The short version
- Authors and publishers see patterns, not people: totals, percentages, averages and themes. No summary of written answers appears until at least 5 readers have answered.
- Individual answers are shared only in a class or cohort run by a school or coach, and only after you have seen and accepted a notice saying who can see them.
- You can see, edit, export and delete your own answers at any time.
- We store your data in the UK. We never sell it and we don't show ads.
Who we are
Truberri is a trading name of Annarrah Limited (company number 14512520), registered in England and Wales, with its registered office at 853-859 Salisbury House, 29 Finsbury Circus, London, England, EC2M 5QQ. Contact us at hello@truberri.com.
For anything about your data, email hello@truberri.com.
Who this policy covers
- Readers: people who read books in the Truberri app, an author's own app or the web reader at read.truberri.com.
- Workspace members: authors, publishers, teachers and their teams who use Truberri Studio.
- Visitors to truberri.com.
When a school or coach runs a cohort with identified responses, the school or coach decides how pupils' and participants' answers are used, and we handle that data on their behalf under our data processing agreement. For everything else in this policy, we decide how data is used and are responsible for it.
What we collect
If you read books
- Account details: your email address, and your name if you sign in with Apple or Google. Apple's "Hide my email" works.
- Your library: which books you have unlocked, how (access code, link or purchase) and when.
- Your answers to questions in a book, and when you last changed them.
- Reading activity: when you open a book, view a chapter or question, save an answer or finish a book.
- Device basics: app version, operating system and error reports, so we can fix crashes.
- If you buy a book: what you bought, the price and the order status. Stripe handles your card details; we never see or store them.
If you make books
- Account and workspace details: name, email, workspace name, team members and their roles.
- The manuscripts, covers and images you upload, and the books we build from them.
- Billing details: your plan, invoices and payout status. Stripe holds bank and card details.
- An audit log of actions taken on your behalf, for example by a linked publisher.
If you join the waitlist
- Your name, email address, what kind of work you do and, if you tell us, your book title, the plan you're interested in and where you heard about us.
- Which link brought you to the site (for example a campaign tag or another person's referral link), and who joined using your referral link.
- Whether you asked for occasional news about Truberri.
- A one-way hash of your network address for an hour, to stop automated sign-ups. We never store the address itself.
If you visit this website
Basic server logs and, only if you agree, analytics. See our cookie notice.
What authors, publishers and schools can see
This is the part that matters most, so we enforce it in our database, not just in the screens you see.
| Who | What they see |
|---|---|
| Authors and publishers (all books) | Counts of downloads, opens and completions; per-question totals, percentages, averages and word clouds; AI-written themes from written answers once 5 or more readers have answered. Never a named reader or an individual answer. |
| Schools and coaches running a cohort | The same totals, plus individual answers with names, but only when Truberri has approved the workspace, the class has identified responses switched on, and you accepted the notice when you joined. |
| Truberri staff | Only what we need to run and support the service, and every access is logged. |
If identified responses apply to a book, you will be told before you answer, for example "Your teacher at Oakfield School can see your answer." If you don't see a notice like that, your answers are private to you.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Running your account, unlocking books and saving your answers | Contract |
| Showing authors anonymous totals and themes for their books | Legitimate interests: helping authors improve their books without identifying readers |
| Sharing your named answers with your school or coach | Consent, which you give through the notice and can withdraw |
| Taking payments, paying sellers and keeping tax records | Contract and legal obligation |
| Keeping the service secure and fixing errors | Legitimate interests |
| Website and product analytics | Consent for analytics cookies; legitimate interests for in-app analytics without cookies |
| Service emails (sign-in links, receipts, important changes) | Contract |
| Keeping your place on the waitlist, crediting referrals and telling you when Truberri opens | Legitimate interests: running the waitlist you asked to join |
| News about Truberri to people on the waitlist | Consent, which you give with the tick box and can withdraw in any email |
| Marketing emails to workspace members | Consent; unsubscribe in any email |
How we use AI
We use Anthropic's Claude to turn an uploaded manuscript into an interactive book and to write short theme summaries of written answers for a book's dashboard. Summaries are only made from 5 or more answers and never name a reader. Anthropic processes this data on our behalf and is not allowed to use it to train its models. We don't use AI to make decisions about you.
Who we share it with
We use the providers below to run Truberri. Each one only gets the data it needs and is bound by a contract to protect it. We will update this list before adding a new one.
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | UK (London) |
| Stripe | Subscriptions, book sales, payouts and tax | UK, EU and US |
| Anthropic (Claude) | Turning uploaded manuscripts into books and writing theme summaries of 5 or more answers | US |
| Resend | Sign-in links and service emails | EU |
| PostHog | Product analytics | EU (Germany) |
| Sentry | Error reports | EU |
| Google Workspace | Our email inbox | EU and US |
| Cloudflare | Hosting this website | Global network (served from the data centre nearest you) |
If you sign in with Apple or Google, they also receive the fact that you signed in to Truberri, under their own privacy policies. If you buy a book, the seller (the author or publisher) receives your order details from Stripe so they can handle refunds and their tax records. We may disclose data if the law requires it.
Where your data is stored
Our database and file storage are in London. Some providers above work from the US or EU. When data leaves the UK we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to protect it.
How long we keep it
- Your account and answers: until you delete them or your account.
- When you delete an answer or your account, it disappears from your account straight away and is erased from our systems, including backups, within 30 days. Totals that already counted it stay, because they can't identify you.
- Workspaces and their books: until the workspace is closed, then erased within 30 days.
- Orders and invoices: 6 years, because UK tax law requires it.
- Waitlist details: until you create an account or ask us to remove you, and no longer than 12 months after you join.
- Error reports and logs: up to 90 days.
Your rights
You can see, edit, export (as PDF) and delete your answers in the app under "My answers", and delete your account in Settings. You also have the right to:
- get a copy of your data
- correct it
- have it erased
- restrict or object to how we use it
- move it to another service
- withdraw consent at any time, for example to identified responses, without affecting what happened before
Email hello@truberri.com and we'll reply within one month. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk.
Children
Readers must be 13 or older to create their own account. Younger children can only use Truberri through an account set up by their school. We follow the ICO's Age Appropriate Design Code: high privacy by default, no nudges to share more, no public profiles and no advertising.
Security
Data is encrypted in transit and at rest. Access rules are enforced in the database itself, so one reader can never read another's answers. Book files are served through links that expire after one hour. Staff access is limited and logged.
Changes to this policy
If we make a change that affects how your data is used, we'll tell you by email or in the app before it takes effect. The date at the top shows the latest version.