EDinBOOK Privacy Policy

1. Introduction

EDinBOOK (“EDinBOOK,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Global Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal information when you access or use EDinBOOK websites, applications, platforms, services, digital content services, publishing services, educational services, payment facilities, communications channels, and other products or services that link to or expressly incorporate this Privacy Policy (collectively, the “Services”).

EDinBOOK is designed to serve users, authors, content providers, publishers, educational institutions, students, researchers, readers, organizations, partners, and other stakeholders across multiple countries and jurisdictions.

Because privacy and data-protection laws differ between countries, certain provisions of this Privacy Policy may apply differently depending on your location, the Services you use, your relationship with EDinBOOK, and the law applicable to your personal information.

Where a local law provides additional rights or protections, those rights will apply to the extent required by that law.

The EDinBOOK mobile apps: what the EDinBOOK Android and iOS apps collect, which device permissions they use, which service providers receive data, and how to delete your account are set out in Annex A at the end of this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through or in connection with:

• EDinBOOK websites and web applications;
• EDinBOOK mobile and desktop applications;
• user accounts and profiles;
• digital books and other digital content;
• book purchasing, selling, publishing and distribution services;
• author and content-provider services;
• publisher and institutional services;
• educational and research-related services;
• payment and transaction activities;
• customer support and communications;
• marketing and promotional activities;
• events, campaigns, surveys and other EDinBOOK activities; and
• other services that expressly reference this Privacy Policy.

This Privacy Policy does not necessarily apply to third-party websites, applications, services, products or platforms that EDinBOOK does not own or control, even where those services are linked to or accessible through EDinBOOK.

3. Important Definitions

For purposes of this Privacy Policy:

“Personal Information” or “Personal Data” means information relating to an identified or identifiable individual, or information otherwise protected as personal information under applicable law.

“Processing” includes collecting, recording, organizing, storing, using, analyzing, sharing, transferring, modifying, retrieving, disclosing, deleting or otherwise handling personal information.

“User” means any individual or organization that accesses or uses the Services.

“Content” includes books, manuscripts, publications, documents, educational materials, metadata, images, audio, video and other materials submitted, uploaded, published, purchased, licensed or otherwise made available through the Services.

4. Information We Collect

The information we collect depends on how you interact with EDinBOOK.

4.1 Information you provide directly

You may provide personal information when you:

• create or update an account;
• purchase or access digital or physical content;
• publish or submit content;
• register as an author, content provider or publisher;
• register an educational institution or organization;
• communicate with customer support;
• participate in surveys, events or promotions;
• subscribe to communications;
• submit inquiries or complaints;
• participate in communities, forums or other interactive features; or
• otherwise voluntarily provide information to us.

This information may include:

• full name;
• username;
• email address;
• telephone number;
• postal or billing address;
• country or region;
• institutional or professional affiliation;
• author or publisher information;
• profile information;
• payment and transaction information;
• tax or payment information where legally required;
• information contained in correspondence with us;
• information relating to books or other Content submitted by you; and
• other information you choose to provide.

We will only request information that is reasonably relevant to the purpose for which it is collected, subject to applicable law.

4.2 Information collected automatically

When you access or use the Services, we may automatically collect certain technical and usage information, including:

• IP address;
• device type;
• operating system;
• browser type and version;
• application version;
• language and regional settings;
• approximate location derived from technical information where permitted;
• referring and exit pages;
• pages, books, content or features viewed;
• search queries;
• dates and times of access;
• interactions with the Services;
• device identifiers;
• crash reports;
• performance information; and
• security and diagnostic information.

Where required by law, we will obtain consent before collecting or using information through certain tracking technologies.

4.3 Information received from third parties

We may receive personal information from third parties where permitted by law, including:

• educational institutions;
• publishers;
• authors and content providers;
• business partners;
• payment processors;
• identity or authentication providers;
• fraud-prevention providers;
• analytics providers;
• marketing providers;
• publicly available sources; and
• other users or organizations that lawfully provide information to us.

Where required by law, we will ensure that appropriate legal grounds exist for receiving and processing such information.

5. How We Use Personal Information

We may process personal information for the following purposes:

Providing and operating the Services

We use information to:

• create and manage accounts;
• authenticate users;
• provide access to purchased or authorized Content;
• process orders and transactions;
• facilitate publishing and distribution;
• facilitate payments and royalty or revenue calculations;
• provide customer support;
• maintain user preferences;
• provide institutional and educational services;
• communicate about Services; and
• otherwise perform our contractual obligations.

Security and fraud prevention

We may process information to:

• detect and prevent fraud;
• protect accounts;
• investigate suspicious activity;
• prevent abuse of the Services;
• protect our systems and infrastructure;
• detect malware and other security threats;
• enforce our Terms of Use and other agreements; and
• protect EDinBOOK, users and third parties.

Improving EDinBOOK

We may use information to:

• understand how users interact with the Services;
• identify technical problems;
• improve functionality;
• develop new features;
• conduct research and analytics;
• measure performance;
• personalize aspects of the Services; and
• improve the quality and relevance of Content and recommendations.

Communications and marketing

Where permitted by applicable law, we may use personal information to:

• send service-related communications;
• provide account notifications;
• communicate changes to our Services;
• provide information about products and features;
• send promotional communications where legally permitted; and
• administer promotions, surveys and similar activities.

You may opt out of marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Legal and regulatory purposes

We may process information to:

• comply with applicable laws and regulations;
• respond to lawful requests from governmental authorities;
• establish, exercise or defend legal claims;
• enforce agreements;
• investigate suspected violations;
• protect rights, safety and property; and
• meet accounting, tax, audit and recordkeeping obligations.

6. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, EDinBOOK may rely on one or more of the following:

• Performance of a contract: where processing is necessary to provide Services you requested or to perform an agreement with you.
• Legal obligation: where processing is necessary to comply with applicable law.
• Legitimate interests: where processing is necessary for legitimate business, security, operational or service-improvement purposes and those interests are not overridden by applicable rights.
• Consent: where we are required to obtain your consent or where we choose to rely on consent.
• Protection of vital interests: where recognized under applicable law and necessary to protect someone’s vital interests.
• Other lawful grounds: where another lawful basis is available under the applicable jurisdiction.

Where we rely on consent, you may withdraw that consent subject to legal or contractual limitations.

Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

7. Account Information and Security

You are responsible for maintaining the confidentiality of your account credentials and for taking reasonable steps to protect your account.

EDinBOOK may use authentication, verification, access-control and other security mechanisms to protect accounts and Services.

You should notify us promptly if you believe that your account has been compromised or accessed without authorization.

8. Payments and Financial Information

EDinBOOK may facilitate payments for books, subscriptions, services, publishing activities, royalties, commissions and other transactions.

Depending on the transaction and applicable payment arrangement, payment information may be processed by third-party payment processors, financial institutions, banks, payment gateways, e-wallet providers or other financial service providers.

Where a third-party payment provider processes your payment information directly, EDinBOOK may not receive or store the complete payment-card information.

Payment information may be used to:

• process transactions;
• verify payments;
• issue refunds;
• prevent fraud;
• reconcile transactions;
• calculate applicable revenue, royalties, commissions or other payments;
• comply with financial, tax and regulatory obligations; and
• resolve payment disputes.

Third-party payment providers may have their own privacy policies and terms.

9. Authors, Content Providers and Publishers

If you submit Content to EDinBOOK as an author, content provider, publisher or other rights holder, we may process information necessary to administer your relationship with EDinBOOK.

This may include:

• name;
• contact information;
• author or publisher profile;
• payment information;
• tax information;
• rights and licensing information;
• Content metadata;
• contractual information;
• transaction history;
• royalty or revenue information; and
• records relating to Content submitted or distributed through EDinBOOK.

Certain information associated with published Content may be displayed publicly or made available to users as necessary to identify, describe, market or distribute the Content.

The processing and use of Content itself is also governed by the applicable Author & Content Provider Agreement, Publisher Agreement, Publishing Agreement or other applicable agreement.

10. Educational Institutions and Organizations

EDinBOOK may provide Services to educational institutions, publishers, research organizations, companies and other organizations.

Where an organization provides EDinBOOK with information about users, the organization may determine the purposes for which certain information is processed.

In such circumstances, EDinBOOK may process information on behalf of that organization in accordance with applicable agreements and law.

Users should contact the relevant organization where they have questions about information provided to EDinBOOK by that organization.

11. User Content and Public Information

Some EDinBOOK Services may allow users to publish, display or otherwise make Content or profile information available to other users or the public.

Information that you voluntarily make public may be viewed, copied, indexed, redistributed or otherwise used by others.

You should therefore exercise care before publishing personal information in books, profiles, comments, descriptions, documents, images, videos or other Content.

Your ownership and licensing rights relating to User Content are governed by the applicable EDinBOOK agreement.

12. Cookies and Similar Technologies

EDinBOOK may use cookies, pixels, web beacons, local storage, software development kits and similar technologies.

These technologies may be used for purposes such as:

• authentication;
• maintaining sessions;
• remembering preferences;
• security;
• analytics;
• performance monitoring;
• personalization;
• advertising; and
• understanding how users interact with the Services.

Some technologies are necessary for the operation of the Services, while others may be optional.

Where applicable law requires consent for non-essential cookies or similar technologies, EDinBOOK will provide an appropriate consent mechanism.

You may also control certain cookies through your browser or device settings.

Blocking certain technologies may affect the functionality of the Services.

13. Analytics, Personalization and Profiling

EDinBOOK may analyze information relating to how users interact with the Services in order to:

• understand usage patterns;
• improve search and discovery;
• recommend relevant Content;
• improve products and services;
• detect fraud;
• maintain security;
• measure advertising effectiveness; and
• conduct research and statistical analysis.

Where applicable law treats such processing as profiling or automated decision-making, EDinBOOK will provide the rights and safeguards required by that law.

EDinBOOK will not make decisions producing legally significant or similarly significant effects solely through automated processing where prohibited by applicable law.

14. How We Share Personal Information

EDinBOOK does not sell personal information indiscriminately.

We may disclose personal information where necessary and lawful to the following categories of recipients:

Service providers

We may use third-party providers for:

• cloud hosting;
• data storage;
• payment processing;
• authentication;
• analytics;
• communications;
• customer support;
• cybersecurity;
• fraud prevention;
• marketing;
• content delivery;
• technical infrastructure;
• accounting;
• auditing; and
• other operational functions.

These providers may process personal information only as permitted by applicable agreements and law.

Educational institutions, publishers and organizations

Where necessary to provide Services or fulfil contractual obligations, we may share relevant information with institutions, publishers or organizations connected to your use of the Services.

Authors and content providers

Certain transaction or usage information may be processed or reported to authors, publishers or content providers where necessary to calculate royalties, revenue shares, licensing fees, usage metrics or other contractual payments.

Affiliates

Where EDinBOOK operates through affiliated entities, personal information may be shared between those entities for legitimate operational purposes, subject to applicable law.

Legal and regulatory authorities

We may disclose information where reasonably necessary to:

• comply with law;
• respond to valid legal processes;
• comply with governmental or regulatory requests;
• protect users or the public;
• investigate fraud or unlawful activity;
• enforce our agreements; or
• establish, exercise or defend legal rights.

Business transfers

If EDinBOOK is involved in a merger, acquisition, restructuring, financing, reorganization, sale of assets, bankruptcy or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

15. International Data Transfers

EDinBOOK is a global platform and may operate, use service providers, or maintain infrastructure in countries other than the country in which you live.

Accordingly, your personal information may be transferred to, stored in, or processed in countries that may have data-protection laws different from those in your country.

Where applicable law restricts international transfers, EDinBOOK will implement an appropriate lawful transfer mechanism or safeguard.

Depending on the applicable jurisdiction, such safeguards may include:

• contractual protections;
• approved standard contractual clauses;
• adequacy decisions;
• binding corporate arrangements;
• recognized certification mechanisms; or
• another lawful transfer mechanism.

Where required by law, additional information concerning applicable transfer safeguards may be requested from EDinBOOK through the contact details provided in this Privacy Policy.

16. Data Security

EDinBOOK uses reasonable technical, administrative and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse or destruction.

Depending on the nature and sensitivity of the information, measures may include:

• access controls;
• authentication mechanisms;
• encryption where appropriate;
• network and infrastructure security;
• monitoring and logging;
• backup and recovery procedures;
• personnel confidentiality obligations;
• vendor security controls; and
• incident-response procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

Accordingly, while we work to protect personal information, EDinBOOK cannot guarantee absolute security.

17. Data Retention

EDinBOOK retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

• the nature of the information;
• the purpose for which it was collected;
• the nature of the relationship with EDinBOOK;
• contractual requirements;
• legal and regulatory obligations;
• accounting and tax requirements;
• dispute resolution;
• fraud prevention;
• security requirements; and
• applicable limitation periods.

When personal information is no longer required, EDinBOOK will take reasonable steps to delete, anonymize or securely dispose of it, subject to applicable legal requirements.

Deleting an account may not result in immediate deletion of all information where EDinBOOK is legally required or otherwise permitted to retain certain information.

18. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information, including:

• the right to know whether we process your personal information;
• the right to access your personal information;
• the right to correct inaccurate information;
• the right to request deletion;
• the right to restrict certain processing;
• the right to object to certain processing;
• the right to data portability;
• the right to withdraw consent;
• the right to opt out of certain marketing communications;
• the right to object to certain profiling or automated decision-making;
• the right to request information about international transfers; and
• the right to lodge a complaint with an applicable data-protection authority.

These rights are not absolute and may be subject to exceptions under applicable law.

For example, EDinBOOK may retain information where necessary to comply with legal obligations, establish or defend legal claims, prevent fraud, maintain security, complete a transaction, or fulfil other lawful purposes.

19. How to Exercise Your Rights

To exercise an applicable privacy right, contact us at:

Privacy Email: contact@edinbook.com

Your request should provide sufficient information for us to understand and verify your request.

Where permitted by law, we may request additional information to verify your identity before responding.

We will respond within the period required by applicable law.

If EDinBOOK denies your request, we will provide an explanation where required by law and inform you of any applicable appeal or complaint process.

20. Marketing Communications

You may receive transactional communications necessary for the operation of your account or use of the Services.

These may include:

• account notices;
• security alerts;
• transaction confirmations;
• payment notifications;
• service updates;
• changes to agreements; and
• other essential communications.

These communications cannot necessarily be opted out of because they are necessary to provide the Services.

You may generally opt out of non-essential marketing communications by:

• clicking the unsubscribe mechanism in the relevant communication;
• changing your account communication preferences where available; or
• contacting EDinBOOK.

Opting out of marketing communications does not prevent us from sending essential service-related communications.

21. Children and Minors

EDinBOOK recognizes that its Services may be used in educational environments where minors may be involved.

EDinBOOK does not knowingly collect personal information from children in circumstances where applicable law requires parental or guardian authorization unless such authorization or another lawful basis has been obtained.

Different countries define children and applicable consent requirements differently.

Where EDinBOOK provides Services to educational institutions involving students who are minors, the applicable institution, parent/guardian, and EDinBOOK will have responsibilities determined by applicable law and the relevant contractual arrangements.

If you believe that a child has provided personal information to EDinBOOK in circumstances where it should not have been collected, please contact us.

22. Third-Party Services and Links

The Services may contain links, integrations or references to third-party websites, applications, payment services, social-media platforms or other services.

EDinBOOK does not control the privacy practices of independent third parties.

Your use of third-party services is subject to the privacy policies and terms of those third parties.

We encourage you to review those policies before providing personal information to third parties.

23. Data from Third-Party Services

If you choose to connect an EDinBOOK account to a third-party service, EDinBOOK may receive information that the third party makes available to us based on your authorization and the third party’s policies.

EDinBOOK will use such information in accordance with this Privacy Policy and applicable law.

24. De-identified and Aggregated Information

EDinBOOK may create aggregated, statistical, anonymized or otherwise de-identified information from personal information where permitted by applicable law.

Such information may be used for:

• analytics;
• research;
• service improvement;
• reporting;
• business planning;
• educational or industry analysis; and
• other legitimate purposes.

Where information has been properly anonymized so that individuals can no longer reasonably be identified, it may no longer constitute personal information under applicable law.

25. Do Not Track and Similar Signals

Some browsers and devices provide privacy preference signals.

EDinBOOK will process such signals in accordance with applicable legal requirements and the technical capabilities of the Services.

Where a jurisdiction requires EDinBOOK to recognize a particular privacy signal, EDinBOOK will implement the required treatment.

26. Data Breaches and Security Incidents

If EDinBOOK becomes aware of a personal-information security incident, we will assess and respond to the incident in accordance with our incident-response procedures and applicable law.

Where notification is legally required, EDinBOOK will notify affected individuals, regulators, customers or other relevant parties within the timeframe and in the manner required by applicable law.

27. Changes to this Privacy Policy

EDinBOOK may update this Privacy Policy from time to time to reflect:

• changes in our Services;
• changes in technology;
• changes in legal or regulatory requirements;
• changes in business operations; or
• improvements to our privacy practices.

When we make material changes, we will provide notice through an appropriate channel, such as posting an updated Privacy Policy, providing an in-product notice, or sending an email where appropriate.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

Where applicable law requires your consent to a material change, EDinBOOK will obtain such consent.

28. Jurisdiction-Specific Privacy Rights

Because EDinBOOK operates globally, additional privacy rights or disclosures may apply depending on your location.

Where required, EDinBOOK may publish jurisdiction-specific supplements or notices addressing requirements applicable to users in particular countries, regions or states.

Such supplements form part of this Privacy Policy for users to whom they apply.

Where a mandatory local law conflicts with this Privacy Policy, the mandatory local law will prevail to the extent of the conflict.

29. Privacy Complaints

If you have a concern about EDinBOOK’s handling of your personal information, please contact us first using the information below.

Privacy Contact: contact@edinbook.com

We will investigate and respond to privacy complaints in accordance with applicable law.

Where applicable law provides you with the right to complain directly to a data-protection or privacy regulator, you may exercise that right.

Jurisdictional Application

EDinBOOK’s commitment to privacy is intended to operate as a global baseline.

Nothing in this Privacy Policy is intended to:

• remove rights that cannot lawfully be excluded;
• prevent a user from exercising mandatory rights under applicable law;
• require a user to waive statutory privacy protections;
• override mandatory data-protection requirements applicable to a particular jurisdiction; or
• restrict a regulator or competent authority from exercising powers granted by law.

Where local law provides greater protection than this Privacy Policy, EDinBOOK will apply the greater protection to the extent legally required.

Annex A — The EDinBOOK Apps: Data, Permissions and Your Choices

This Annex forms part of this Privacy Policy. It describes, specifically, what the EDinBOOK apps for Android and iOS and the EDinBOOK website (edinbook.com) collect, why, who receives it, how long it is kept and how to delete it. Annex last updated: 13 October 2026.

Who we are: EDinBOOK, the operator of edinbook.com and the EDinBOOK apps (Android package com.edinbook.edinbook; iOS app “EDinBOOK”). Privacy questions and requests: contact@edinbook.com.

We do not sell your personal information. The apps contain no advertising and no third-party advertising or analytics SDKs, and they do not use the device advertising ID.

A.1 Account and profile information

• What: your name, e-mail address (your sign-in username), phone number, password (stored only as a one-way hash), member type (for example student, lecturer, publisher), school or institution, department or course, level, country and profile photo.
• Why: to create and run your account, sign you in, show your profile to the classes you join and personalise the books and classes you see.
• Kept: while your account exists; see A.8 for deletion.

A.2 Purchases, wallet and payments

• What: the books, chapters or pages you buy, your wallet balance and top-ups, transaction references, amounts, currency and status. Publishers additionally provide payout details (bank account or PayPal e-mail address) so that earnings can be paid.
• Card details are entered on Paystack’s secure payment page; EDinBOOK does not receive or store your full card number.
• Why: to process purchases, give you access to what you bought, handle refunds and disputes, pay publishers, and meet accounting and tax obligations.
• Kept: financial records are kept for as long as accounting and tax law requires, even after an account is deleted.

A.3 Your content and activity in the apps

• What: the books you open and your reading progress; classes you create or join, class posts, session chat messages; assessments you take and your answers, including any photos, videos, audio recordings or documents you choose to attach; attendance records; tasks, timetables, notes and other study tools you use.
• Purchased books you download for offline reading are stored on your device in encrypted form.
• Why: to provide these features to you and to the lecturers, classmates and institutions you share them with (for example, a lecturer sees the answers you submit to their assessment).

A.4 Precise location (attendance only)

• What: your device’s GPS position and its accuracy, and whether the device reports a simulated (“mock”) location.
• When: only at the moment you mark class attendance, or when a lecturer or approved class representative starts an attendance session. The apps do not collect location in the background.
• Why: to confirm that you are within the class venue’s attendance radius. The coordinates are saved with that attendance record so the lecturer can rely on it.
• Your choice: location permission is optional. If you refuse it, you cannot mark location-checked attendance, but every other feature keeps working. You can change the permission at any time in your device settings.

A.5 Device permissions the apps use

• Location (while using the app): attendance only, as described in A.4.
• Camera: to scan class QR codes and, when you choose, to take photos or record videos you submit as assessment answers.
• Microphone: to record audio answers and voice notes when you choose to. Voice notes can be turned into text by your device’s own speech-recognition service (Google on Android, Apple on iOS).
• Photos and files: only the files you pick in the system picker (for example an answer attachment, a profile photo, or a book a publisher uploads). The apps do not read your storage or photo library otherwise.
• Notifications: to tell you about classes, assessments, purchases and book updates. Optional; the app asks before turning them on, and you can turn them off at any time in your device settings.
• Network, start-up and background sync: to download your books, restore reminders after a restart and finish large book downloads.

A.6 Device, security and technical information

• An identifier generated by the app at installation, used to keep your account to one phone at a time and to protect purchased content.
• A push-notification token from Firebase Cloud Messaging, only if you allow notifications.
• To protect authors’ and publishers’ content, Android blocks screenshots of the app, and screenshots or screen recordings taken in the app on iOS are recorded against your account.
• Our servers record IP addresses and access logs for security and abuse prevention.
• The apps check the App Store or Google Play to see whether a newer version is available.

A.7 Service providers that receive data

Personal information is shared only as needed for the purpose described:

• Paystack — card, bank and mobile-money payments.
• PayPal — publisher payouts, where the publisher chooses PayPal.
• Google Firebase Cloud Messaging — delivering push notifications.
• Google Maps — showing the map on the attendance screen.
• OpenAI — when you use an AI feature (for example note summaries, flashcards, quizzes or questions about a book), the text you submit is sent to OpenAI to generate the answer. AI requests are logged for 90 days for abuse prevention and AI-credit accounting; cached answers are kept for 2 days.
• Your device’s speech-recognition service — converting voice notes to text.
• Our hosting and e-mail delivery providers — running our servers and database and sending account e-mails.
• Lecturers, class representatives and institutions — the class content, submissions and attendance records of the classes you take part in.
• Authors and publishers — sales figures for their own books; they do not automatically receive buyers’ personal information.

A.8 Deleting your account and data

You can delete your account at any time:

• in the app: on the sign-in screen tap Delete Account, or open the menu, choose Account Security and use Delete Account;
• on the website: sign in, open Account Security and use Delete Account;
• or e-mail contact@edinbook.com from the e-mail address registered to your account.

Full instructions: https://edinbook.com/account-deletion.php

When you delete your account it is deactivated immediately and every device signed in to it is signed out. Within 30 days your name, phone number, profile photo and profile details, password, two-factor secret, sign-in tokens, device identifier and notification token are deleted, and the account is shown as “Deleted user”. Records we must keep by law (for example financial transaction records for tax and audit) are kept for the period the law requires and are not used for any other purpose; your e-mail address is kept only as the reference on those records. Posts, messages, assessment answers and attendance records you made in a class stay with that class under “Deleted user” as academic records, and are removed on request. Books already sold to other customers remain available to those customers, as set out in our Terms of Use and Publisher Agreement.

You can also ask us to delete specific data without deleting your account by e-mailing contact@edinbook.com.

A.9 How we protect data

• All data between the apps and our servers is encrypted in transit (HTTPS/TLS).
• Passwords are stored only as one-way hashes; sign-in sessions use short-lived, revocable tokens.
• Offline copies of books are encrypted on your device.
• Access to personal information is restricted to staff and service providers who need it.

A.10 Children

The EDinBOOK apps are not directed at children under 13, and we do not knowingly collect personal information from children under 13 without the authorisation required by law. Younger students should use EDinBOOK only through their school or with a parent or guardian. If you believe a child’s data has been collected without that authorisation, e-mail contact@edinbook.com and we will delete it.