Vibrant Publishers - Privacy Policy

Last updated: 2 July 2026

Applies to: the Vibrant Publishers website (vibrantpublishers.com and vibrantpublishers.in) and the Vibrant Publishers mobile app (Android package com.vibrantpublishers.app), together the “Services.”

Provider: Vibrant Publishers LLC

Registered address: 3621 Harvard Place, Broomfield, CO 80023, United States

Contact: reachus@vibrantpublishers.com

Where a section below applies to only one of the Services, it is labeled Website only or App only. Unlabeled sections apply to both.

1. Overview

Vibrant Publishers offers educational books and study materials through our website and through Vibrant Publishers app, an e-reading and study app that lets you read books you’re entitled to, take notes, use an AI study assistant, and take certificate quizzes. This policy explains what personal information we collect across these Services, why, where it’s stored, who processes it, and your rights.

App only: We do not sell Vibrant Publishers app user data, and we do not use the app data to train AI models.

Website only: As explained in Section 8, the website does share certain information with advertising partners in a way that may be considered a “sale” of personal information under the CCPA.

2. Information we collect

2.1 Website — device and order information

• Device/usage information — browser version, IP address, time zone, cookie information, products viewed, search terms, and how you interact with the site. Collected automatically via cookies, log files, web beacons, tags, chatbot, and pixels.

• Order information — name, billing address, shipping address, email address, and phone number, collected when you place an order and shared with our processor Shopify.

2.2 App — account, purchase, and content information

• Account data — name, username, email address, password (stored only as a secure hash), role, and an optional profile photo.

• Purchase data — in-app purchases of “Sparks” and resulting entitlements. Card details are handled by the app store/payment processor and are never seen or stored by us.

• Your content — notes, highlights, bookmarks, reading progress, quiz attempts, and certificate records.

• AI interactions — questions you ask the AI study assistant and the answers returned (see Section 5).

• Technical/operational data — device identifiers used for login/session security and offline-download licensing, app version, and server-side logs for reliability and security. The app does not use third-party analytics, advertising, or tracking SDKs (see Section 9).

3. How we use your information

To provide the Services — operating the website and app, processing orders and purchases, shipping and fulfillment, providing invoices/order confirmations, syncing your notes and progress, answering your AI questions, communicating with you, screening for fraud/risk, and (on the website, where consistent with your preferences) providing product information or advertising. We also use it to keep the Services secure, prevent abuse, and comply with legal obligations.

Lawful basis (EEA residents): performance of our contract with you, your consent (e.g., cookies, AI features, optional profile photo), compliance with legal obligations, protection of vital interests, performance of a task carried out in the public interest, and our legitimate interests where these don’t override your rights and freedoms.

4. Behavioral advertising and cookies — Website only

We use your information to provide targeted advertisements or marketing communications:

• Google Analytics helps us understand site usage. Read Google’s policy at https://www.google.com/intl/en/policies/privacy/ or opt out at https://tools.google.com/dlpage/gaoptout.

• We share information about your site use, purchases, and ad interactions with advertising partners, including via cookies.

• Shopify Audiences helps us show ads to buyers who purchased from other Shopify merchants and may be interested in our products; we share your site use, purchases, and email address with Shopify Audiences for this purpose.

• Learn more about targeted advertising at the Network Advertising Initiative: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Opt out of targeted advertising:

• Facebook — https://www.facebook.com/settings/?tab=ads

• Google — https://www.google.com/settings/ads/anonymous

• Bing — https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

• Digital Advertising Alliance portal — https://optout.aboutads.info/

Cookies: The website uses functional, performance, advertising, and social/content cookies (via Shopify) to operate the store, remember your preferences, and understand how visitors use the site. Full cookie tables (checkout, cart, analytics, and authentication cookies with names and durations) are available on request and should be cross-checked against Shopify’s current cookie list at https://www.shopify.com/legal/cookies before publishing.

You can manage cookies through your browser settings; blocking cookies may affect site functionality. We do not alter our practices in response to “Do Not Track” signals, as there is no consistent industry standard for responding to them.

App note: Vibrant Publishers app does not use third-party analytics, advertising, or tracking SDKs, and cookies as described above do not apply to the app.

5. AI Study Assistant — App only

What is sent: when you ask the assistant a question, your question and the relevant passages from the book you’re asking about are sent to our AI providers to generate an answer.

Providers (sub-processors): answers are generated by Anthropic (Claude); retrieval of relevant passages uses OpenAI embeddings. These providers process data on our behalf under their API terms.

Storage: your AI questions and answers are stored on our servers, linked to your account, to provide your history and allow safety moderation of flagged answers.

Model training: we do not use your data to train AI models, and our AI providers do not use API data to train their models by default.

Retention: AI interactions are retained until you delete your account, or for 12 months, whichever is earlier.

Please do not share sensitive personal information (health, financial account, government ID, or password details) with the AI assistant. Answers are generated automatically, may be inaccurate or incomplete, and are not professional advice.

6. Device permissions — App only

Vibrant Publishers app requests only the minimum permissions needed:

• Internet/network — required for core functionality.

• In-app billing — to process purchases through the app store.

Vibrant Publishers app does not request or use microphone, location, external file storage, or screen-overlay permissions, and does not currently send push notifications.

7. Payments and purchases — App only

Processor: in-app purchases are processed by Google Play Billing, with RevenueCat as our purchase-management provider. We never receive or store your card/payment details.

What you buy: “Sparks,” an in-app virtual currency, sold as one-time (consumable) purchases, spent on AI questions and certificate courses.

No subscriptions: there are no recurring charges, subscriptions, or auto-renewals.

Refunds: subject to the Google Play refund policy; request via your Play Store order history or by contacting us. Spent Sparks are non-refundable.

Website order processing and Shopify’s role are described in Sections 2.1 and 3 above.

8. Sharing and selling personal information

8.1 Website

We share order information with our processor, Shopify (https://www.shopify.com/legal/privacy), and may disclose information to comply with laws, subpoenas, or lawful requests, or to protect our rights.

The website sells personal information as defined by the CCPA — the category sold is information about your site use, purchases, and the email address associated with your purchase, shared via Shopify Audiences. To opt out, use the mechanisms in Section 4. We do not provide any financial incentive in exchange for the sale of personal information, and we do not knowingly sell the personal information of anyone under 18; the website is intended for adults aged 18 and older (see Section 11).

Mobile opt-in/SMS consent and phone numbers collected for SMS purposes are not shared with third parties for marketing.

8.2 App

We share App data only with providers that process it on our behalf:

We do not sell App data, and the App does not use third-party analytics, advertising, or marketing/tracking SDKs.

9. Where your data is stored & international transfers

App data is stored in a PostgreSQL database (via Supabase) hosted on AWS in the ap-south-1 region (Mumbai, India). Some App data is processed outside India by OpenAI and Anthropic (AI features), RevenueCat and Google (purchase validation), and AWS SES (transactional email) — all United States-based.

App data (India / DPDP Act). Under India’s Digital Personal Data Protection Act, 2023, personal data may be transferred outside India to any country not restricted by the Central Government of India. The countries to which we transfer App data (currently the United States, for the AI, purchase-validation, and email services listed above) are not on any such restricted list. Each of these providers processes your data on our behalf under contractual data-protection terms (data processing agreements) that require appropriate security and limit use of your data to providing the service to us.

Website data (EEA / GDPR). Website data is processed by Shopify and related processors; for EEA residents, data is initially processed in Ireland and then transferred outside Europe, including to Canada and the United States, using the transfer mechanisms Shopify puts in place, which include the European Commission’s Standard Contractual Clauses and, where applicable, providers’ certification under the EU–US Data Privacy Framework. See Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

All transfers. Where we or our processors transfer personal data internationally, we rely on the data-protection terms in our agreements with those providers and, where required by applicable law, on recognised transfer safeguards such as Standard Contractual Clauses. You may contact us for more information about the safeguards applicable to a specific transfer.

10. Automated decision-making — Website only

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. Our processor Shopify uses limited automated decision-making to prevent fraud (temporary IP blacklists of a few hours, and temporary card blacklists of a few days) that does not have a legal or otherwise significant effect on you.

11. Children’s privacy

App only: Vibrant Publishers app is intended only for users aged 18 and older. It is not directed to, and not intended for, anyone under 18. Users confirm they are 18+ at sign-up. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we delete the account and its data. Because the app is restricted to adults, no parental-consent process applies.

Website only: The Vibrant Publishers website is intended for users aged 18 and older, and purchases may only be made by adults aged 18 or over. The website is not directed to, and not intended for, anyone under 18. We do not knowingly collect personal information from anyone under 18 through the website; if we become aware that we have collected personal information from a person under 18, we will delete that information. Because both Services are restricted to adults, no parental-consent process applies under India’s Digital Personal Data Protection Act or other applicable children’s-privacy laws.

12. Data retention

Website: we retain order information for our records unless and until you ask us to erase it (see Section 13).

App: we keep your data while your account is active. When you delete your account, we erase your personal data as described below. Backups and security logs may persist for up to 30 days before being overwritten, and we keep a minimal record that a deletion occurred, for compliance. AI interactions are retained per Section 5.

13. Your rights & account deletion

GDPR (EEA residents)

You have the right to access the personal information we hold about you, to port it to a new service, and to ask that it be corrected, updated, or erased. Contact us using the details in the “Contact” section to exercise these rights.

CCPA (California residents)

You have the Right to Know, the right to port your data, and the right to ask that it be corrected, updated, or erased, as well as the right to opt out of the sale of your information (Section 8.1). You may designate an authorized agent to submit requests on your behalf by contacting us.

India DPDP Act — App, and Website where applicable

If you are located in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) gives you the following rights in relation to the personal data we process about you as a Data Principal:

• Right to access information — to obtain a summary of the personal data we process about you and the processing activities we undertake, together with the identities of other data fiduciaries and processors with whom your data has been shared and a description of the data shared.

• Right to correction, completion, updating, and erasure — to request that we correct inaccurate or misleading personal data, complete incomplete data, update your data, and erase personal data that is no longer necessary for the purpose it was collected, unless retention is required by law.

• Right to grievance redressal — to a readily available means of registering a grievance with us regarding our processing of your personal data or our response to the exercise of your rights.

• Right to nominate — to nominate another individual who may exercise your rights under the DPDP Act on your behalf in the event of your death or incapacity.

• Right to withdraw consent — where we rely on your consent to process your personal data, you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal, and may limit or prevent your use of features that depend on that data.

Grievance redressal. If you have a concern about how we handle your personal data, you can raise it with us at reachus@vibrantpublishers.com. We will acknowledge your grievance and aim to resolve it within the timelines prescribed under the DPDP Act and its Rules, and in any case without undue delay. If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India in accordance with the DPDP Act.

Deleting your account

App: delete your account in-app via Profile → Delete account. This permanently deletes your account, entitlements, reading progress, notes, highlights, AI history, and bookmarks.

Website: contact us at reachus@vibrantpublishers.com to request correction, deletion, or export of your order information.

You may also contact us at reachus@vibrantpublishers.com.

14. Security

We protect data with encryption in transit, hashed passwords, device-bound session controls (App), and encrypted offline book storage (App). No system is perfectly secure, but we work to protect your data across both Services.

15. Complaints

If you’re not satisfied with our response to a complaint, you have the right to lodge it with the relevant data protection authority. EEA residents may contact their local supervisory authority; India residents may contact the Data Protection Board of India; California residents may contact the California Privacy Protection Agency or the California Attorney General. You can also contact us first at reachus@vibrantpublishers.com and we will do our best to resolve it.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised version with an updated “Last updated” date and, where required, notify you in-app or on the website.

Contact

Vibrant Publishers LLC

reachus@vibrantpublishers.com

3621 Harvard Place, Broomfield, CO 80023, United States