This Privacy Policy (the "Policy") describes how we collect, use, disclose, store, and protect your personal data when you use the AllInNovel platform, including our website, our iOS and Android applications, and related services (collectively, the "Platform" or "Services").
The Platform is provided and controlled by APTECH CREATIVE PTE. LTD., registered in Singapore ("we", "us", or "our"). If you have any questions about how we use your personal data, please contact our Data Protection Officer at [email protected].
By using the Services, you confirm that you have read and understood this Privacy Policy, and agree to the processing of your personal data in accordance with this Policy. If you do not agree with this Policy, please do not use the Services. This Policy, together with our Terms of Use, forms the complete agreement between you and AllInNovel.
THIS PRIVACY POLICY IS IMPORTANT. WE HOPE YOU WILL TAKE THE TIME TO READ IT CAREFULLY.
1. Summary
The table below summarizes our data practices. It is a summary only — the sections that follow govern.
| Do we sell your personal data? | No. Never. |
| Do we serve advertising? | No. The Services contain no advertising and no advertising SDKs. |
| Do we track you across other apps or websites? | No. |
| Do we collect advertising identifiers (IDFA / Android Advertising ID)? | No. |
| Do we see your card number? | No. Payments are processed by Apple or Stripe; we never receive your full card details. |
| Can you delete your account in the app? | Yes — Settings → Security → Delete account. |
| Who do we answer to? | The Singapore Personal Data Protection Act (PDPA), plus the regional laws in Section 17. |
2. Data We Collect
The data we collect depends on how you use AllInNovel. Even without an account, we collect limited technical data when you use the Services.
2.1 Information You Provide
- Account information — your email address, password (stored only as a salted hash, never in readable form), display name, and an automatically assigned member ID.
- Profile photo — if you choose to upload one. Images are stored in our object storage and served through our own media proxy.
- Consent records — whether and when you accepted the Terms of Use (including the version accepted), and whether you opted in to marketing email.
- Correspondence — the content of support requests and feedback you send us.
The Services do not currently offer public commenting, reviews, or user-published works. Star ratings shown on book pages are editorial or computed by us; they are not authored by readers. If we introduce features that let you publish content, we will update this Policy before doing so.
2.2 Information We Collect Automatically
- Session and security data — your session token, the IP address and browser user-agent associated with a session, and the IP address of your most recent sign-in. We use these to keep you signed in, to sign you out everywhere when you ask, and to detect abuse.
- Reading and library activity — which chapters you have read and when, the books you follow, and your reading position. This is what syncs your progress across devices.
- Transaction records — coin top-ups, chapter unlocks, coin balances and bonus grants, subscription status and renewal dates, and the identifiers our payment providers give us (a Stripe customer ID for web purchases, an Apple original transaction ID for App Store purchases).
- Device push token — if you allow notifications, a push token issued by the Expo push service together with the platform (iOS or Android), so we can deliver notifications you have consented to receive.
- Website analytics — on our website only, aggregated traffic measurement through Google Analytics, loaded via Google Tag Manager. See our Cookie Policy for the full cookie inventory. Our mobile apps contain no analytics SDK and set no cookies.
- App version — your installed app version, reported at launch so we can tell you when an update is required.
2.3 Information from Sign-In Providers
If you sign in with Google, Facebook, or Apple, we receive from that provider a stable account identifier, your email address, and (where available) your name. We store the provider identity so the same login continues to reach the same account.
If you use Sign in with Apple and choose to hide your email, Apple gives us only a private relay address. That is fully supported — we never require your real address, and mail we send reaches you through Apple's relay.
2.4 What We Do Not Collect
For clarity, and consistent with our App Store privacy disclosures, the Services do not collect:
- Advertising identifiers (IDFA, IDFV for advertising purposes, or Android Advertising ID);
- Precise or coarse geolocation;
- Contacts, calendars, photos beyond a profile image you explicitly choose, camera or microphone input;
- Health, financial account, biometric, or government identifier data;
- Your card number, CVV, or bank details;
- Browsing activity on other apps or websites.
We do not use your data for cross-app or cross-site tracking, and we do not share data with data brokers or advertising networks.
3. How We Use Your Data, and Our Legal Basis
We use your data to perform our contract with you, to operate and improve the Services, to comply with law, with your consent where required, and for our legitimate business interests. Specifically:
- Creating and maintaining your account and profile;
- Delivering the Services — serving chapters you are entitled to read, syncing progress and library, and personalizing recommendations;
- Processing top-ups, chapter unlocks, and subscriptions, and maintaining your coin balance;
- Sending service messages (email verification codes, purchase confirmations, and account notices) — these are transactional and are not marketing;
- Sending updates, recommendations, and promotions only where you have opted in;
- Detecting, preventing, and combating fraud, abuse, payment abuse, and unauthorized access;
- Developing, researching, and testing improvements to the Services;
- Enforcing our terms and policies and meeting legal, tax, and audit obligations;
- Transferring, storing, or processing your data across borders as necessary to provide the Services.
3.1 Deemed Consent
Pursuant to Section 15 of the Singapore Personal Data Protection Act ("PDPA"), you are deemed to have consented to our collection, use, or disclosure of your personal data in the following circumstances:
- Deemed Consent by Contractual Necessity: Where you provide personal data in connection with entering into or performing a contract with AllInNovel, you are deemed to have consented to our use of that data for the purposes of performing the contract, including disclosure to necessary third-party service providers.
- Deemed Consent by Notification: Where we intend to use your personal data for a new purpose, we will notify you of the intended purpose and your opt-out method. If you do not object within the reasonable period specified, you are deemed to have consented to that use.
3.2 Legitimate Interests Exception
Pursuant to Paragraph 5, Part 3 of the First Schedule to the PDPA, we may collect, use, or disclose your personal data without your consent where our legitimate interests (or those of another person) outweigh any adverse effect on you. We will conduct a risk assessment and implement reasonable measures to eliminate or mitigate any adverse effect before relying on this exception. Such legitimate interests include ensuring platform security and integrity, preventing fraud and abuse, enforcing our terms and policies, and obtaining legal services.
3.3 Business Improvement Exception
Pursuant to Section 17A of the PDPA, we may use your personal data without your consent for the following business improvement purposes, where a reasonable person would consider such use appropriate:
- Improving, enhancing, or developing new goods, services, or business process methods;
- Understanding and analyzing user behavior and preferences in relation to our goods and services (including A/B testing and recommendation tuning);
- Identifying, personalizing, or customizing suitable goods or services for users.
These purposes do not include making decisions likely to have a significant adverse effect on you. We may share personal data with affiliates for these purposes to the extent permitted under the PDPA.
4. Apple App Store and iOS Disclosures
This section describes practices specific to our iOS application.
4.1 In-App Purchases
All purchases of coins and subscriptions made inside the iOS app are processed by Apple through In-App Purchase. Apple collects and handles your payment method; we never receive your card number or billing details. Our servers receive only the signed transaction Apple issues, which we verify with Apple in order to credit your coins or activate your subscription. We store the resulting transaction and product identifiers as a record of your purchase.
Refunds for App Store purchases are handled by Apple at reportaproblem.apple.com. See our App Support page.
4.2 Sign in with Apple
Where you sign in with Apple, we receive a signed identity token that we verify with Apple, and we request only your name and email address — the minimum needed to create your account. Private relay addresses are fully supported (see Section 2.3). You can disconnect your Apple identity at any time in Settings → Account → Linked accounts, provided you have another way to sign in; deleting your account removes the stored Apple identity from our systems.
4.3 Push Notifications
Notifications are opt-in: iOS asks for your permission, and we register a push token only if you grant it. You can withdraw permission at any time in iOS Settings → Notifications → AllInNovel, or by signing out, which removes this device's token from our records. We use notifications for service messages and, where you have opted in, for updates about new chapters and offers.
4.4 No Tracking and No App Tracking Transparency Prompt
We do not track you, as "tracking" is defined by Apple: we do not link your data with third-party data for advertising or measurement, and we do not share your data with data brokers. Our iOS app therefore contains no advertising SDK, collects no advertising identifier, and does not present an App Tracking Transparency prompt. Our Facebook sign-in integration is explicitly configured with advertiser-ID collection and automatic app-event logging disabled; it is used for authentication only.
4.5 Managing Your Subscription
Subscriptions purchased through the App Store are managed by Apple. You can view, change, or cancel yours in iOS Settings → [your name] → Subscriptions, or from Settings → Subscription → Manage subscription in the app. Cancelling stops future renewals; access continues until the end of the paid period.
5. Cookies and Similar Technologies
Our website uses cookies for authentication, consent storage, and aggregated traffic measurement. Our mobile apps do not use cookies; they store your session token and reading preferences in the app's own protected storage on your device.
You have the right to choose whether to accept non-essential cookies on the website. For the full inventory and your options, see our Cookie Policy.
6. Data Sharing and Service Providers
We do not sell your personal data. Except with your consent or as described in this Policy, we do not share it. We disclose data to the following categories of recipient:
| Recipient | Purpose | Data involved |
|---|---|---|
| Apple | In-App Purchase processing and transaction verification; Sign in with Apple | Purchase and transaction data; identity token |
| Stripe | Payment processing for purchases made on the website | Payment and customer identifiers |
| Google, Facebook, Apple | Sign-in, where you choose to use them | Account identifier, email, name |
| Expo (push service) | Delivering push notifications you opted in to | Push token, notification content |
| Resend | Sending transactional email (verification codes, notices) | Email address, message content |
| Cloud hosting and object storage | Running the Services and storing profile images | Data described in Section 2 |
| Google Analytics (website only) | Aggregated traffic measurement | See Cookie Policy |
We require our service providers to protect your data to a standard equivalent to ours and to use it only for the purposes we specify.
We may also disclose data:
- To affiliates — members, subsidiaries, or affiliates of our corporate group.
- To government and law enforcement — where required by applicable law, and subject to Section 8.1.
- In business asset transactions — pursuant to Section 15B of the PDPA, in connection with any merger, acquisition, restructuring, or sale of assets, we may transfer your personal data as part of the business assets to the successor without separate consent from each user. The successor will be bound by this Policy or a policy providing equivalent protection.
7. Data Storage and Cross-Border Transfer
Your information may be transferred to, processed in, and maintained on servers located outside your country or jurisdiction. By using the Services, you agree to that transfer, storage, and processing. We take all steps reasonably necessary to ensure your information is treated securely and in accordance with this Policy and applicable law.
7.1 Extraterritorial Enforcement Cooperation
With respect to data access requests, enforcement demands, or judicial assistance requests originating outside Singapore, AllInNovel retains sole discretion in determining whether to cooperate, and will do so only to the extent required or permitted by Singapore law. Under no circumstances will AllInNovel disclose your personal data solely on the basis of a foreign enforcement request where disclosure is not required or permitted by Singapore law.
8. Data Security
We take appropriate technical and organizational measures to protect your personal data. These include encryption of data in transit (HTTPS throughout, with App Transport Security enforced in our iOS app), storing passwords only as salted hashes, issuing session cookies with HttpOnly, Secure, and SameSite protections on the web, verifying every purchase server-side with Apple or Stripe rather than trusting the client, and restricting internal access to staff who need it to operate the Services.
We recommend you use a strong, unique password and never share it. Although we make good-faith efforts to secure your data, no method of transmission over the internet is entirely secure, and any transmission is at your own risk.
8.1 Data Breach Notification
AllInNovel will comply with the data breach notification requirements under Section 26D of the PDPA, including notifying the Personal Data Protection Commission ("PDPC") and affected individuals within the legally required timeframes when a notifiable data breach occurs. AllInNovel does not assume liability for a breach event itself beyond what applicable law requires, and does not bear direct liability for breaches caused by the acts or omissions of third-party service providers, but will assist with investigation and response within reasonable bounds.
9. Your Rights
You have the following rights in respect of your personal data:
- Right of access — to obtain the personal data we hold about you.
- Right of rectification — to correct inaccurate data. You can edit your display name and profile photo directly in Settings → Account.
- Right of deletion — to delete your account and data (see Section 10).
- Right to restriction and portability — to request restricted processing, and to receive your data in a portable form.
- Right to withdraw consent — at any time. You can turn marketing email off in Settings → Account → Recommendations, and turn notifications off in your device settings.
To exercise these rights, contact [email protected]. We will respond within thirty (30) calendar days of receiving your request. If a request is particularly complex, we may extend the period by up to two (2) further months, with prior notice to you.
9.1 Consequences of Withdrawing Consent
You may withdraw consent at any time. Withdrawal may mean we can no longer provide part or all of the Services to you; we will explain the specific consequences when processing your request. AllInNovel is not liable for service interruption or feature unavailability resulting from your withdrawal. Withdrawal does not affect our right to continue processing your data on another legal basis (such as legitimate interests, legal obligations, or the business improvement exception).
9.2 Right to Refuse Requests
In accordance with the PDPA, AllInNovel may refuse to process access or correction requests that are frivolous or vexatious; manifestly unfounded or excessive; likely to damage the privacy rights of others; impractical; requiring disproportionate technical effort; not required under applicable law; or relating to information that is publicly available or was provided in confidence. We may also refuse where granting access or deletion would impair our ability to use the information for anti-fraud and security purposes. For repetitive or abusive requests, we reserve the right to charge a reasonable fee.
10. Deleting Your Account and Data
You can delete your account yourself, from inside the app:
Settings → Security → Delete account — then type DELETE to confirm.
On the website, the equivalent control is on your Profile page. You may also email [email protected].
What happens when you request deletion:
- You are signed out on every device immediately, and all sessions are revoked.
- Your account enters a 30-day grace period. During this window you can restore it by signing in on the website.
- After 30 days, your account and associated personal data are permanently deleted, including any linked Google, Facebook, or Apple sign-in identities.
Deletion is irreversible once the grace period ends. You will not be able to recover your reading history, unlock records, coin balance, or bonus coins, and any remaining coins are forfeited. Deleting your account does not cancel an active App Store subscription — cancel that separately in iOS Settings → [your name] → Subscriptions, or Apple will continue to bill you.
We aim to complete deletion requests within thirty (30) calendar days of the grace period ending, and will notify you if a complex request requires longer.
11. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services. After deletion or withdrawal of consent, we may retain limited data where necessary for:
- Compliance with legal obligations, including tax, anti-money laundering, and audit requirements;
- Enforcement of our terms and policies;
- Dispute resolution and ongoing legal proceedings;
- Prevention of fraud and abuse, and maintenance of platform security;
- Establishment, exercise, or defense of legal claims.
Retention periods are determined by reference to the necessity of these purposes. After account deletion we may retain data in aggregated and anonymized form.
12. Anonymized and Derived Data
12.1 Anonymized and Aggregated Data
Information that has been anonymized or aggregated so that it no longer constitutes personal data falls outside the PDPA's restrictions. AllInNovel may use, disclose, and commercialize such information without restriction, including for industry analysis, trend reports, statistical research, and public demonstration of service usage trends.
12.2 Derived Data
AllInNovel may derive or generate new data from your personal data in the course of providing the Services ("Derived Data") — for example reading-preference tags, user classifications, and recommendation scores. AllInNovel holds independent processing rights over Derived Data. You may not request correction of errors or omissions in Derived Data, and AllInNovel is not required to transmit Derived Data in response to portability requests.
13. Automated Decision-Making
The Platform uses algorithmic systems to recommend books and personalize what you see. These systems do not make decisions producing legal effects concerning you, and they do not determine your access to purchased content. AllInNovel accepts no liability for the outcomes of automated recommendation, including content you are exposed to or miss as a result.
The Singapore PDPA does not currently grant individuals a right to require human review of automated decisions, and you therefore have no right to demand human review solely because you are dissatisfied with a recommendation. The operation of these systems constitutes no promise, warranty, or representation by AllInNovel.
14. Children
AllInNovel is not directed to children under the age of 16, and we do not knowingly collect personal data from them. If we discover that a user under 16 has created an account, we will terminate the account and delete the data as soon as commercially practicable. Users aged 16 to 18 must have a parent or legal guardian agree to this Policy and must use the Services under that person's supervision.
If you believe we hold data about a child under the relevant age, contact [email protected] and we will act promptly.
15. Changes to This Policy
We may change this Policy from time to time. We will not reduce your rights without your explicit consent, and we will always publish the effective date. For material changes we will notify you in the app or by email. For changes required for security, legal, or regulatory reasons, advance notice may not be possible. IF YOU CONTINUE TO USE THE SERVICES AFTER AN UPDATED POLICY HAS BEEN POSTED, WE WILL CONSIDER THAT YOU HAVE ACCEPTED IT.
Previous versions remain available on this page's version history.
16. Complaints
To complain about how we process your personal data, email [email protected]. We will address your complaint as soon as possible. This is without prejudice to your right to lodge a claim with your data protection authority or to follow the dispute resolution process in the Terms of Use.
17. Regional Addenda
17.1 United States
We may send marketing email only where you have opted in. You can unsubscribe in Settings → Account → Recommendations, or through the unsubscribe link in any marketing email. California residents have rights under the CCPA/CPRA — including to know, delete, correct, and opt out of sale or sharing — as detailed in Section 17.2 of the Terms of Use. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
17.2 European Union and United Kingdom
If you are in the EU or UK, you have rights under the GDPR including access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making, as detailed in Section 17.1 of the Terms of Use. Our legal bases are set out in Section 3 above. You may lodge a complaint with your local supervisory authority.
17.3 Mainland China
If you are a resident of the People's Republic of China (mainland), you understand and expressly consent that your personal information will be transferred to and processed in jurisdictions outside the PRC, as detailed in Section 17.3 of the Terms of Use.
17.4 Australia
- Consumer guarantees: The Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010) provides consumer guarantees that cannot be excluded, restricted, or modified. Nothing in this Policy excludes, restricts, or modifies any right or remedy you have under it.
- Data protection: Your personal information is protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Under APP 11 we will take reasonable steps to destroy or de-identify your personal information when it is no longer needed for its original purpose.
- Limitation of liability: To the extent permitted by law, AllInNovel limits its liability for failure to comply with a consumer guarantee pursuant to Section 64A of the Australian Consumer Law, as detailed in Section 17.4 of the Terms of Use.
17.5 Other Regions
For users in jurisdictions not expressly covered above, nothing in this Policy limits any right you have under the mandatory consumer protection or data protection laws of your jurisdiction that cannot be excluded or waived by contract.
18. Language
This Policy may be prepared in multiple languages. In the event of any inconsistency or difference in interpretation between versions, the English version prevails.
19. Contact Us
The Platform is operated by APTECH CREATIVE PTE. LTD., registered in Singapore.
| Legal / IP Notices | [email protected] |
| Data Protection Officer (DPO) | [email protected] |
| Customer Support | [email protected] |
For help with the app specifically — purchases, restoring a subscription, or deleting your account — see our App Support page.
Last Updated: July 24, 2026