Privacy Policy
Last updated: October 29, 2026
What we keep
Your account: an email address and a password hash, or your Sign in with Apple identity. Your summaries: their text, covers, notes, highlights, collections and where you stopped listening. That is all. There are no ads, no analytics and no tracking scripts.
What leaves your device, and why
To narrate a chapter, its text goes to Cloudflare Workers AI and the lines to ElevenLabs or Cloudflare for the voice. Narrated lines are stored so a chapter you played is free to replay. Photos of pages go to Workers AI to be read and are dropped once the text is back. A question you ask a chapter goes to Workers AI with that chapter. None of these services is told who you are.
What stays on your device
Your Goodreads sign-in and shelves, your error log, downloaded narration, book covers and your search index stay on the device that made them. Kernel never sees your Goodreads login.
Sharing
Nothing is public unless you share it. A share link shows one book to anyone who has the link. A public profile, off unless you turn it on, lists the books you shared, and your highlights from them only if you choose.
Paying
On the web, the $1 for natural voices goes through Stripe; we keep only that you paid. In the apps, the App Store handles it.
Deleting your account
Deleting your account in Account or on your profile removes it and every summary at once, along with your voice usage, your payment record and the narration made from your books. The app and browser you delete from also clear their own copies. There is no undo.
Hosting
Kernel runs on Cloudflare, which keeps standard request logs (IP address, user agent) under its own privacy policy.
Contact
Questions: trommatic@icloud.com