Public Review Draft — Not Yet Effective This document is published for public consultation and product-governance review. It does not yet govern the use of Langa Library and is not the final statement of Langa Library's legal or data practices. Product behavior, retention periods, vendors, and feature-specific disclosures remain subject to verification. Send comments to langalibrary.dev@gmail.com. Do not submit passwords, private book files, payment-card details, identity documents, or sensitive personal information.
Privacy Policy
Effective date: Not yet effective Last updated: 2026-07-26
This Policy explains how Operator identity under review — not yet effective, trading as Langa Library, processes personal data through the Services.
1. Privacy commitments
We treat reading activity as sensitive in context. We collect data for identified purposes, minimize collection, separate public and private surfaces, protect access, and provide rights channels. We do not sell private reading histories, private notes, personal books, or personal-library records to advertisers or data brokers.
2. Scope
This Policy applies to visitors, registered readers, MyBook users, contributors, reviewers, translators, artists, supporters, people contacting us, and people whose data appears in a submission. Independent third-party sites and services have their own practices.
3. Data we may process
Account data
Name or display name, username, email, protected authentication credentials, profile image, language, region or time zone, role, account status, security records, and age or guardian information where required.
Reading and library activity
Books viewed, opened, saved, or removed; shelves; lists; reading progress; searches; language and topic preferences; bookmarks; highlights; notes; annotations; read-aloud and translation settings; recommendations; and interface interactions.
Private reading activity is not public unless you deliberately use a sharing feature.
MyBook and uploaded files
File name, type, size, embedded metadata, extracted text, indexes, thumbnails, format conversions, accessibility derivatives, synchronization records, and your organization of the material.
Community and contribution data
Reviews, comments, corrections, artwork, translations, contributor name, biography, portfolio link, contribution history, editorial communications, moderation records, roles, badges, credits, and certificates.
Communications
Contact details, message content, attachments, relevant account or transaction information, support history, rights notices, and evidence.
Payment data
When paid functions are enabled: billing details, transaction amount and currency, subscription status, provider identifiers, invoice and tax information, refunds, and disputes. Complete card details should be handled by an authorized payment provider unless separately disclosed.
Technical data
IP address, device and browser, operating system, language, referring page, timestamps, feature usage, crash and performance data, cookies or local identifiers, security events, and suspected-abuse signals.
Approximate location
Country or broad region inferred from network information for language, content availability, security, fraud prevention, rights restrictions, and aggregate analytics. Precise location is not collected unless a clearly identified feature requires permission.
4. Purposes
We process data to provide accounts and reader functions; save progress and preferences; operate MyBook; publish authorized contributions; process payments; personalize recommendations; maintain and improve performance; secure accounts and systems; detect fraud, scraping, piracy, spam, and abuse; communicate service, security, contribution, moderation, transaction, and policy notices; respond to support; meet legal obligations; and establish, exercise, or defend legal claims.
5. Legal bases
Depending on the activity and applicable law, processing may rely on consent, performance of a contract, pre-contract steps you request, legal obligations, protection of vital interests in urgent circumstances, legitimate interests where permitted and properly balanced, legal claims, or another legally recognized basis.
Acceptance of the Terms is not a substitute for separate consent where consent is legally required. You may withdraw consent without invalidating earlier lawful processing.
6. Sensitive data
We do not ordinarily require sensitive personal data. However, searches, reading histories, notes, files, and communications may indirectly reveal sensitive information. We apply heightened care and ask users not to place unnecessary sensitive information in public fields.
7. Younger users
The account age threshold is 16. We may require age confirmation, guardian involvement, safer defaults, limited profiles, restricted contact, and additional review. A parent or guardian may contact langalibrary.privacy@gmail.com if they believe a child's data has been processed improperly.
8. Cookies and local technologies
We use necessary technologies for login, security, language, accessibility, reader state, and preferences. Optional analytics or similar technologies are used only under the Cookie Notice and consent rules that apply. Browser controls may affect functionality.
9. Sharing
We may share limited data with contracted providers for hosting, storage, content delivery, authentication, email, analytics, security, payments, customer support, translation or automated processing, backups, and recovery. Providers must be bound by appropriate purpose, confidentiality, security, deletion, and subprocessing obligations.
Data may also be shared when you publish it, direct us to share it, authorize an integration, or when disclosure is reasonably necessary to respond to valid law, protect people or systems, investigate fraud or abuse, enforce rights, or complete a lawful organizational transaction.
10. Public contributions
A public display name, profile, review, list, artwork, correction credit, or other contribution may be visible to the public. We aim to make public visibility clear before publication. Search engines and archives may copy public pages beyond our direct control.
11. International transfers
Providers or infrastructure may be located outside your country. We will use legally required measures such as contractual safeguards, data-processing agreements, transfer assessments, access restrictions, security controls, notices, or consent where required. The principal provider categories and locations currently documented are listed below. Material changes will be reflected in this Policy and the internal vendor register.
| Provider category | Provider/location information |
|---|---|
| Hosting | Langa Library self-hosted infrastructure — Vietnam |
| Authentication | Langa Library account authentication |
| Authentication | Google OAuth |
| Authentication | Facebook Login |
| Gmail (Google) - operational email only | |
| Backup | Langa Library self-hosted storage and backup infrastructure - Vietnam |
12. Retention
We retain data only as long as reasonably necessary for the purpose, account lifecycle, legal obligations, security, fraud prevention, accounting, attribution, preservation, disputes, and backup cycles.
The following retention rules apply, subject to legal holds, security incidents, backup cycles, and mandatory law:
| Category | Retention rule |
|---|---|
| Account records | While active; deleted or anonymized after closure subject to legal/security needs |
| Private reading activity | Until user deletion or account closure, subject to backup cycles |
| MyBook files and derivatives | Until user deletion or account closure, subject to backup cycles |
| Support requests | 24 months after closure |
| Consent records | As required to demonstrate consent and withdrawal |
| Security and access logs | 90 days unless needed for an incident or legal claim |
| Payment and tax records | As required by applicable accounting and tax law |
| Moderation and appeals | 24 months after final resolution |
| Rights complaints | As needed for the complaint, repeat-infringement review, and legal claims |
| Public contributions | While published or as required by the accepted license and preservation needs |
| Backups and recovery copies | According to documented backup rotation; deleted when the relevant cycle expires |
13. Security
Safeguards may include access controls, least privilege, multifactor authentication for privileged accounts, encryption in transit and where appropriate at rest, public/private data separation, logging, monitoring, backups, vulnerability management, incident response, restricted administrative access, and confidentiality obligations.
No online system is completely secure. Users must protect their credentials and report suspected compromise.
14. Personal-data incidents
We assess the nature, affected data and people, likely harm, containment, recovery, evidence preservation, and notification duties. Where required, we notify affected users and competent authorities and provide protective steps.
15. Your rights
Subject to applicable law and exceptions, you may have rights to information, consent or refusal, withdrawal, access, correction, deletion, restriction, objection, portability, direct-marketing opt-out, review of significant automated decisions, complaint, compensation, and other remedies.
Submit a request to langalibrary.privacy@gmail.com. We may verify identity using only information reasonably necessary. We may limit a request where required for law, security, preservation, freedom of expression, the rights of another person, or legal claims.
16. Automated processing
Automated systems may recommend books, match metadata, classify subjects and languages, detect duplicates or abuse, and generate translations or accessibility output. They may be inaccurate. Human review or another safeguard will be available where legally required for a significant decision.
17. Account closure and deletion
On closure, access ends and eligible private data is deleted or anonymized under the retention schedule. Public contributions may remain for attribution, licensing, preservation, legal records, and community integrity. Attribution may be removed or replaced where reasonably possible and appropriate. Backups may persist temporarily until the cycle expires.
18. Marketing communications
Essential service, security, transaction, and legal notices are not marketing. Optional newsletters and recommendations will provide a lawful opt-out. We will not use private reading data for third-party behavioral advertising without a separately disclosed and lawful basis.
19. Changes
We may update this Policy for legal, product, vendor, security, or operational changes. Material changes will receive appropriate notice. New processing that requires consent will not be authorized merely by posting a revised Policy.
20. Controller and contact
Responsible operator: Operator identity under review — not yet effective Registered address: Registered address under review — not yet effective Registration number: Not applicable - operator structure under review Privacy contact: langalibrary.privacy@gmail.com Data-protection lead or department: Interim Privacy and Data Governance Lead — Langa Library operator General support: langalibrary.team@gmail.com
You may also complain to a competent data-protection, consumer-protection, or judicial authority where applicable.