Privacy Notice

1. Who we are

TBR Fate is operated by Brianca Curry ("we", "us"), trading as TBR Fate. Brianca Curry is the data controller for the personal data described in this notice and decides how and why it is processed.

2. Data we collect and why

• Account data (email address, password credentials, display name) — to create and secure your account. Legal basis: performance of our contract with you.
• Library content (books, authors, shelves, ratings, moods, notes, reading goals and history) — to provide the core reading and randomizer features. Legal basis: contract performance.
• Support messages — to answer your questions. Legal basis: legitimate interests in supporting our users.
• Usage and technical data (device identifiers, IP address, log and error data) — for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Subscription status — to unlock Premium features. Legal basis: contract performance. Payment card details are handled by our payment provider and are never stored by us.

3. Who we share data with

• Service providers and subprocessors that host our database, authentication and application infrastructure.
• Paddle.com, our Merchant of Record, for the sale of Premium, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities or regulators where we are required to do so by law.

We do not sell your personal data.

4. Retention

We keep your account and library data for as long as your account is active. If you delete your account or it becomes inactive, we delete or anonymise the associated data once it is no longer needed, except where we must retain records to meet legal, tax or accounting obligations.

5. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You may also complain to your local supervisory authority. We aim to respond to requests within one month. Contact us through the app's support channel to exercise these rights.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database permissions, so that each account can only reach its own data.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and remember your theme preference. We do not use advertising cookies. You can clear or block them in your browser settings, though the app may not work correctly without the essential ones.

9. Changes

We will update this notice as our service changes and will revise the date above when we do.