Privacy Policy
Last updated 2026-09-02
This page explains what pnut collects about you, why, where it is kept, who else can see it, and how to get it deleted. It is written to be read. If anything here is unclear, ask us at hello@pnut.pub.
pnut is operated by the pnut team ("we"). It covers the website at pnut.pub and the pnut app for iPhone, which shows the same website.
What we collect
Your account. Your email address, the display name you choose, and a profile photo if you add one. When you sign up we also record that you confirmed you are 13 or older, whether you ticked the box asking for email about new books, and when. If you were invited rather than signing up yourself, we hold the fact that you were invited and by whom.
Your reading. Where you are in each book, your bookmarks, your reading log and the statistics built from it (such as reading speed and streaks), the passages you save, the notes you write, the words you look up, and which books you have added to your library or set aside. This is the core of the product: it is how your place follows you between devices and how the notes around a book know what you have already read.
Your community activity. Reviews, posts, replies, reactions, the clubs you join, the readers you follow, and any reports you make about other people's content.
Problem reports. If you use the Report a problem button: what you wrote, the address of the page, your screen size, your browser or device description, and any screenshots you chose to attach.
Technical records. Our servers keep ordinary logs of requests, including IP addresses and browser descriptions, for security and to diagnose faults.
We do not use advertising trackers, and we do not run third-party analytics on the site or in the app.
How we use it
- To run the product: sign you in, keep your place, show you your library, notes and community.
- To send you emails you need, such as the sign-up confirmation, invitations and password resets. We send email about new books and features only to people who ticked the box asking for it, and every such message carries an unsubscribe link. Nobody is on that list who did not ask to be.
- To keep the community safe: to act on reports and to enforce the terms.
- To fix things: problem reports and logs are read by the team when something goes wrong.
- To improve the reading experience, using reading activity in aggregate.
We do not sell your data and we do not share it with advertisers.
Where it lives, and who processes it
Your data is stored with service providers who act on our instructions:
- Supabase hosts the database, the sign-in system and uploaded files, including profile photos and problem-report screenshots.
- Vercel hosts the website and the servers that run it.
- Resend delivers the emails we send you.
- Chargebee runs our billing: the checkout page, your plan and its invoices, and the page where you change your card or cancel. It holds your email, your name if you gave one, your billing address, and your purchase history.
- Stripe processes card payments underneath Chargebee. Your card number is entered on their pages and held by them; we never see it.
- The typefaces on the site are loaded from Google Fonts and Adobe Fonts. When your browser fetches them it sends those companies your IP address, as it does for any file on the web.
These providers may store data in the United States.
Who else can see it
Other pnut members can see your display name, your profile photo, and anything you post to the community. Profile photos are stored at a web address that anyone who has the link can open. Your email address, your reading activity and your private notes are not shown to other members.
Cookies and device storage
We use cookies only to keep you signed in. Your browser also stores a few preferences locally, such as text size and theme, so the reader remembers how you like it. There are no advertising or tracking cookies.
How long we keep it
Your account and reading data are kept while your account exists. Problem reports and screenshots are kept while they are needed to fix the issue. Server logs are kept for a short period and then discarded.
Deleting your account
Settings → Delete my account, on the phone or the desktop. It removes your account, your reading data, your private notes and everything you posted to the community, at once. If you host a book club that has other members you will be asked to hand it over first. Problem reports you sent us stay, so we can still fix what you reported. Copies may remain in backups for a limited time before they are overwritten. Prefer to ask us? Email hello@pnut.pub from the address on your account and we will do it within 30 days.
Your rights
Wherever you live, you can ask us what we hold about you, ask us to correct it, ask for a copy, or ask us to delete it. Email us and we will act on it. If you are in a place with a data protection authority, you can also complain to them.
Children
pnut is not directed to children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, email us and we will remove it.
Changes
If we change this policy in a way that matters, we will say so on this page and update the date at the top. The date is the record.