GlagoliPrivacy Policy
What we keep, why, for how long, and who we give it to.
In force from 23 August 2026
This is a translation. The original of this policy is in Bulgarian, at Политика за поверителност. If the two ever differ, the Bulgarian text is the one that applies.
In short: the files and photos you upload are kept only while your book exists and are deleted together with it. Your content is accessible only to you. We do not use it to train artificial intelligence. We do not sell data. Your card does not pass through us.
1. Who processes the data
The controller is Pixel Lab EOOD (registered as „Пиксел Лаб“ ЕООД), UIC 205472124, 24 Slavyanska Street, Gorna Oryahovitsa, Bulgaria.
Questions about this policy: office@glagoli.app.
2. What we keep, why and for how long
| Data | Why | For how long |
|---|---|---|
| Email address (and an identifier from Apple or Google, if you sign in with them) | So that you have an account and access to what you bought | For as long as you have an account |
| The text of your books and the audio produced | So that you do not pay again when you go back | For as long as you have an account |
| How far you have got, notes, questions you asked | So that you can continue from there | For as long as you have an account |
| The files and photos you upload | Only to extract the text | Until you delete the book or your account |
| Hour balance and purchase records | So that the service works, and because the law requires it | For the retention period for accounting documents |
| Technical records (errors, request time, device type) | To fix defects and protect the service from abuse | Up to 30 days |
Once something is removed from storage, the storage provider (Google Cloud Storage) keeps it in a recoverable state for a further 7 days and only then destroys it permanently. Database backups are also kept for 7 days. The audio produced is removed from storage within 37 days of the book being deleted, because the same recording may serve more than one person and is removed only once nobody uses it any more.
3. On what legal basis
- Performance of a contract — the account, the purchases, the text extraction and the voicing. Without them the service does not exist.
- Legal obligation — the accounting and tax records.
- Legitimate interest — the technical records, security, and protection against abuse.
We do not send marketing messages without your consent and we do not profile users.
4. Who we give it to
For the product to work, part of the content passes through outside providers. They work on our instructions and have no right to use the content for their own purposes.
| Provider | What for | Where |
|---|---|---|
| Google Cloud | Servers, database, audio storage; reading photos and scans | EU (Belgium) and USA |
| OpenAI | Voice synthesis and preparing the text for reading | USA |
| Anthropic | The answers to your questions about what was read | USA |
| Upstash | Queue for processing the jobs | EU (Belgium) |
| Namecheap (Private Email) | Sending sign-in codes and letters from us | USA |
| Apple, Google | Payments and distribution of the app | EU and USA |
Some of the providers are outside the European Union. The transfer takes place on the grounds GDPR provides for third countries — standard contractual clauses or an adequacy decision.
We do not sell or rent data to third parties for their own purposes.
5. Artificial intelligence and your content
We do not use your content to train models — neither the texts you upload nor the questions you ask. We have instructed our providers to do the same.
The answers to your questions are based on the text you have already heard, and do not reveal what comes later in the book.
6. Payments
Payments go entirely through the App Store and Google Play. We do not see and do not store card data. From the store we receive a confirmation of the purchase and a transaction identifier — that is all.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection.
- Deleting the account — from the settings in the app. It deletes everything of yours.
- Access and a copy of the data — write to office@glagoli.app; we answer within one month.
You also have the right to complain to the Commission for Personal Data Protection of Bulgaria (2 Prof. Tsvetan Lazarov Blvd, Sofia, cpdp.bg).
8. Security
The connection to the app is encrypted. Access to the database is restricted and the audio is delivered over temporary addresses that expire. Keys and passwords are kept in a protected store, separate from the code.
9. Children
The service is not intended for children under 16 and we do not knowingly collect data from them.
10. Changes
If we change this policy in a way that affects you, we will tell you before the change takes effect.
Terms of Use
What you buy and on what terms is described in the Terms of Use.