Privacy Policy

1. Data Controller & Privacy Contact

The data controller responsible for the processing of your personal data on WAB (wab.wababai.com), Knowelia (knowelia.com), and related services is:

2. Categories of Personal Data We Collect

Depending on how you interact with WAB and Knowelia, we collect the following categories of data:

• Account & Authentication Data: When you sign in via Google Authentication or email link, we collect your authentication identifier, email address, and display name. If you use WAB as an anonymous guest, a pseudonymous Firebase anonymous UID is generated to associate your drafts with your current browser session.
• User Inquiries & Prompts: Text queries, topic inputs, reading interests, and customization instructions provided during book synthesis and manuscript editing.
• Generated Book Data & Reading Progress: Synthesized book outlines, chapters, personalized covers, saved library shelves, reading bookmarks, and book completion milestones.
• Technical & Log Information: IP address, browser type and version, operating system, referrer URL, timestamps, and essential session identifiers required for network routing, security, and rate-limiting.
• Purchase & Transaction Records: When you purchase book editions or feature upgrades, transaction records (order ID, product code, price, currency, timestamp, and customer ID) are processed through our payment processor, Stripe. We do not store or process raw credit card numbers on our servers.

3. Purposes and Legal Bases for Processing (GDPR Art. 6)

4. AI Processing of Prompts & Manuscripts

WAB processes your inquiries and manuscript chapters using server-side artificial intelligence models provided via secure enterprise APIs (primarily OpenAI API).

5. Third-Party Service Providers (Subprocessors)

We share personal data only with vetted subprocessors necessary to deliver our services:

• Google Cloud Platform & Firebase (Google Ireland Ltd. / Google LLC): Cloud infrastructure, database storage (Cloud Firestore), Cloud Functions, and Firebase Authentication.
• OpenAI, LLC: Foundation AI text and image generation models via secure API.
• Stripe, Inc. / Stripe Payments Europe, Ltd.: Payment processing, fraud detection, and customer billing portal.
• Google Analytics: Optional first-party analytics measurement, loaded only when you provide explicit consent through our cookie banner.

6. Data Retention & Anonymous Users

Anonymous Guest Users (30-Day Policy): In accordance with WAB's backend lifecycle architecture, data and preview drafts created by anonymous, unauthenticated visitors are automatically scheduled for expiration and backend purging after 30 days unless saved to a permanent registered account.

Registered User Accounts: Books, outlines, and account records for registered users are retained for as long as your account remains active.

Public Sharing & Catalogue Content: Books intentionally published to public URLs or the Knowelia public catalogue remain accessible until deleted, unlisted, or withdrawn by the author or editorial team.

Account Deletion: You have the right to request deletion of your account and all associated personal data at any time. Because self-service multi-collection backend purging is currently being finalized, please email your deletion request to info@simpleappslab.com with the subject "Account Deletion Request". We will permanently delete your account, books, and profile records within 30 days pursuant to GDPR Art. 17.

7. International Data Transfers

Simple Apps Lab LLC is based in the United States, and our cloud infrastructure spans servers located in the European Union (europe-west1) and the United States. Where personal data of European Economic Area (EEA), UK, or Swiss residents is transferred to countries not deemed to offer an adequate level of data protection, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or recognized adequacy frameworks.

8. Your Rights Under GDPR & International Privacy Laws

Under GDPR and applicable privacy legislation, you have the following rights:

• Right of Access (Art. 15): Obtain confirmation and copies of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete personal information.
• Right to Erasure (Art. 17): Request deletion of your personal data ("Right to be forgotten").
• Right to Restriction of Processing (Art. 18): Restrict the processing of your data under specific conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time for optional processing (e.g., analytics cookies via Cookie Preferences).
• Right to Lodge a Complaint: Lodge a complaint with a competent supervisory authority in your country of residence.

To exercise any of these rights, contact us at info@simpleappslab.com.

9. Cookies & Local Storage

We use two categories of cookies and browser storage:

• Strictly Necessary / Essential Storage: Required for user authentication, security, state management, and storing your cookie consent preference. These do not require user consent under ePrivacy regulations and cannot be deactivated without impairing site functionality.
• Optional Analytics Cookies: Used to understand general visitor counts and navigation trends. These are disabled by default and are loaded only if you click "Accept analytics" in our cookie banner. You can change your choice or withdraw consent at any time using the "Cookie Preferences" link in our website footer.

10. Changes to this Policy & Contact

We may periodically update this Privacy Policy. When changes are made, we will revise the Effective Date at the top of the policy. For questions or concerns regarding this policy, please reach out to: