Privacy Policy

Effective September 25, 2026

Flashlit is operated by AIFELIX INC. (“Flashlit,” “we,” “us”). This policy describes how we handle information when you use our website, apps, reading and AI features, and optional WhatsApp account linking. Features and storage behavior vary by app version.

For privacy questions, access requests, or deletion requests, contact admin@flashlit.ai.

1. Information we process

• Account information: your account identifier, email address, profile details, and information provided by your sign-in provider. Flashlit uses Auth0 for authentication. Social sign-in providers also handle information under their own policies.
• Books and reading activity: uploaded or imported books, book metadata, folders, favorites, reading positions, passage references, and reading preferences.
• Content you provide: questions, AI conversations, selected passages, notes, drafts, and support correspondence. In the current web app, notes and scratchpad drafts are stored in your browser; clearing browser data can remove them. Books and supported conversations are also processed or stored by our services.
• WhatsApp linking information: the phone number you submit, your account identifier, verification-request times, hashed verification codes, verification attempts, account-link status, and message-event identifiers or metadata used to operate the connection.
• Technical information: information needed to deliver, troubleshoot, and secure the service, such as network addresses, request times, device or browser information, and error or security events.
• Optional features: where you use audio, voice, image, or purchase features, the relevant content or transaction identifiers may be processed to provide that feature. For example, voice features process audio and transcripts, and narration processes book text and generated audio. Availability depends on the app and service configuration.

Please avoid submitting sensitive personal information that is not needed for your request, including information about other people. Only upload material you have the right to use.

2. How we use information

We use information to authenticate you, provide your library, process imports, save supported reading preferences and conversations, answer questions, compare selected books, provide available playback features, and respond to support requests. We also use it to verify ownership, connect WhatsApp at your request, prevent misuse, enforce access controls, diagnose failures, and operate the service.

3. AI processing

AI features process your question, relevant book content, conversation history, and other context needed for the feature. Processing can include preparing a book for search or later retrieval. Multi-book conversations may combine context from the books you select.

Relevant information may be transmitted to external AI and infrastructure providers that support these features. Provider selection can vary by feature and service configuration. Such processing is not confined to your device. Providers may retain information under their applicable service terms and settings; Flashlit does not represent that all provider processing has zero retention.

Flashlit does not use your books, questions, conversations, or other personal content to train AI models. Preparing content for retrieval or using it to generate an answer is different from training a model. This statement describes Flashlit’s use; third-party processing is also governed by the applicable provider’s terms and settings.

4. WhatsApp account linking

Linking WhatsApp is optional. When you enter your number and select Send code, Flashlit sends your number and a one-time code to Meta’s WhatsApp Business Platform for delivery. You finish linking by entering the code in Flashlit. Meta and WhatsApp process information under their own terms and privacy policies.

Codes are valid for five minutes. Flashlit stores a keyed hash of the verification code in its linking database rather than the code itself. We limit requests and incorrect attempts. Expiry makes a code unusable; it does not mean every related record is immediately erased.

You can disconnect WhatsApp in Flashlit’s settings. Disconnection revokes the link but does not automatically erase historical linking records, your Flashlit account, or messages retained by WhatsApp or your device. See our deletion-request instructions.

Current scope: Flashlit provides WhatsApp account-verification codes. Selected, linked test accounts may also participate in a text-only Librarian pilot, which can remain enabled until disconnected or disabled. Text sent during that pilot is processed by Flashlit’s AI service and its model provider; conversations may be retained by the agent service as described above. The gateway keeps diagnostic event identifiers and outcomes, not message text. Audio, images, and other attachments are not processed by this pilot. Automated conversations are not generally available.

5. Disclosures to others

We disclose information as needed to providers supporting authentication, hosting, databases, AI processing, messaging, and any optional feature you use. This includes Auth0 for sign-in and Meta for WhatsApp delivery. Our landing page loads fonts from Google, which requires your browser to connect to Google’s font services.

Flashlit does not sell personal information or share it for advertising purposes. Operational processing by service providers is described above. We may disclose information when required by law or when necessary to investigate misuse, protect rights and safety, or address a legal dispute.

6. Browser and device storage

Flashlit uses browser or device storage for sessions, reading preferences, and locally saved content. Authentication providers may also use cookies or similar technologies. Clearing browser data can sign you out or remove local content; it does not erase information held on our servers. Conversely, server-side deletion may not remove copies stored on an offline device. You can manage local data through your browser or device settings.

7. Retention and deletion

Retention depends on the information and its purpose. Account, library, and conversation information is retained to provide the service and make saved content available. Security, operational, and support records may be retained to troubleshoot problems, prevent abuse, address requests, resolve disputes, and meet legal obligations.

Current deletion controls have limits. Removing a book from the bookshelf currently marks it as removed rather than erasing all underlying files and derived records. Removing a conversation or account does not necessarily erase every related message, index, media file, or backup. WhatsApp disconnection revokes access rather than erasing all historical records. These actions are distinct from a comprehensive deletion request.

For a deletion or access request, follow the instructions below. We review the scope, verify ownership where necessary, and explain applicable limitations or retention requirements. Backups, provider-held records, and records required for security or legal reasons may follow different retention processes. We do not promise an immediate purge of every copy when you use an in-app delete control.

8. Your choices and privacy requests

Email admin@flashlit.ai with the subject “Flashlit privacy request.” Identify your account by its sign-in email and describe whether you want access, correction, deletion, or help disconnecting WhatsApp. Do not send passwords, access tokens, or verification codes.

We may request information needed to confirm you control the account. We will handle your request according to applicable law and explain any information that cannot be deleted and why. Disconnecting Flashlit does not delete your Meta or WhatsApp account. Detailed instructions are available on our Data Deletion page.

Depending on where you live and the laws that apply, you may have rights to access, correct, delete, or obtain a copy of personal information, or to restrict or object to certain processing. Where processing relies on consent, you may withdraw it. You may also have the right to complain to a privacy regulator. Contact us to exercise these rights.

9. Security and international processing

We use safeguards intended to protect information, including access controls and protection of service credentials. No service can guarantee absolute security. AI processing is not an end-to-end encrypted interaction solely between your device and the model.

Flashlit and its providers may process information in countries other than where you live. Privacy laws and protections can differ between countries. Contact us if you need information about processing relevant to your account or request.

10. Teenagers and children

Flashlit is intended for adults and teenagers aged 13 and above, subject to any higher applicable minimum age. It is not intended for children under 13. Where parental or guardian authorization is legally required, the affected use must not begin without that authorization. Individual features and providers may impose additional age restrictions.

If you believe a child below the applicable minimum age has provided personal information, contact admin@flashlit.ai so we can investigate and take appropriate action.

11. Changes and contact

We will post changes with an updated effective date and provide additional notice or obtain consent where required for a material change in how information is used.

AIFELIX INC. · Flashlit
Privacy and deletion contact: admin@flashlit.ai