FireReader

PRIVACY

Your library.
Your privacy.

Effective October 20, 2026

Data kept on your device

Imported books, covers, reading positions, bookmarks, notes, reading time and settings are stored on your device. You can read locally without creating a FireReader account. PIN hashes and cloud and translation API credentials are stored in OS secure storage. The app lock protects access to screens; it does not encrypt books or backups.

Online libraries and downloads

Browsing a library or downloading a book sends network requests to the library server you choose. Your searches and requests to browse or download books are sent to that server. The server may also process ordinary connection information such as your IP address. Download requests, status and temporary files are kept on your device. The OS may continue a download you started after you close the screen. When you return to the app, verified files are imported into your library. You can cancel in the downloads screen, but cancellation does not undo a transfer that has already completed. Library login credentials are kept in OS secure storage or in device storage encrypted with a key from that secure storage. Library credentials are used only for the selected server, whose privacy policy applies.

Cloud transfers you choose

Sharing a backup or uploading it to WebDAV, Dropbox, Google Drive or your own FTPS storage sends the books’ full text, notes, settings, reading records, and PDF handwriting, signatures and form values included in that backup to the selected destination. You can upload full backups manually or separately enable the weekly cloud uploads described below. Where Google Drive is available in your version, its connection uses this app’s dedicated application data area and does not request permission to browse ordinary Drive files. WebDAV connections require HTTPS. Connections to private FTP servers support only FTPS with TLS. Connecting an account or saving credentials does not enable all sync features.

Reading-position sync checks when you open a book and saves when you close it or put the app in the background, only if you enable it separately. It sends a hash identifying the book’s contents, chapter, character and page coordinates, the left or right half of a comic page, numeric EPUB document structure paths, progress and modification time. This position data does not include book text, title, author or string names attached to document structure. Wi-Fi only is the default setting.

Library metadata and annotation merging, and PDF handwriting and form sync each have a separate consent, preview and apply process. Library data may include book titles, authors, groups, tags, favorites, bookmarks, highlights, notes and positions. Library metadata and annotation merging does not upload the original book files. PDF sync sends a file hash, handwriting and signature coordinates, colors, stroke widths, form field names and entered values instead of the original PDF. Signatures and entered values may also be sensitive; check the destination and scope before transferring them. Conflicting data is preserved as alternative versions or merged according to your choices.

When the connection destination changes, the relevant consent is checked again. Disconnecting or turning off sync stops subsequent requests; it does not delete data or retained versions that the provider has already received. A request started before cancellation may still complete at the provider. The provider’s storage limits, fees and privacy policy apply. Authentication secrets are not included in library backups.

Folder file copies

Copying a file in Manage a folder reads its complete contents and creates a new file at the destination you choose within that folder selection. If the selected system file provider uses cloud storage, it may download the source and upload the copy under its own account, network and privacy settings. FireReader does not remove the source or replace an existing item with the same name. Failed copies may remain incomplete at the destination; inspect them before trying again.

Moving a file or folder changes its original location within the selected folder. FireReader asks the system provider to move it after you confirm the source and destination; it does not copy and then delete the original. The provider may synchronize the move to your cloud account. Existing imported library copies remain unchanged. If the result is uncertain, inspect both locations before retrying; FireReader does not retry or undo it automatically.

Moving an item to folder recovery moves the original into a visible FireReader Recovery folder inside the folder you selected. FireReader keeps its original relative path, recovery folder name, time, status and a hash of the selected root in this app’s device storage. These records are not included in FireReader library backups or sync. To restore, select the same folder again on this device; the original parent must still exist and no item with the same name may already be there. Restoration moves the item back and leaves the empty recovery folder. Interrupted operations are not retried automatically. Uninstalling or clearing app data may remove the recovery records; files in an external recovery folder remain and can be managed with your system file manager. The system provider may synchronize these moves under its own cloud settings.

Exporting notes

You can save or share a text file containing one book’s highlights, notes, title, author and saved locations from its notes tab. It includes selected passages, not the entire book or library. Sharing opens the system chooser and sends the file only to the destination you select. Exported files are not encrypted by FireReader; manage their access and deletion at the chosen destination.

Sharing reading statistics

From Reading statistics, you can preview and share the selected year’s total reading time, completed-book count, page count, active-day count and monthly time and pages. This text does not include book titles, book text, notes, book identifiers or account details. FireReader opens the system share sheet only after you choose to continue; manage the shared text’s storage and deletion at the destination you select.

Weekly local and cloud backups

Weekly local backups are off by default. When enabled, they save settings, reading records and books in a backup folder on your device under Wi-Fi conditions. OS background scheduling requires additional consent and remains local-only; it does not upload to the cloud. The OS decides when a task runs, so success at a fixed time is not guaranteed. Local backups stop when storage or retention limits are reached and do not automatically delete retained copies.

Weekly cloud backups have a separate, default-off permission. When enabled, they upload a first complete backup to the saved WebDAV, Dropbox or supported Google Drive connection while FireReader is in the foreground on Wi-Fi, then upload again after seven days have elapsed since the last confirmed success. FTPS backups remain manual. The snapshot includes imported books, notes, PDF handwriting, signatures, forms and preserved alternatives, reading records and reader settings. PINs and authentication credentials are excluded. FireReader does not encrypt these backups.

Weekly cloud uploads update the same library.frbackup snapshot only if its last known remote revision is unchanged, or create it only if no remote backup exists. They do not create cloud version history. If a remote copy already exists or changes, automatic replacement pauses until you turn this setting off, restore and review the remote backup, and enable it again. If the server accepts a backup without returning a usable revision, further automatic updates pause. Leaving the app or losing Wi-Fi requests cancellation, but data already accepted by the server cannot be recalled. Changing the saved connection revokes this permission. Turning it off stops subsequent uploads and does not delete the provider’s existing copy; the provider’s storage limits, fees and privacy policy apply.

Readwise export

Highlights, notes, book titles, authors, page numbers and annotation creation times are sent to readwise.io only after you consent to transfers and save a token on the Readwise connection screen. Source links containing book and highlight identifiers are sent with the highlights. FireReader reads back highlights for the corresponding books to find and verify its exports. Your token is stored securely on the device and used to authenticate these requests; it and the saved consent are excluded from backups. Readwise receives connection information under its own privacy policy. If you separately enable automatic export, annotations changed while you use the app are sent. Disconnecting stops subsequent transfers; it does not delete previously sent data or source links from Readwise.

Dictionaries and selected-text translation

The app checks the device dictionary first. It asks before sending selected text to an installed Android dictionary app or a web dictionary. The web dictionary uses en.wiktionary.org. Translation is available only when you save your own existing Google Cloud Translation or DeepL API account key in the device’s secure storage. Saving a key alone does not contact the provider. Each request shows the selected source text, target language and provider address and asks for consent. The selected text, language and API authentication information are then sent directly to that provider. Google uses translation.googleapis.com; DeepL uses api-free.deepl.com or api.deepl.com according to the plan you select. Providers may process text and connection information under their own policies and charge for usage. FireReader does not store translation history or include translation keys in library backups. A provider may still process and charge for a request it received before cancellation. Deleting a key removes the stored value from the device; it does not delete the provider account or requests already processed.

Device features

Update checks

In supported store distributions, FireReader checks the official app domain’s update policy and whether an update can be installed. The policy request does not include account, advertising or device identifiers. To check installation availability, Apple or Google store services may use the app identifier and necessary storefront region information.

Backups, deletion and precautions

Removing a book from the library deletes its entry, notes and reading records while preserving the original and imported copy. Uninstalling the app or managing device storage may remove app data, so keep separate backups of important records. Manage files already exported or sent to the cloud at their respective locations. The iOS file-sharing feature may expose the app’s documents folder.

Advertising and analytics

The current implementation does not include an advertising SDK or behavioral analytics SDK. Cloud transfers you consent to include user content such as books and notes, along with reading positions and records, and may be associated with the selected storage account. They are not used to track activity across other apps or websites. Processing performed independently by external catalogs, speech engines and cloud storage providers is separate from this description.

Access, correction and deletion requests

To request access to, correction or deletion of personal information, to restrict processing or to withdraw consent, contact [email protected]. We will tell you the outcome within 45 days of receiving your request, or within any shorter period required by your local law (for example, 10 days in Korea). If there is a legitimate reason we cannot finish in time, we will tell you the reason and the expected date within that period. A legal representative or authorized agent may also make a request; we will confirm the authorization. The operator cannot remotely access data kept only on your device; where needed, we will explain how to manage it on your device. Data already transferred to external storage must also be managed with that provider. Do not attach book text, passwords or authentication tokens to your request.

Operator and privacy officer

FireReader is operated by nlap, a sole proprietorship in the Republic of Korea (representative: Jinho Park; business registration number 445-13-02685; address: 44 Manwol-ro, Namdong-gu, Incheon, Republic of Korea). Our privacy officer is Jinho Park. Send support and privacy inquiries to [email protected]. We reply in English or Korean, and you may write in any language.

Service providers and international transfers

We do not receive your library, books or notes on our own servers. We entrust processing to two providers. Cloudflare, Inc. (United States; privacy contact [email protected]) serves the official website and the update notice file. When you open the website or the app checks the update notice, your IP address and ordinary HTTP request information are sent over an encrypted connection. We do not keep separate records of these requests, and Cloudflare may process them under its own policy. Email sent to [email protected] is forwarded by Cloudflare email routing to a Gmail mailbox operated by Google LLC (United States; privacy contact via policies.google.com/privacy). We use your email address and message only to reply, and delete them within one year, or keep them for up to three years when they are consumer complaint or dispute records. If you do not want these transfers, do not open the website or send email. Update checks do not happen while the network is off, and reading and the in-app offline information remain available. Store update checks (see "Update checks"), the web dictionary (see "Dictionaries and selected-text translation") and data you send to a library, cloud, Readwise, translation or other provider you choose do not come to us; each service's own policy applies.

Remedies and changes to this notice

Users in Korea can report or seek advice about privacy violations from the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301) or the National Police Agency (182). If we change this notice, we announce it on the website 7 days before it takes effect (30 days for significant changes that are unfavorable to you), and update the in-app notice in the next app update.

Third parties, deletion and safeguards

We do not sell personal information or provide it to third parties, except when law enforcement or another authority requests it through a lawful procedure. Support emails whose retention period has ended are deleted from the mailbox so they cannot be recovered; we keep no paper records. Only the minimum necessary people can access the support mailbox and site administration account, and all transfers are encrypted with HTTPS/TLS. The app and website do not use cookies or advertising or analytics trackers. FireReader is not directed to children and does not knowingly receive personal information from children under 14 (or under the digital consent age in their country) without a legal guardian's consent. If a child has sent personal information by email, tell us at [email protected] and we will delete it after confirming.

Effective date: October 20, 2026