Privacy Policy

This is a working draft, pending legal review, and is not yet a final privacy notice. The English text is the sole authoritative version. It explains, in plain terms, what personal data Foxing collects, why, and — importantly — that your conversations with the AI companion are processed by a provider outside your country.

1. Who is responsible for your data

Foxing operates the reading service at foxing.ai and decides how the personal data described here is used.

[TODO — legal: the data-controller legal entity, its address, and (where required) an EU/UK representative are not yet decided. Insert here before publication.]

2. What we collect

• Account email. When you create an account we store your email address to sign you in and to contact you about the Service.
• Reading progress. We record which book and page you have reached so you can pick up where you left off and so the companion knows how far you have read.
• Highlights and notes. The passages you highlight and the notes and favourites you save are stored so you can return to them.
• AI conversations. The messages you exchange with the reading companion, and the book passages you attach to them, are stored so the conversation persists and so the companion has context.
• Basic technical data. Standard information needed to run and secure the Service, such as log and device data.

3. How we use it

We use the data above to:

• provide the reading experience — remembering your place, notes, and conversations;
• operate the AI companion, which requires sending your messages and the relevant passage to our model provider (see the next section);
• run, secure, debug, and improve the Service;
• communicate with you about your account and support requests.

We do not sell your personal data, and we do not show advertising.

4. AI processing and cross-border transfer

Please read this carefully. The reading companion is powered by a third-party model provider, DeepSeek, which is based in China. When you chat with the companion, the content of your messages and the relevant book passage are sent to DeepSeek’s systems for processing so a response can be generated. This means your conversation content is transferred across borders and processed outside your own country — including in China — regardless of where you are located.

If you are in the European Economic Area or the United Kingdom, this is an international transfer of personal data. We will put in place an appropriate transfer mechanism and safeguards as required by law. If you would rather your messages were not processed this way, do not use the AI companion features.

[TODO — legal: confirm the exact transfer mechanism (e.g. Standard Contractual Clauses and/or explicit consent) and confirm DeepSeek’s own retention and model-training terms for API content, then state them here precisely.]

5. Uploaded files

Uploading your own files is not yet available on Foxing. This paragraph is drafted in advance and will be revised before that feature launches. When it is available, files you upload would be stored privately for your own reading and processed only to provide the reading and AI features to you — not made public and not used to train models.

6. How long we keep it

We keep your data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep some of it to comply with the law.

[TODO — legal: specify concrete retention periods per data category once decided.]

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. Where processing relies on your consent, you may withdraw it at any time. To exercise any of these rights, contact us at [email protected]. You may also have the right to complain to your local data- protection authority.

8. Security

We take reasonable technical and organisational measures to protect your data. No online service can be perfectly secure, but we work to limit access to your data to what is needed to run the Service.

9. Children

The Service is not directed at children below the age of digital consent in their jurisdiction, and we do not knowingly collect their personal data.

10. Changes and contact

We may update this policy as the Service evolves; we will update the date at the top and, for material changes, take reasonable steps to notify you. For any privacy question or request, write to [email protected].