This page describes exactly what leaves your phone, who processes it, and how to get rid of it. We have tried to write it in plain language rather than boilerplate, and to be precise where precision matters.
The short version
- We never store your book files. The PDF or EPUB itself lives on your phone and we keep no copy. Two things are worth naming: importing a Word, Markdown or text file sends it to us to convert, and we return the result without keeping it; and if you switch on cloud backup, your books are copied to your own Google Drive or Dropbox.
- The text inside your books does leave, once. To make a book searchable and to answer questions about it, its text is sent to our servers and on to our AI providers. We do not store that text on our servers; the resulting search index is stored on your phone.
- Your highlights, notes and progress are stored in our database so they sync across devices and survive a reinstall.
- We do not sell your data, and we do not show you advertising.
- You can delete everything from inside the app, and it is really deleted.
Who we are
Krixo is operated by Krixo Labs, India. For anything in this policy, including privacy requests, write to support@krixo.in.
What we collect
Account information
Your email address and display name. If you sign up with a password, we store a bcrypt hash of it, never the password itself. If you sign in with Google, we receive your email address, name and Google account identifier, and we store the first two.
Your reading data
Highlights, notes, drawings, bookmarks, reading progress, saved vocabulary, flashcards and their review history, and your conversations with the AI about your books. Also book metadata: title, author, page count, language and a content hash used to recognise the same book across devices.
Book content
This is the part people care about most, so it deserves detail rather than a slogan.
- The book file stays on your device. Nothing uploads your PDF or EPUB to us, and we never keep a copy of any book file.
- If you import a Word, Markdown or text file, the device sends that file to us so we can convert it into an EPUB. We convert it in memory, send the EPUB straight back, and write nothing to our storage or database.
- If you turn on cloud backup, your book files are uploaded to your own Google Drive or Dropbox account, so you can restore them on another device. They go to your cloud, not ours, and we cannot read them. You choose whether to connect an account, and you can disconnect it at any time.
- When you add a book, its text is split into passages and sent to our servers, which forward them to Voyage AI to convert into numeric vectors. Those vectors come back and are stored on your phone. We do not keep the text or the vectors.
- When you use Ask, Explain, Notes, quizzes or Audio Overview, the relevant text is sent to our AI providers to produce the answer. Audio Overview summarises the whole book, so it sends the whole book's text.
- If you screenshot part of a page and ask about it, that image is stored in our storage and sent to a vision model.
- If a book is a scanned PDF, its page images are sent to Google Cloud Vision to extract the text.
- Searching your library happens on your phone, against the index stored there. Only your question and the few matching passages are sent for an answer.
Technical information
Your IP address, used to guess your country so we can show the right currency, and to apply rate limits. A device identifier, so the app knows which of your devices holds which book. If you enable reminders, a push token and your time zone.
Payments
Payments are processed by Razorpay when you buy from us directly, and by Google Play Billing when you buy inside the app you installed from the Google Play Store. Your card and banking details go to whichever one handles the payment, never to us. We store only your subscription status, when it started, when it expires, and the payment identifier.
Who processes your data
These are our sub-processors. They receive only what is listed.
| Service | What it receives | Where |
|---|---|---|
| Amazon Web Services | Everything we store: account, reading data, screenshots | United States |
| Resend | Your email address, to deliver account emails such as a password reset | United States |
| Voyage AI | Passages of your books, to build the search index | United States |
| DeepSeek | Text sent to the AI: your questions, passages, highlights, whole-book summaries | China |
| Anthropic | Screenshots and book covers, for the vision model | United States |
| Google Cloud | Page images of scanned books, for text recognition. Google Sign-In, if you use it. | United States |
| Expo & Google FCM | Your push token, to deliver reminders | United States |
| Razorpay | Payment details | India |
| Google Play Billing | Payment details | United States |
Please read this one. Our text AI provider, DeepSeek, is a company based in China, and text you send to the AI is processed on its servers. That includes passages from your books, your questions, and, when you generate an Audio Overview, the text of the entire book. If that is not acceptable to you, do not use the AI features. Everything else in Krixo works without them.
We do not use your content to train our own models, and we do not sell or rent your data to anyone. Our providers process your content only to return a result to us. Each has its own terms and retention practices, which we do not control.
How long we keep it
- Delete a book and its highlights, notes, vocabulary, flashcards, chats, screenshots and cached text are removed from our servers and from your device.
- Delete your account and your personal data is removed: your books, highlights, notes, chats, vocabulary, screenshots, cached text and your account record. This is not a soft delete of your content. Two narrow exceptions are described in the last two points below.
- Text sent to AI providers is not stored by us. Provider-side retention is governed by their policies.
- Records we must keep for tax or accounting, such as payment receipts, are retained as long as the law requires. If you ever paid for Pro, that payment record (which includes your email) is kept for that period.
- Anonymous usage totals are kept for our own review. When an account is deleted we keep a single, non-personal summary of its lifetime usage — how many AI actions and tokens it used, roughly what that cost us, which plan it was on, and the month it was created and deleted. It is stored against a one-way fingerprint, not your email or name, so it cannot be traced back to you. We keep it so that deleting accounts does not erase the numbers we need to understand and run the business. It contains none of your content and no readable personal information.
- One deliberate exception. The free plan allows 5 AI uses per calendar month. To stop that allowance being reset simply by deleting and re-creating an account, we keep a count of free AI uses against a one-way fingerprint of your email address, and a looser count against a fingerprint of your device. Neither contains readable personal information, neither can be turned back into your email address, and both delete themselves automatically shortly after the month they belong to. They survive account deletion, because otherwise deleting your account would be the way around the limit. The device count is deliberately generous, so that people sharing a phone or tablet are not affected.
Your rights
You can see, correct, export and delete your data. Most of it is in the app already: Settings to manage your account, and Notes to export your highlights and notes as PDF, Markdown, CSV or an Anki deck. To delete your account, use Settings → Delete account. If you would rather we did it, email support@krixo.in and we will action it within 30 days.
Depending on where you live, you may also have the right to object to processing, to restrict it, or to complain to a data protection authority. Indian users may contact our grievance officer at the same address.
Security
Traffic to our servers is encrypted with TLS. Passwords are hashed with bcrypt. Our application server has no public network ingress and sits behind a load balancer and a web application firewall. Password reset links are single use and expire after an hour, and resetting a password signs out every device that was already signed in.
No system is perfectly secure. If you find a vulnerability, please tell us at support@krixo.in before disclosing it publicly, and we will work with you.
Children
Krixo is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us information, write to us and we will delete it.
Changes
If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect. The date at the top always reflects the current version.