy Policy: stripe.com/privacy
• Google Gemini & Google Cloud: AI image descriptions and cloud narration for the Listen feature (see §1.4). Content is sent only to generate your audio/descriptions.
  • Privacy Policy: policies.google.com/privacy
• Free Dictionary API: Word definitions for flashcard exports (no personal data sent)

3.3 When We May Share Data

We may share your data only in these limited circumstances:

• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the rights, property, or safety of Koby, our users, or the public
• Business Transfer: If Koby is acquired or merged, your data may transfer to the new entity (you'll be notified)

4. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

4.1 Access & Portability

• Download Your Data: Export all your data as JSON/CSV from Privacy Settings
• View What We Have: Request a full report of data we hold about you

4.2 Correction & Deletion

• Update Information: Edit your profile, highlights, or settings anytime
• Delete Specific Data: Remove individual highlights, books, or vocabulary words
• Delete All Data: Use "Delete All Highlights" in Privacy Settings (irreversible)
• Delete Account: Permanently delete your account and all data (irreversible)

4.3 Control & Consent

• Granular Privacy Controls: Set visibility for profile, highlights, books, and stats individually
• Opt-Out of Analytics: Disable usage tracking anytime
• Withdraw Consent: Change any privacy setting or delete your account anytime

4.4 Data Retention

• Active accounts: Data retained as long as your account is active
• Deleted accounts: Data permanently deleted within 30 days
• Backups: Backup data purged within 90 days of deletion
• Optional auto-deletion: Set automatic deletion in Privacy Settings (1, 2, or 5 years)

5. Contact Us

For questions, concerns, or data requests: