Locus legal
Privacy Policy
Effective October 2, 2026
Locus turns the books and documents you add into audiobooks you can read along with. This policy explains what information we collect to do that, who we share it with, and how to delete it. Locus is operated by Drew Carr ("Locus," "we," "us").
The short version
- You sign in with Apple. We get an account ID and the email address Apple shares with us, which can be a private relay address.
- We store the books you add and the audio and text we make from them. They are private to your account unless you share them.
- To make audio, summaries and other reading features, we process book text on our servers and send parts of it to AI providers. We don't send them your name, email or account ID, and we don't use your books to train AI models.
- No ads, no tracking across apps or websites, and no third-party analytics.
- Your reading position and history stay on your devices and in your own iCloud account.
- You can delete your account from the app at any time.
What we collect
Your account
- Your Apple account ID and the email address Apple shares with us, which may be a private relay address. Your email is never shown to other users.
- The username and display name you choose. Apple may share your name when you first sign in; we use it only to suggest a display name.
Books you add
- The files you upload (PDF or EPUB), their titles, authors and file names.
- What we create from them: narrated audio, word timings, text, images, chapter lists, summaries, primers, and your book's position on the library map.
Your devices
- A random identifier for each installation of Locus, the app version, and the device's model name.
- Notification tokens, so we can tell your device when a book is ready.
How you use Locus
- A few events that tell us a book downloaded, opened and started playing, so we can find and fix problems.
- When you ask for an AI feature, such as an X-ray of the passage you're reading, the passage it's about.
- If you join a book club, your progress on the club's current book.
Purchases
- Your Locus Pro status, credit balance and purchase history, through Apple and RevenueCat. We never see your payment card details.
What we don't collect:
- Your location, contacts, photos, camera or microphone.
- Advertising identifiers.
- Any tracking across other apps or websites.
If you use the reading rule, the apps and websites you choose are stored by Apple's Screen Time as private tokens on your device. Locus can't see which apps they are, and the reading rule never leaves your device.
What stays on your devices and in your iCloud
These never reach our servers:
- Your playback and reading position.
- The vocabulary you've heard.
- Your home-screen widget.
- Your reading rule.
Locus syncs your library list and reading position between your devices through your own iCloud account (including a short snippet of the text around your place). That data lives in your private iCloud storage, which we can't access.
How we use it
We use this information to:
- run your account and library;
- turn your books into audio and reading features;
- sync your books across your devices;
- send notifications you'd expect, such as "your book is ready";
- process purchases and credits;
- prevent abuse;
- fix problems.
We don't sell your information or use it for advertising.
Who we share it with
We use these providers to run Locus. Each receives only what it needs.
| Provider | What it receives | Why |
|---|---|---|
| Supabase | Account, profile, library and book club records | Accounts and sharing |
| Modal | Your books and the content made from them | Processing books on our own servers |
| Cloudflare (R2 storage, Workers AI) | Stored books, audio and text; samples of book text | Storage; classifying passages for X-rays |
| OpenAI | Book text and page images | Titles, summaries, chapter lists, figure extraction and reading features |
| OpenRouter, and the model providers it routes requests to (such as Z.ai, Thinking Machines, Baseten, CoreWeave and OpenAI) | Book text | Section primers and reading features |
| Thinking Machines | Paragraphs and their surrounding text | Simplified paragraphs |
| RevenueCat | Your account ID and purchases | Subscriptions and credits |
| Apple | Sign-in, notifications and Live Activity updates (which show your book's title), iCloud sync, payments | Platform services |
| Railway and Axiom | Processing logs with account and book IDs and book titles | Finding and fixing problems |
| OpenAlex, Crossref and DataCite | Entries from a book's bibliography, with nothing about you | Linking citations |
AI providers receive book content without your name, email or account ID. They may keep it for a limited time under their own policies, for example for abuse monitoring.
People you share with in Locus:
- Anyone using Locus who knows your username can find you and see your display name.
- People in your book clubs can see your membership, the books you nominate, and your progress on the club's current book.
- If you send a gift, the recipient sees your username and display name, the book and your message.
When required. We may disclose information if the law requires it, or to protect people's safety or the security of Locus.
One more note on processing. If two people add exactly the same file, the second may receive the stored result of processing the first, which is faster and cheaper. No one is ever told who else added it, and no account information is shared.
How long we keep it
- Account and profile: until you delete your account.
- Your books and what we make from them: until you delete your account. Removing a book from your library removes it from your devices. To delete our copy, delete your account or contact us.
- Uploaded files waiting to be processed: deleted after 7 days.
- Processing logs: up to 180 days.
- Purchase records: as long as Apple, RevenueCat and the law require.
Deleting your account
In Locus, open the account menu and choose Delete account. Within 30 days we delete:
- your account and profile;
- your books and everything we made from them;
- your devices and notification tokens;
- your purchase customer record.
Book club progress and memberships go with your account.
Not deleted by us:
- Your devices and iCloud. To clear what Locus keeps there, delete the app. To remove its iCloud data, open Settings → your name → iCloud → Manage Storage → Locus.
- Purchase and billing records that Apple and RevenueCat must keep.
You can also ask us to delete your account, or for a copy of your data, by emailing drew@locusreading.app.
Your rights
Depending on where you live, you may have the right to:
- access the information we hold about you;
- correct it;
- delete it;
- receive a copy of it;
- object to how we use it.
Email drew@locusreading.app and we'll respond within 30 days. You won't be treated differently for using these rights.
Children
Locus is not for children under 13. If you believe a child under 13 has given us information, email drew@locusreading.app and we'll delete it.
Security
Accounts use Sign in with Apple. Books are stored privately and shared through links that expire. Our staff access personal information only to run and support Locus.
Where your data is processed
Locus and its providers process data in the United States and other countries where they operate.
Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll let you know in the app.
Contact
Drew Carr drew@locusreading.app