PRIVACY POLICY
Effective Date: October 13, 2026
1. IDENTITY OF THE DATA CONTROLLER
Scroll+ is an Android e-book reader developed by Xenit and published by OWL APP LTD. OWL APP LTD is the data controller for the personal data described in this policy.
Company Registration: OWL APP LTD, Company Number 16945604, registered in England and Wales. Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: contact@owl-app.com | owl-app.com
2. DATA LOCALITY & COLLECTION
Most book data stays on your device. We process account, Nova and app usage session data for the features and checks described below:
- Authentication: Secure Google Sign-In for synchronized progression across your devices.
- Activity: Real-time Nova, Title, and Streak metrics for global leaderboard competition. To calculate Nova and investigate scoring errors or unusual activity, we store the reported reading-session duration, interaction count in the reader, and numeric summaries of forward and backward reading-position changes with your account. This Nova audit record does not contain a book title, text, or file identifier. It is reviewed by an authorized operator when needed and does not trigger automatic penalties. This includes short-interval numeric summaries of reading time, progress, backward movement and direction changes, plus the app version and build number. We link random reading-session and foreground app-usage session IDs to your account. Unusual patterns may be flagged automatically for review by an authorized operator. These signals cannot prove that you actually read, and we do not collect a persistent device fingerprint for this purpose. App usage sessions: For each time the app is in the foreground, we link to your account when that use began, the last time it was observed, when it ended if known, the time spent in the foreground, and the app version, build and platform. An authorized operator may review these records to investigate inconsistencies between app use and Nova activity. They do not contain book titles, book text, file identifiers, use of other apps or screen content. Sessions recorded offline remain on the device and sync when a connection is available. If the app closes suddenly, a session may have no recorded end.
- Local-first file processing: PDF and EPUB files imported for local reading stay on your device and can be read offline. If you choose the optional server PDF processing feature included with an eligible membership, the selected PDF is uploaded over HTTPS and processed in a temporary server job folder on disk. The source file is deleted after processing, and the extracted result and any generated images are cleaned up when the job is removed or its retention period expires; cleanup is retried if needed. The server-processing feature does not change the local offline copy on your device. The result waits at most 24 hours for the app to collect it, so you can close the app meanwhile, and it is deleted as soon as the app has saved it. When the job ends, your signed-in devices may receive a notification that contains only a job identifier and whether it succeeded, never the book’s title or text.
- Scroll Lens free uses: Without a membership, Scroll Lens (our server PDF processing) can be used 10 times, counted per account and per device; a use counts only when processing succeeds. To count this, the app sends a one-way hash of the Android device ID, never the ID itself. We store only a further hash with your account ID and the time of each successful use. It is used only to count free uses and prevent abuse, never for advertising or tracking. If you delete your account, your account ID is removed from these records; the device hash stays so the free uses are not granted again on the same device. These records contain no file, title or text.
- Crash reports: If the Android app closes unexpectedly, the next time you open it, it sends a short crash report to our server: the reason Android recorded (crash, freeze or native crash), where in the app's code it happened, the app version, Android version and phone model. It contains no account, no book title or text: file paths and long error messages are removed on the phone before sending. Reports are used only to fix bugs and are deleted after 90 days.
3. PERMISSIONS
The app requests the following system permissions:
- Storage: To read locally stored PDF/EPUB documents.
- Brightness: To enable our E-Ink simulator and eye-protection features.
4. SECURITY
All data synced with our servers is encrypted during transit (HTTPS/TLS) and stored securely on protected infrastructure. We do not sell user data to third parties.
5. YOUR RIGHTS UNDER GDPR (EU/UK)
If you are located in the European Union or United Kingdom, you have the following rights under GDPR: Right of Access (Art. 15) - request a copy of your personal data; Right to Rectification (Art. 16) - correct inaccurate data; Right to Erasure (Art. 17) - request deletion of your data; Right to Restrict Processing (Art. 18) - limit how we use your data; Right to Data Portability (Art. 20) - receive your data in a portable format; Right to Object (Art. 21) - object to certain processing activities. To exercise these rights, contact us at contact@owl-app.com.
6. YOUR RIGHTS UNDER KVKK (TURKEY)
Türkiye'de ikamet eden kullanıcılar olarak 6698 sayılı Kişisel Verilerin Korunması Kanunu (KVKK) kapsamında şu haklara sahipsiniz: Madde 11 uyarınca; kişisel verilerinizin işlenip işlenmediğini öğrenme, işlenmişse buna ilişkin bilgi talep etme, işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme, yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme, eksik veya yanlış işlenmiş ise düzeltilmesini isteme, KVKK'nın 7. maddesinde öngörülen şartlar çerçevesinde silinmesini veya yok edilmesini isteme, işlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme, kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız halinde zararın giderilmesini talep etme haklarınız bulunmaktadır. Bu haklarınızı kullanmak için contact@owl-app.com adresine başvurabilirsiniz.
7. DATA RETENTION
We retain your personal data for as long as your account is active. Inactive accounts: If your account remains inactive for 3 years, we may delete it and associated data. Log data: System logs are retained for 2 years for security and debugging purposes. You can request immediate deletion at any time via the Delete Account page. App usage sessions: Server records have a 90-day retention window from receipt and are removed by daily cleanup, or earlier when the account is deleted. Up to 1,000 pending sessions may remain on the device for up to 90 days before syncing.
8. CHILDREN'S PRIVACY
Initial setup: Creating an account is required during initial setup; imported books can then be read offline. Online Features: Account-based features (leaderboards, progress sync, Nova points) require users to be at least 13 years old, or have verifiable parental/guardian consent as required by COPPA and similar laws. We do not knowingly collect personal information from children under 13 without parental consent. Parents who believe their child has created an account without consent may contact us at contact@owl-app.com to request account deletion.
9. THIRD-PARTY SERVICES
We use Google Sign-In for authentication and Google AdMob for banner, interstitial, and App Open ads. These services may process data under their own privacy policies; the AdMob consent flow (UMP) is shown before ad requests.
Game data
When you play Word Duel, the service receives your duel answers, answer timing, match results, wins, Nova changes, and inventory hint receipts so it can run the match and save its result. For membership or Ink purchases, the server verifies the Google Play purchase token and records the product and entitlement or purchase status needed to grant and reconcile the purchase; it does not receive your card details.
Google AdMob and in-app advertising
Scroll+ may show banner, interstitial, and App Open ads to users who do not have an active ad-free entitlement. Before requesting ads, the app uses Google's consent flow (UMP) and follows the choices available in that flow. AdMob may process an IP address, interactions, diagnostics, and device or account identifiers for advertising, measurement, and fraud prevention. A permanent ad-free purchase or active subscription disables the app's ads.
Reading Fire
If you join the evening Reading Fire, we store with your account that you joined that evening, a reading-time signal the app sends about every 30 seconds while your book is open, the Nova and Ink held during the session, and whether you finished. We do not receive the book title, text or file. Nova earned during the session is credited only if you finish. These records are deleted after 90 days or when you delete your account. Messages in the Reading Fire chat are deleted when joining for the next evening opens; a reported message is kept until it is reviewed. If chat notifications are on, we may send a Reading Fire reminder at 20:55 Turkey time using the same notification token; you can turn it off in Settings.
Chat
If you use chat, we store your messages with your account and show them to signed-in Scroll+ users together with your Scroll+ name and Loomy character. Messages in What are you reading? and Book recommendations are kept until you delete your account; Reading Fire messages are deleted as described above. If you report a message or block someone, we store that report or block. When you share a quote in chat, the quote, the book's title and its author are sent with your message and shown to other readers. If you turn on "Show the book I am reading" in Settings, the title and author of the book you open are shown on your chat profile to other signed-in readers. This is off by default, and turning it off deletes that information from our servers. We never receive the book's text or file.
10. COOKIES
We use cookies and similar technologies to improve your experience and analyze website traffic. Cookies are small text files stored on your device. For detailed information about our cookie usage, please see our Cookie Policy
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Effective Date' at the top. Continued use of Scroll+ after changes constitutes acceptance of the updated policy.
12. CONTACT
For any privacy-related inquiries, to exercise your rights, or to report a concern, please contact: OWL APP LTD at contact@owl-app.com. We will respond to your request within 30 days as required by GDPR/KVKK.