Privacy Policy
This Privacy Policy explains how Aboot handles personal data when you use the Aboot mobile app, contact us, or visit this website. It should be read with our Terms of Service, Subscription Terms, and Account and Data Deletion page.
1. Who is responsible
Aboot is a product of Luminosity, SIA, a Latvian limited liability company registered under number 40203768292, with its registered address at Liepājas iela 34, Kuldīga, Kuldīgas novads, LV-3301, Latvia.
Luminosity, SIA is the controller of the personal data described here. Contact us at help@aboot.app, including for data-protection requests.
2. Personal data we handle
Depending on how you use Aboot, we may handle:
- Account data, such as your email address, account identifier, sign-in method, verification status, display name, preferences, and account settings. If you use a third-party sign-in service, we receive the information it makes available to us.
- Subscription data, such as your plan, product, entitlement, renewal, and expiry status. The app store processes your payment details; Aboot does not receive your full card or bank information.
- Content you provide, such as uploaded documents, private summary notes, playlist information, author narration submissions, reports, support messages, and information you provide about rights or authorship.
- Generated and saved content, such as summaries, audio, images, metadata, playlists, saved items, and associated processing or review status.
- Use data, such as listening progress, playback position, saves, follows, searches, feature use, and related timestamps.
- Device and technical data, such as notification tokens, app and operating-system information, request and security records, error information, and diagnostics.
Some information comes from third parties, including app stores and sign-in services, publication and open-access sources, podcast publishers, and other content providers.
An email address and authentication information are required to create an account. Other information is required only when you choose the relevant feature. If you do not provide required information, we may be unable to provide that feature.
Public content
Content is made public only through the sharing settings available in the service. A generated summary is eligible for public Discovery only if Aboot verifies that the source is open access and the content passes applicable checks. Public contributions may be shown without publicly naming the contributing account, although we retain the account connection for administration, safety, rights, and deletion purposes.
Private notes
Notes you save on a summary are linked to your account and are not included in its public page or in public playlists. Saving a note requires connectivity. You can edit or delete your notes and include them in your account data export. If you choose to share a note using your phone’s share sheet, its text is sent to the recipient or service you select under that service’s terms. Making the summary public does not make your notes public.
Device and third-party activity
The app may store downloads and playback information on your device. When you access third-party podcasts, publications, or other linked content, the relevant third party may receive ordinary network and request information under its own privacy notice.
We do not sell personal data, use advertising identifiers, or track you across other companies’ apps and websites for advertising.
3. Why we use personal data
We use personal data to:
- provide and secure accounts and requested features;
- generate, deliver, store, and share content at your direction;
- maintain subscriptions, preferences, listening progress, and support;
- prevent fraud, abuse, rights violations, and security incidents;
- maintain and improve the reliability and quality of the service; and
- comply with legal obligations and enforce our terms.
Where the GDPR applies, our legal bases are performance of our contract with you, your consent where requested, our legitimate interests in operating and protecting the service, and compliance with legal obligations. You may withdraw consent at any time without affecting earlier lawful processing.
4. AI and automated processing
Aboot uses automated systems to process source material, generate content, support search and recommendations, and apply service or safety checks. Human review may be used for submitted or reported content. These systems do not make decisions about you that produce legal or similarly significant effects.
Generated content can be inaccurate or incomplete. See our AI and Academic Content Notice.
5. Who receives personal data
We disclose personal data only as needed to operate the service or meet legal obligations. Recipients may include:
- providers of hosting, storage, authentication, communications, security, support, content processing, and artificial-intelligence services;
- Apple, Google, and other providers involved in app distribution, sign-in, subscriptions, payments, or notifications;
- publication, open-access, podcast, and other content services used at your request;
- professional advisers, insurers, auditors, regulators, courts, and law-enforcement authorities where permitted or required by law; and
- a buyer or successor in a genuine corporate transaction, subject to applicable law.
Some recipients act as independent controllers and apply their own privacy notices. Other providers process personal data for us under contractual safeguards. Contact us if you need more information about a recipient relevant to your data.
6. International transfers
Some recipients may process personal data outside the European Economic Area. Where a restricted transfer occurs, we use an applicable adequacy decision, European Commission Standard Contractual Clauses, or another lawful safeguard, with supplementary measures where appropriate. You may contact us for information about the safeguard relevant to a particular transfer.
7. How long we keep personal data
We keep personal data only for as long as needed for the purposes described here. Retention depends on the type of data, whether your account or the relevant content remains active, legal and contractual requirements, security and dispute needs, and technical backup cycles.
Uploaded source documents are intended to be removed after the requested processing is complete, unless continued storage is requested or legally required. Account content is generally kept until you delete it or your account. Limited transaction, security, dispute, and deletion records may be retained where reasonably necessary or required by law. Backups are removed through normal retention cycles and are not used to continue a deleted account.
When an account is deleted, we remove or schedule removal of account-linked personal data and user-generated content from the active service, subject to the limited exceptions above. Anonymous statistics that no longer identify or relate to you may remain.
8. Your choices and rights
You can manage available sharing and notification settings in the app. You can export your data and request permanent account deletion from Profile, opened using the profile icon. Our external deletion route is described at Account and Data Deletion. Deleting the app does not delete your account or cancel a store subscription.
Depending on applicable law, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data; object to certain processing; withdraw consent; and complain to a supervisory authority. You may also have a right to appeal a refused privacy request. We will not discriminate against you for exercising a privacy right.
Aboot does not sell personal data or use it for cross-context behavioural advertising or targeted advertising.
Email help@aboot.app to exercise a right. We may need to verify your identity and will respond within the period required by applicable law.
You may complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or the data-protection authority where you live or work.
9. Security
We use appropriate technical and organisational measures designed to protect personal data. No service can guarantee absolute security. Contact us if you believe your account has been compromised.
10. Children
Aboot is not directed to children under 16. Users must also meet any higher minimum age required where they live. We do not knowingly create accounts for children below the applicable age without valid authorization.
11. Website data
When you visit this website, basic network and security information may be processed to deliver and protect it. The website does not use advertising cookies or behavioural advertising.
12. Changes to this policy
We may update this policy as the service or law changes. We will provide notice of material changes where required. The date at the top identifies the current version.