Privacy Policy - To Kindle

What this covers

This policy covers tokindle.in, the Chrome and Firefox extensions, the Android app, and the API they all talk to. Together we call them the service, and we refer to ourselves as we: To Kindle (tokindle.in), reachable at tokindle@icloud.com (the controller of your personal data).

What we store, and why

Account. Your email address is your account key. There are no passwords: signing in works by emailing you a verification link, valid for 10 minutes. We also store the Kindle email address you send to; an identifier for each extension or app install you use; any article shelves you follow; and, on Android, a notification token from the app, used only to tell you when a digest is delivered or a scheduled send fails.

Activity. For every article you send, download or upload, we keep its title and address (or filename for an upload), when it happened, its status, the Kindle address it went to, a word count, a cover image, and its detected language. This history stays until you delete your account.

Page content. When you send or download an article with the Chrome or Firefox extension, the extension also sends us a copy of the page as your browser shows it, with its address, every time. We use it only when our own server cannot fetch the page itself; most of the time we never look at it. That copy can contain anything the page shows, so only send pages you are happy for us to process. For an ordinary send or download it is used in memory and discarded once the request finishes; for a scheduled send or digest, we keep it until the send finishes or fails, and in any case within 7 days. It is used only to build your book, never to sell, advertise or profile you, and never read by a person except to fix a reported problem, for security, or where the law requires.

Premium. When you support us through Buy Me a Coffee, we store your transaction details (id, amount and currency), your supporter name and email, any message you left, how many coffees you have bought, your Premium subscription and its start and expiry dates, whether a renewal reminder has been sent, and, if a purchase is refunded, a record of that. We match this to your account by email address.

Server logs. Our API keeps a log of each request: the time, the page or feature you asked for, how it went, and how long it took. Some entries include your IP address, approximate country, and browser or app version, and some record your account email or Kindle address, for example when we send a sign-in link or deliver a document. We use logs only to run, secure and troubleshoot the service, and keep them for up to 365 days.

Why we use it, and on what basis

Account and activity data: to sign you in, build and deliver your articles, and show your history, because that is the service you asked for. Premium and payment data: to match your purchase, send receipts and remind you before it expires, under our contract with you and our legal record-keeping duties. Your notification token: to alert you about digests and failed sends, based on your consent, which you can withdraw any time in the app or your phone's settings. Server logs and rate limits: to keep the service secure and working, our legitimate interest and a legal duty. We do not use your data for advertising or profiling, and we make no automated decisions about you with a legal or similarly significant effect.

Who else handles it

Amazon. Send to Kindle works by emailing the EPUB we build, and the document itself, to your @kindle.com address.
Apple iCloud Mail. All our mail, including Kindle deliveries, sign-in links and Premium receipts, goes out through iCloud from toKindle@icloud.com.
Buy Me a Coffee. Handles payments and receives the transaction data above. Its widget only loads, and can only set its own cookies, once you accept our cookie banner; change your choice any time from Cookie settings in the footer.
Google. Firebase Cloud Messaging sends push notifications to the Android app; a failed-send notification includes the article's website name. The website itself loads no Google script and sends Google nothing.
Cloudflare. Sits in front of our API.
MongoDB Atlas. Hosts our database, on Google Cloud in Mumbai, India.
Render and Hetzner. Render hosts the website; Hetzner hosts the API, on a server in Nuremberg, Germany.
Our own email. Operational alerts, such as a payment we could not match to an account, go to the operator's own email address and can include a supporter's name, email and message.
AI-assisted tools. We sometimes use AI-assisted tools to help run and debug the service, which can involve them reading our database or logs.

So your data moves between countries. The database is in India, the API that processes your requests runs in Germany, and Amazon, Apple, Buy Me a Coffee, Google and Cloudflare handle it wherever they operate, which includes the United States. Each of them works under its own published terms and data protection commitments.

What we do not do

We do not sell your personal information, and run no advertising or analytics on the site; the only third-party script is the Buy Me a Coffee widget above, and only once you accept it. We do not share your data with anyone beyond the list above, except where the law requires it, such as a court order or a lawful government request, or to protect the rights, safety or property of our users, the public or us. There is no password to store, because there isn't one.

How long we keep it

Files you upload and files we build: deleted within two days of delivery. Page copies kept for a scheduled send: deleted within 7 days, or sooner once the send finishes or fails. Server logs: up to 365 days. Your account, Kindle address, device identifiers, notification token and send history: for as long as your account exists. Premium purchase records: kept for as long as tax and accounting law requires, even after you delete your account. See Your rights below for how deletion works.

Your rights

Deleting your account. Email tokindle@icloud.com from the address on your account. You do not need to give a reason. Within 30 days of confirming it is you, we delete your account, Kindle address, send, download and upload history, any files still on our server, and your device and notification identifiers. We keep only Premium purchase records, for as long as tax law requires, and server logs, deleted as above.

Other rights. You can ask for a copy of your data, ask us to correct it, or ask us to stop using it for a particular purpose. In the EU, UK or similar places, you can also object to processing based on our legitimate interests and ask us to restrict it. In India, you can nominate someone to exercise these rights on your behalf if you die or become unable to. Where we rely on your consent, you can withdraw it any time, as easily as you gave it. Email tokindle@icloud.com from your account address to use any of these rights; we reply within one month, and it is free.

Cookies

The website itself sets no cookies. It keeps a few temporary items in your browser's own storage, such as your Discover results and what you have already sent, that never leave your device. The Buy Me a Coffee widget (see above) is the only third-party script, gated behind our cookie banner. Change your choice any time using Cookie settings in the footer.

How we protect it

Connections to our website and API are encrypted. Signing in uses one-time email links instead of passwords, and those links expire quickly. Access to our database and servers is restricted and protected by credentials. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.

Children

You must be at least 13 to use To Kindle. If you are under 18, or under the age of majority where you live, you need a parent or guardian's permission. We do not knowingly collect personal data from anyone under 13. If you believe a child has given us personal data, email tokindle@icloud.com and we will remove it.

Complaints

Please contact us first, using the details below. If you are not satisfied, you can also complain to a data protection authority: in the EU, the authority in the country where you live or work; in the UK, the Information Commissioner's Office; in India, the Data Protection Board of India.

Changes

We may update this policy as the service changes. The "last updated" date at the top reflects the most recent change. If we make a material change, such as a new use of your data or a new kind of provider, we will email you at your account address at least 30 days before it takes effect. If we are ever acquired or merge with another company, this policy is what would carry over, and the new owner must continue to follow it for data collected under it.

Contact and grievance officer

Questions about this policy, or a deletion request: tokindle@icloud.com. Grievance contact: tokindle@icloud.com. We acknowledge complaints within 48 hours and aim to resolve them within one month.