Privacy policy

Local books and reading data

Imported originals, notes, bookmarks, collections, reading positions and activity are stored on your device. Sonnet does not provide account registration or automatic cloud synchronization. Removing the app or clearing its storage can erase your library. Export a backup first.

Imports, sharing and backups

The app accesses files you select or share with it. Your system file provider may download a file from its own cloud service. A manual backup is an unencrypted ZIP containing books and reading data. Sharing a book, notebook or backup sends the selected content to the destination you choose; that destination has its own privacy practices. Secure passwords, consent state and earned ad-free passes are excluded from portable backups.

PDF passwords and offline voices

PDF passwords remain in memory unless you explicitly choose Remember. Remembered passwords use device secure storage, do not synchronize to another device, and can be removed in the reader. They are excluded from backups and application-controlled diagnostics. Orphaned passwords are removed on startup when secure storage is available. Text-to-speech uses voices reported as available offline; voice installation is managed by your device.

Book sources and external websites

Find books refreshes a public provider directory from https://joshisijan.com.np/sonnet/store.json when you open the screen or choose Refresh. The website host may log your IP address, timestamp and request metadata. The app sends no account, device identifier, book, note, reading progress or search history with this request. A validated directory is cached locally for offline use.

Provider websites open only when you choose them in your external browser and follow their own terms and privacy policies. Downloads, availability, accounts, borrowing and regional rights are controlled by the provider. A browser download must still be imported using Add books or system sharing.

Analytics and crash reports

Firebase use is limited to Core, Analytics and Crashlytics. Usage analytics and crash reports are enabled automatically in configured production builds and have no in-app switch. Reporting can process technical device/app information and coarse format/action categories. Application-controlled telemetry excludes book titles, filenames, passages, notes, search queries, passwords and user identifiers. Advertising consent is managed separately and is never granted by diagnostic collection. Deleting all local data resets local analytics data and clears unsent crash reports where supported; it does not erase reports previously uploaded to Google. Diagnostics resume after the local reset.

Advertising and consent

Google AdMob supplies eligible library banner ads and explicitly requested rewarded ads. There are no ads on book pages. Advertising services may process device, network, advertising and interaction information under their own policies and your consent choices. Available consent/privacy controls let you review applicable choices; denying consent does not prevent local reading. An earned 24-hour ad-free pass belongs to this installation and is not portable.

Deletion, retention and security

Trash retains books for seven days until expiry is processed during app activity. Permanent deletion removes the imported copy and related local data, not the external source or exports you saved elsewhere. Settings includes Delete all local data, which offers backup before confirmation and permanently clears the local library, notes, activity, settings, remembered PDF passwords, dictionaries, pending imports, caches and earned ad-free pass. Keep backups of important content and protect your device. If you contact support, the email provider processes your message; do not include private books or passwords. Contact support about information you supplied and available access or deletion requests.

Service providers and changes

Google services operate under their own policies: https://firebase.google.com/support/privacy and https://policies.google.com/privacy. Data may be processed outside your country according to provider practices. The website displays an updated date when this policy changes.