1. Introduction and Commitment
Epigram ("Epigram", "we", "us") is a reading platform made up of this website, the Writing Studio and the mobile app. We do not sell your data to advertisers and we do not track you for advertising. This policy explains what data we collect and why, which service providers process it, and what your rights are.
2. Information We Collect
- Account Credentials: Your email address, chosen username, and display name. When authenticating via Google OAuth, standard basic identity fields are transmitted securely via Supabase Auth.
- Creator Content & Drafts: Essays, micro-cards, quotes, and drafts authored in the Creator Studio. Private drafts are protected via Supabase Row-Level Security (RLS) and accessible only to you.
- Reading Preferences: Your selected reading atmosphere (Paper / Night mode) and language choice (EN / TR), stored locally to ensure a seamless aesthetic experience.
- Reading & Activity: Which pieces you read and finish, your likes, saves, comments, follows, collections and notebook notes. If you read without an account, an anonymous per-device ID is used to count reads; guest notes and saves stay on your device only.
- Notifications: If you allow notifications, your device’s push token and language preference are shared with our notification provider (OneSignal) so we can send them.
- Zero Ad Tracking: Epigram employs zero third-party behavioral advertising trackers, data brokers, or monetization profiling scripts.
3. AI Processing
The "Format with AI" and "Split into Cards" tools in the Writing Studio use Google’s Gemini API to format text and split it into cards. No reader data is ever sent to the AI.
Your text is sent only when you press one of these tools, and only that text. You can write and split text into cards without AI, too.
We currently use the free tier of the Gemini API. Under Google’s terms, text sent on this tier may be used by Google to improve its products. Please do not send confidential or personal text that you do not intend to publish to the AI tools.
Requests go over encrypted connections through our own server; the API key is never on your device or in your browser. A per-person daily limit prevents abuse.
4. Service Providers & Security
We use the following service providers to run Epigram; your data may be processed on their servers outside your country:
- Supabase: database, sign-in and server functions.
- Vercel: website hosting.
- Google: AI tools (Gemini API) and the "Sign in with Google" option.
- OneSignal: mobile notifications.
The database enforces row-level security (RLS): everyone can access only their own private data, and fields such as roles and counters are protected on the server.
5. User Rights & Data Ownership (GDPR / CCPA / KVKK)
You maintain absolute dominion over your personal information. At any moment, you may exercise:
- Access & Portability: You can ask us for a copy of the data we hold about you by email.
- Rectification: Modify and correct your account records and profile information.
- Erasure (Right to be Forgotten): You can permanently delete your account and all data linked to it yourself from Account & Security in the mobile app, or ask us to do it by email. Step-by-step guide
6. Contact & Data Protection
For privacy inquiries, rights enforcement, or compliance questions, please contact our team directly: