Privacy Policy

This Privacy Policy explains how Parasto Inc. ("Parasto," "we," "us," or "our") collects, uses, and protects personal information when you use the Parasto app and related services (the "Service"). Parasto is a Persian-language audiobook, ebook, and music streaming app made for readers and listeners worldwide.

We believe privacy should be respected by default. We collect only what we need to give you a good experience, we never sell your personal data, and we tell you in plain language what happens with the information you share with us.

1. Who we are

Parasto Inc.
947 Sherman Brock Cir
Newmarket, Ontario, L3X 0G8
Canada
Contact: privacy@parasto.app

2. Information we collect

Information you give us

• Account data — your email address, display name, and (if you sign in with email/password) an encrypted password hash. If you use "Sign in with Apple" or "Sign in with Google," we receive only the basic identifier and email those providers share with us.
• Profile preferences — your preferred language variant (Persian/Iran, Persian/Afghanistan, Tajiki/Cyrillic), audio quality settings, and similar choices.
• Library activity — audiobooks, ebooks, and music you save, purchase, or interact with; bookmarks; reading progress (the position you're at in a book); playback position; and reviews or ratings you submit.
• Payments — purchase records of in-app subscriptions or one-time purchases. We do not receive or store your full credit card number — payments are processed by Apple App Store or Google Play, and (where applicable) by RevenueCat as our subscription manager.
• Support communications — anything you send to us by email or in-app feedback.

Information collected automatically

• Device and technical data — device model, operating system version, app version, language, time zone, and a randomly generated installation identifier.
• Listening and reading telemetry — anonymized counters of which titles are played and for how long, used to improve recommendations and detect playback errors. This does not include the audio itself.
• Crash and diagnostic logs — automatic reports when the app crashes or encounters an error, including the technical state at the time. These do not include the contents of what you were listening to or reading.

What we do not collect

• We do not collect your contacts, calendar, photos, microphone audio, or precise location.
• We do not track your activity across other apps or websites.
• We do not sell your personal data to anyone.

3. How we use information

• To provide the Service — sign you in, sync your library and progress across your devices, stream and download content you have access to.
• To process and verify your purchases and subscriptions.
• To personalize recommendations and surface content relevant to your reading and listening history.
• To respond to your questions, support requests, and feedback.
• To improve and secure the Service — fix bugs, prevent fraud and abuse, understand which features are working.
• To send you essential service messages (e.g., receipts, subscription renewals, security alerts). We do not send marketing emails without your explicit consent.
• To comply with our legal obligations.

4. Legal bases (for users in the EU/UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under one of the following legal bases:

• Contract — to provide the Service you signed up for (Article 6(1)(b) GDPR).
• Legitimate interests — to keep the Service secure, prevent fraud, and improve features (Article 6(1)(f)).
• Consent — for any optional analytics or communications you choose to opt into (Article 6(1)(a)).
• Legal obligation — to meet record-keeping, tax, and regulatory requirements (Article 6(1)(c)).

5. How we share information

We share personal information only with the service providers we need to run the Service, and only to the extent necessary. We do not sell or rent personal data to advertisers or data brokers.

Our service providers include:

• Supabase Inc. — authentication, database, and file storage (United States; Singapore for some regions).
• Apple Inc. and Google LLC — app distribution, in-app purchases, and "Sign in with Apple" / "Sign in with Google" authentication.
• RevenueCat, Inc. — subscription management and receipt validation (United States).
• Microsoft Azure — Tajiki translation support (limited scope, anonymized text).
• Anthropic, PBC — AI-assisted book summaries (we send book metadata only; no user-identifying information).

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of Parasto, our users, or the public.

6. International data transfers

Parasto operates from Canada and uses service providers based in the United States, the European Union, and other regions. When personal data leaves your country, we rely on appropriate safeguards — including the European Commission's Standard Contractual Clauses and provider-level commitments — to protect it.

7. Data retention

We keep your account and library data for as long as your account is active. If you delete your account, we erase your personal data within 30 days, except for records we are legally required to keep (such as purchase receipts and tax records). Anonymous aggregate analytics may be retained indefinitely.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and personal data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@parasto.app. We respond within 30 days.

For users in California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA. You will not be discriminated against for exercising your rights.

For users in Quebec (Law 25)

Quebec residents have additional rights under Law 25, including the right to be informed of automated decision-making and the right to data portability. Our Privacy Officer can be reached at privacy@parasto.app.

9. Children's privacy

Parasto is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact privacy@parasto.app and we will delete it promptly.

10. Security

We protect your information using industry-standard measures, including encryption in transit (TLS), encryption at rest, access controls, and routine security review. No system is perfectly secure, but we treat protecting your data as a core responsibility.

11. Cookies and similar technologies

The Parasto app uses local storage on your device to remember your sign-in, library, and preferences. The Parasto website uses only essential cookies needed to make the site work; we do not use advertising or third-party tracking cookies.

12. Changes to this policy

If we make material changes to this policy, we will notify you in the app and update the "Last updated" date above. Continued use of the Service after a change indicates your acceptance of the updated policy.

13. Contact us