Privacy Policy

What data we collect

If you're just listening to samples without an account, we don't collect any personal data from you — unless you've accepted cookies, in which case we collect anonymous, aggregated usage analytics (pages visited, browser type, approximate region), never linked to your identity.

If you create an account — with an email address and password, or with a Google account — we store your email address and, if you set a password, a securely hashed version of it handled by our authentication provider. If you sign in with Google, we store the name and profile photo Google provides us. You can also set a username, a display name, and preferred book categories.

We also store your activity on the platform: which books you've acquired for free and which you've marked as favorites — so your experience stays consistent every time you visit Akoofy.

If you use the contact form, we store the name, email address, and message you submit, plus an anonymous hash of your IP address, so we can reply to you and protect the form from spam.

How we use your data

We use your data solely to run the platform: recognizing you when you sign in, showing you your library and favorites, and recommending books based on your preferences. We don't sell, rent, or share your personal data with third parties for advertising purposes.

If you accept cookies, we use PostHog, an analytics service hosted in the EU, to understand how Akoofy is used — which pages are visited, roughly where visitors come from, and how the platform performs. This data is anonymous and aggregated, is never linked to your account, and we never sell or share it for advertising. You can withdraw this consent at any time from the "Cookie settings" link in the footer.

Who processes data on our behalf

To run Akoofy, we work with the following providers, who process data on our behalf under strict contractual protections:

Supabase hosts our database and handles your sign-in — including securely storing your password hash — on servers within the European Union (Frankfurt, Germany). Cloudflare (via R2) hosts the audio files and book covers. Algolia powers search — when you search on Akoofy, your search term is sent to Algolia to find results, but isn't linked to your account. Brevo sends authentication emails — account confirmation and password-reset links. PostHog provides anonymous usage analytics, but only after you accept cookies. We also use Discord, our private server, to receive notifications of new contact-form messages and new sign-ups. Vercel hosts our website. If you choose to sign in with Google, Google processes its own data according to its own privacy policy.

Cookies and local storage

We use one strictly necessary session cookie to keep you signed in — without it, sign-in wouldn't work. A second equally necessary cookie remembers your language choice, so the site stays in the language you picked.

On your first visit, you'll be asked for your consent before any optional cookies are set. If you accept, an anonymous analytics cookie is set for PostHog; your choice itself is stored in a small consent cookie (akoofy_consent). You can change or withdraw your choice at any time from the "Cookie settings" link in the footer. We don't use advertising cookies.

Your dark/light theme preference and your audio player's state (what you were listening to, and where) are stored locally on your device (localStorage) — they never reach our servers.

How long we keep your data

We keep your account data for as long as your account stays active. You can delete your account at any time from your account settings — deletion is immediate and permanent.

Contact-form messages are kept only for as long as needed to answer them and are then deleted.

Your rights

As a data subject in the European Union, you have the right to access, correct, delete, restrict the processing of, port, and object to the processing of your data. You can exercise any of these rights by contacting us at support@akoofy.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you believe our processing of your data violates the law.

Children

Akoofy isn't directed at children under 16, and we don't knowingly collect data from children of that age without parental or guardian consent.

Changes to this policy

If we materially change this policy — for example, by adding a new service provider or a new way of processing data — we'll update the "Last updated" date at the top of this page and, if the change is significant, notify you directly.