Privacy Policy

This notice explains, in plain terms, what personal data Foxing collects, why, and — importantly — that conversations with the AI companion are processed by a provider outside your country. The English text is the sole authoritative version.

1. Who is responsible for your data

The data controller for Foxing is Xu Shan, an individual operating the Foxing service at https://foxing.ai. Public contact address: Yangpu District, Shanghai, China. Privacy and support requests: [email protected].

Roles at a glance: Foxing / Xu Shan controls account, reading, conversation, and credit-wallet data for the Service; Creem acts as Merchant of Record for checkout, tax calculation, receipts, and related payment flows; DeepSeek processes AI message content to generate companion replies.

2. What we collect

• Account email. When you create an account we store your email address to sign you in and to contact you about the Service.
• Reading progress. We record which book and place you have reached so you can pick up where you left off and so the companion knows how far you have read.
• Highlights and notes. The passages you highlight and the notes and favourites you save are stored so you can return to them.
• AI conversations. The messages you exchange with the reading companion, and the book passages you attach to them, are stored so the conversation persists and so the companion has context.
• Basic technical data. Standard information needed to run and secure the Service, such as logs, approximate request metadata, and device or browser data.
• Credits and orders. We keep your credit balance and usage ledger, the pack and price you selected, order status, amounts, currency, and identifiers supplied by our payment provider. We do not receive or store your full card number.
• Private uploads. EPUB files you upload, and processing metadata needed to render them for you.

3. How we use it

We use the data above to:

• provide the reading experience — remembering your place, notes, and conversations;
• operate the AI companion, which requires sending your messages and the relevant passage to our model provider (see the next section);
• run, secure, debug, and improve the Service;
• measure AI usage, maintain your credit balance, fulfil purchases, prevent duplicate charges, and reconcile refunds or disputes;
• communicate with you about your account and support requests.

We do not sell your personal data, and we do not show advertising. Where applicable law requires a legal basis, we rely on performance of a contract (providing the Service you request), legitimate interests in securing and improving the Service, and legal obligations for tax and accounting records. Where we rely on consent (for example certain optional communications), you may withdraw it at any time.

4. AI processing and cross-border transfer

Please read this carefully. The reading companion is powered by a third-party model provider, DeepSeek, which is based in China. When you chat with the companion, the content of your messages and the relevant book passage are sent to DeepSeek’s systems for processing so a response can be generated. This means your conversation content is transferred across borders and processed outside your own country — including in China — regardless of where you are located.

If you are in the European Economic Area, the United Kingdom, or another region with international-transfer rules, this is an international transfer of personal data. We rely on appropriate safeguards available under applicable law, which may include Standard Contractual Clauses and/or your informed use of the AI features after this disclosure. DeepSeek processes content under its own terms as an AI service provider; Foxing does not use your private uploads or conversation content to train Foxing’s own models. If you would rather your messages were not processed this way, do not use the AI companion features — you may still read public-domain books.

5. Payments through Creem

Creem acts as Merchant of Record for Foxing credit purchases. When you begin checkout, we send Creem the email associated with your verified Foxing account, the product selected, our internal order identifier, and the information needed to complete and reconcile the transaction. Creem independently collects the billing and payment details needed to process the purchase, calculate local taxes, prevent fraud, and provide receipts.

Creem may process this information in countries other than your own under its own privacy notice and legal obligations as Merchant of Record. Foxing receives transaction identifiers and financial status updates, including payment, refund, and dispute events, but does not receive your full payment-card details. See Creem’s privacy notice at https://www.creem.io/privacy.

6. Uploaded files

EPUB files you upload are stored privately for your own reading and processed only to provide the reading and AI features to you. They are not made public, are not offered for download or sharing, and are not used by Foxing to train models. Deleting a private book removes it from your library immediately and queues its stored files for deletion.

7. How long we keep it

We keep personal data only as long as needed for the purposes above:

• Account, reading progress, highlights, favourites, and AI conversations: for as long as your account remains active. After you delete your account or we permanently close it, we delete or anonymise these records within 30 days, except where a longer period is required below.
• Private EPUB files: while the book remains in your library; after removal, stored files are queued for deletion and removed from active storage within 30 days.
• Security and operational logs: typically up to 90 days, unless needed longer to investigate abuse or security incidents.
• Orders, payments, refunds, disputes, credit ledger entries, and tax-related records: up to seven (7) years, or longer if a legal claim, audit, or mandatory retention rule requires it. Where practical, the direct account link is removed while the financial record is retained.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. Where processing relies on your consent, you may withdraw it at any time. To exercise any of these rights, contact us at [email protected]. You may also have the right to complain to your local data- protection authority.

9. Security

We take reasonable technical and organisational measures to protect your data. No online service can be perfectly secure, but we work to limit access to your data to what is needed to run the Service.

10. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data, contact [email protected] and we will take appropriate steps to delete it.

11. Cookies and similar technologies

We use cookies and similar technologies that are necessary to run the Service — for example to keep you signed in, remember locale preferences, and protect sessions. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in or other core features from working.

We also use Google Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to understand how the Service is used — such as page views, referral sources, device and approximate region. Google Analytics uses cookies and similar technologies and processes this data on Google's servers; it does not receive your name, email or reading history from us. You can opt out of Google Analytics tracking across websites with the browser add-on provided by Google (Google Analytics Opt-out Browser Add-on), and you can block analytics cookies in your browser settings. Where the GDPR applies, this processing is based on our legitimate interest in improving the Service; Google may transfer this data to countries outside the EEA, relying on suitable safeguards (including Standard Contractual Clauses).

12. Changes and contact

We may update this policy as the Service evolves; we will update the date at the top and, for material changes, take reasonable steps to notify you. For any privacy question or request, write to [email protected].