Privacy notice.

This notice explains how we use personal data for accounts, reading progress, subscription access and support.

Effective 2026-09-02

Controller

Joao Vitor Humenhuk Achutti trading as Ancient Knowledge Club, Allenby St 38, Tel Aviv-Yafo, Israel. The operator controls the product's account, reading and support data. Send privacy requests to ancientknowledgeclub@thesmios.com.

Account data

Neon Auth handles email verification, sign in and recovery. We use the account identifier, email, display name, session data and security events to provide and protect the account.

Reading data

We store book and reading identifiers, completion percentage, text preference and update time to synchronise progress. We do not need reading annotations for the first release.

Billing data

Paddle acts as Merchant of Record. We store Paddle customer and subscription identifiers, status, price, billing period, webhook identifiers and checkout consent. We do not store complete card details.

Purposes and legal bases

We process account and access data to perform the subscription contract, security data for legitimate interests, records required by law for legal obligations, and optional data only with the applicable consent.

Retention

Reading progress and profile preferences remain until account deletion. Application security records have a 30-day limit. Closed privacy cases have a 24-month limit. We retain necessary transaction and consent evidence for seven years unless a legal hold applies. These are our retention limits, not a claim that every period is required by law. Browser reading preferences remain until you clear site data.

Service providers

Vercel hosts the application. Neon provides the database and authentication. Google provides support email. These providers handle service data under their applicable data processing terms, with separate responsibilities for their own account and security processing. Paddle acts separately as Merchant of Record and as controller for its payment, tax, fraud prevention and regulatory processing.

Current availability

Free samples are available. Account registration and purchases remain closed while production email, backup restoration and provider checks are completed. We will update this notice when those services open.

International processing

The operator is in Israel. Hosting and database services use a Frankfurt region, with provider support and other operations potentially in other countries, including the United States. Provider contracts and applicable transfer safeguards must cover each transfer. We do not claim that selecting a European region keeps all processing in Europe.

Your rights

Depending on location, you may request access, correction, deletion, restriction, portability or objection, and may complain to the relevant regulator. Identity checks stay proportionate to the request.

California

The first release does not sell personal information or share it for cross context behavioural advertising. A notice at collection will identify categories and purposes wherever California law requires it.

No optional analytics

Analytics, advertising, session replay and social tracking are disabled. Adding any optional technology requires an updated notice and consent assessment before activation.