LOCAL DEVELOPMENT DRAFT

Draft Privacy Notice

Not final legal copy.

Replace this draft before inviting testers. [Responsible operator and privacy contact: to be supplied] Specify retention and deletion periods, the deletion request process, and how database backups are retained and removed.

Data and purpose

This prototype stores account email and verification/approval status, notes and selected-text anchors, and saved questions and validated answers to provide account history and grounded study tools. A private resume bookmark stores only your latest reading location per book so you can return to it; it is replaced on each save and is not author analytics. Optional learning analytics are off. Synthetic author dashboard data is separate from reader records.

Account preferences

The prototype stores your chosen appearance and, if uploaded, a small cropped JPG profile photo. The original image and its metadata are discarded. Only your account can retrieve the photo through the application. Removing it deletes the live photo; existing database backups follow the operator's backup retention policy.

Private learning path study

Learning paths save your completion choices, source-linked notes, and questions with verified answers when you use those controls. Continue is enabled by default and saves one latest unit, passage and supported local-video position per path, replacing the previous bookmark without watch or dwell history. Disable it in Study settings to clear the bookmark and remember that choice. Clearing all path study data turns it off until re-enabled for a path; a minimal off preference remains to prevent other tabs recreating cleared data. Study settings can clear each kind of data; Account settings can clear all your path study data, including paths you can no longer access. Authors cannot retrieve your individual study data through these tools. Live records remain until cleared or their account/path is deleted. Private content-deletion archives expire after 30 days; existing backups follow the operator's separate retention policy. A configured model provider receives your question and selected unit/transcript or explicitly included book evidence.

Access and external services

Readers see their own notes, conversations, and resume bookmarks. Administrators manage accounts and books. If configured, question text may be sent to an external model provider; account email is sent through the configured mail transport. Do not promise anonymity or absence of external processing.

Shared manuscripts

A manuscript owner or editor can grant another approved account editing access. The manuscript team can see draft content, editorial comments, saved chapter revisions, team email addresses, and attributed editorial changes. Sharing does not expose private reader notes, conversations, or bookmarks. Editorial history remains in the local database until intentionally removed; backups and deletion policies must be specified before inviting real users.

Retention, uploads, and prototype status

Local data remains until the developer intentionally resets or removes it. Uploaded material must be lawfully provided by the account holder. Specify deletion, backups, and contact information before real users participate. Locus is a prototype .