Privacy at Livro Encantado
Effective 10 September 2026
Livro Encantado is an interactive picture-book reader operated by Meng To. Children can read and listen to the books without creating an account. Optional accounts are for parents and other adults.
What the app uses
If you choose email sign-in, we use your email address to send a one-time code and maintain your account. Google sign-in shares your basic profile, including your email address, account identifier, name and profile picture. We use this information to authenticate your account. The app does not request access to Gmail, contacts, Drive or other Google content.
Signed-in parents can create up to three reader profiles using a nickname and a story-character avatar, with an optional birthday to show their age. We store each reader’s profile details, current book page, page stars, collected pins, game points, remembered vocabulary, completed books, quiz completion and best scores in Supabase under the parent’s account. Achievement pins are based on these records. Please use a nickname instead of a child’s full name; we do not ask for a child’s email address or photo; the birthday field is optional.
Guests can read the first three books without an account. Guest progress is not saved as an account history. If you choose to sign in while reading, we temporarily remember that book and page in this browser tab for up to 30 minutes so we can save your place after sign-in. Display and audio preferences stay on your device. Sign-in tokens are stored in your browser; signing out clears the visible account progress and this device’s sign-in session.
Services that make the app work
Supabase provides account authentication and stores the book media. The project is hosted in Singapore, and media may be delivered through a global cache. Netlify hosts the website. Resend delivers account emails. Google handles Google sign-in when you choose it. JavaScript libraries are delivered by jsDelivr. These services receive information needed to provide their service, such as network addresses, requests, delivery events and security logs.
The app has no advertising or user-upload feature. Google Analytics is described below. Reader profiles use optional nicknames. The app does not request a child’s email, voice recording or location. Please use an adult’s details when signing in or contacting us.
Payments and membership
If you buy a membership, Stripe handles payment details on its hosted checkout. Livro Encantado receives payment references, your account identifier, the plan, amount, currency, payment status and membership dates. These records are stored in Supabase to confirm and manage your membership. We do not store your full card number or security code. Transaction records may need to be retained after account closure for accounting, refunds, disputes or legal obligations.
WEBSITE ANALYTICS
Understanding visits to Livro Encantado
Livro Encantado uses Google Analytics to measure visits to public pages automatically. You do not need to sign in or enable analytics first.
Google receives the public page title and address, a randomly assigned browser identifier, basic device information, and approximate location derived from your network address. We do not send account names, email addresses, sign-in codes, payment details, or individual reading progress. Query strings and referrers are excluded. Advertising personalization, Google signals, and automatic form, search, and click tracking are disabled.
Analytics cookies expire after one day. Google may process analytics data outside Singapore. Your browser’s cookie controls, tracking protection, or content blockers may limit collection. How Google uses data.
Your choices and account data
You can use the books without signing in and sign out at any time. Account information, reader profiles, reading progress and quiz records are retained while the account exists. To request access, correction or deletion of your account information, email WhatsApp from the account’s email address. Service logs and backups may remain for the providers’ retention periods. You can also revoke Google access in your Google Account settings.
If you believe a child has submitted personal information, contact the same address so we can review and remove it. This page will be updated when the app’s data practices change.