KarmaPlot.

KarmaPlot Privacy Policy

Last updated: 13 September 2026

KarmaPlot is a novel-reading application operated by Juvon Holdings Limited ("we", "us", "our"), a company incorporated in the Hong Kong Special Administrative Region with its registered office at Room 5042, 5/F, Yau Lee Centre, No. 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong. This Privacy Policy explains what information we collect when you use the KarmaPlot mobile application and the karmaplot.com website (together, the "Service"), how we use it, the legal bases on which we do so, and the rights and choices you have. Please read it before using the Service.

1. Information We Collect

1.1 Information you provide

  • Account information. You can read in KarmaPlot without creating an account. If you sign up or sign in — by email or through Apple or Google sign-in — we collect your email address and, where you set one or your sign-in provider supplies one, a display name. Where you sign in with Google, we also receive the profile picture associated with your Google account, which we store as a link and display on your profile within the Service. Providing an email address is required only where you choose to create an account; without it we cannot create or maintain an account for you, although you may continue to use the Service without one.
  • Support correspondence. If you contact support@karmaplot.com, we receive your email address and the contents of your message.

1.2 Information collected automatically

  • Anonymous identifiers. Before you create an account, the app may create an anonymous user identifier so your reading progress and purchases work without sign-up. If you later create an account, that identifier becomes your account.
  • Reading activity. Books opened, chapters read, reading position, and library contents — used to sync your progress and continue where you left off.
  • Purchase and entitlement records. Which subscription or content access you hold, so we can unlock what you have paid for. Payment itself is processed by Apple or Google (see Section 4); we never receive your full payment card details.
  • Usage analytics. Interaction events (for example screens viewed, searches you run in the app, and features used), device model, operating system version, and app version, used to understand and improve the Service.
  • Acquisition attribution. If you find a book by entering a book code in search, we keep the first code you entered, linked to your user identifier. When you purchase, that code — together with the book the paywall was opened from and your app language market — is attached to the purchase record (including via our subscription processor, RevenueCat) so we can measure which books and campaigns bring readers. Book codes are used for search and measurement only; they never unlock content or change prices.
  • Crash and diagnostics data. If the app crashes or errors, technical diagnostics (device model, OS version, stack traces) are collected so we can fix defects.

We do not collect your location — neither precise nor approximate — and we do not access your contacts, photo library, or messages. We do not use any advertising or cross-app tracking identifier.

2. How We Use Information

We use the information above to: provide and operate the Service (accounts, sync, unlocking purchased content); improve the app and fix defects; understand aggregate usage; communicate with you about your account or support requests; prevent fraud and abuse; and comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising. If advertising is introduced in the future, this policy will be updated first and any legally required consent will be requested in the app.

3. Legal Bases for Processing

Where the General Data Protection Regulation (EU) 2016/679 (the "GDPR"), the United Kingdom GDPR, or comparable legislation applies to our processing of your personal data, we rely on the following legal bases:

  • Performance of a contract (GDPR Article 6(1)(b)): creating and maintaining your account, authenticating you, synchronising your reading progress and library, providing the content you have purchased, and responding to your support requests.
  • Legitimate interests (GDPR Article 6(1)(f)): usage analytics and acquisition measurement, so that we can understand how the Service is used and improve it; crash and error diagnostics, so that we can keep the Service working; and the prevention of fraud and abuse. We have assessed that these interests are not overridden by your interests or fundamental rights, and you may object to this processing on grounds relating to your particular situation, as described in Section 6.
  • Compliance with a legal obligation (GDPR Article 6(1)(c)): retaining transaction records where tax, accounting, or other applicable law requires it, and responding to lawful requests from public authorities.

4. Service Providers

We share information only with the service providers needed to run the Service, each bound to process it on our behalf:

  • Supabase — database, authentication, and backend hosting (account data, reading activity, entitlements), hosted in the European Union.
  • PostHog — usage analytics (interaction events and device information), hosted in the European Union.
  • Sentry — crash and error diagnostics, hosted in the European Union.
  • RevenueCat — subscription status management (purchase receipts and entitlement state).
  • Apple and Google — payment processing for in-app purchases and, where you sign in with Google, serving your Google profile picture, under their own terms and privacy policies.
  • Cloudflare and email delivery providers — website hosting and transactional email.

We may also disclose information where required by law, regulation, or valid governmental request, or to protect the rights, safety, or property of users, the public, or Juvon Holdings Limited.

5. Data Retention

We retain your information for as long as your account exists. Upon deletion of your account, the personal data associated with it is deleted from our production systems within 30 days, save that: (i) copies may persist in backups for a limited further period until they are overwritten; (ii) transaction records are retained for as long as tax, accounting, and other applicable laws require; and (iii) personal data held by the service providers listed in Section 4 is retained in accordance with our agreements with them and their applicable retention periods, and you may ask us at support@karmaplot.com to arrange its erasure. Usage analytics and diagnostic data are retained only for as long as they are needed for the purposes described in Section 2, after which they are deleted or irreversibly anonymised. Aggregated, non-identifying statistics may be retained without limit.

6. Your Rights and Choices

  • Access and correction. You can view and update your account details in the app under Profile.
  • Deletion. You can delete your account and associated data at any time in the app (Profile → My Account → Delete account), or by emailing support@karmaplot.com from the address associated with your account. See karmaplot.com/delete-account for details. If you use the Service without an account, the anonymous identifier is held only on your device; deleting the app removes it, after which we can no longer associate the related data with you or act on a request concerning it.
  • Push notifications. If enabled, you can turn them off at any time in your device settings.
  • Further rights. Where the GDPR, the United Kingdom GDPR, or comparable legislation applies to you, you also have the right to obtain a copy of your personal data in a structured, commonly used and machine-readable format; to request that its processing be restricted; and to object, on grounds relating to your particular situation, to processing carried out on the basis of our legitimate interests, including usage analytics. To exercise any of these rights, contact us at support@karmaplot.com. We will respond within the period required by applicable law and may ask you to verify your identity before acting on a request.
  • Complaints. You have the right to lodge a complaint with the data protection supervisory authority of the country in which you habitually reside, in which you work, or in which the alleged infringement occurred. You may also contact us at support@karmaplot.com.

7. Security

We use industry-standard measures — encryption in transit, access controls, and row-level security on our databases — to protect your information. No internet service can guarantee absolute security, but we work to protect the Service and your data against unauthorised access, alteration, or loss.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact support@karmaplot.com and we will delete it.

9. International Transfers

Juvon Holdings Limited is established in the Hong Kong Special Administrative Region. Our database, analytics, and diagnostics providers store your personal data in the European Union, and our own personnel access it from the Hong Kong Special Administrative Region in order to operate the Service. The remaining service providers listed in Section 4 process personal data in the regions in which they operate, in each case under the data processing terms of our agreement with them. Further information about these arrangements is available on request from support@karmaplot.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always published at karmaplot.com/privacy with its "Last updated" date; material changes will be announced in the app or by email.

11. Contact

Juvon Holdings Limited Room 5042, 5/F, Yau Lee Centre, No. 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong Email: support@karmaplot.com