Privacy Policy
Your reading is yours.
Last updated 1 October 2026
LearnitPal needs to know what you read to pick what you read next. This page explains exactly what that means: what we collect, who helps us run the service, how long we keep it, and how to have it deleted.
Who we are
LearnitPal is a reading app for Android. It gathers the newsletters and web feeds you choose into one place and recommends what to read next. This policy covers the LearnitPal Android app (package com.learnitpal.app), the service behind it, and this website.
In this policy, “we” and “us” mean LearnitPal, which is responsible for your personal data (the “data controller”). You can reach us about anything here at support@learnitpal.com.
What we collect
We collect only what the app needs to work. Here is all of it.
| What | Details | Why |
|---|---|---|
| Account | Your name and email address, and your password stored as a one-way hash. If you sign in with Google, we receive your name, email address and profile picture from Google (the openid, email and profile scopes only). | To create your account and sign you in. |
| Email codes | The one-time code we email you to confirm your address or reset your password, stored encrypted, and whether your email address has been confirmed. | To make sure the address is yours, and that only you can reset your password. |
| Preferences | Your timezone, the interests you tell us, notification windows and daily limit, and how long unread articles stay in your library. | To deliver recommendations when and how you asked. |
| Sources | The feeds and newsletter senders you add, keep or ignore. | To fetch what you subscribed to. |
| Email sent to your LearnitPal address | The full message: sender, subject, headers and content. This includes Gmail forwarding confirmation messages, from which we keep the requesting mailbox and Google’s confirmation link. | To turn newsletters into articles you can read, and to help you set up forwarding. |
| Reading activity | Which cards you were shown, how long a card was on screen, and what you opened, liked, saved, passed on, skipped or came back to. In the reader: how far you got and how long you read. | To learn what you like and choose your next card. |
| What we work out from that | Topics you seem interested in (“noticed” and “lately” interests) and a numeric taste profile used for ranking. | To rank your deck. You can see and remove noticed interests in Settings → Interests. |
| Device | A push notification token, the platform (Android) and the app version. | To send the notifications you turned on. |
| Notification records | Each notification we sent or decided not to send, its text, and whether you opened it. | To respect your daily limit and never send the same article twice in a week. |
| Error reports | Technical details when something breaks on our servers (the error, the request path, the time). Error reports are configured not to include personal data such as your IP address or cookies. | To find and fix bugs. |
What we don’t collect
- Your mailbox. LearnitPal never signs in to Gmail or any other inbox. We only see email that you, or a sender you subscribed with, send to your LearnitPal address.
- Your location, contacts, photos, microphone or files on your phone.
- Advertising identifiers. There are no ads in LearnitPal and no advertising or analytics SDKs in the app.
This website does not use cookies, analytics or tracking. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security.
How we use it
We use your information to:
- run your account and keep it secure;
- email you sign-up and password reset codes and notices about your account, such as a password change. We don’t send marketing email;
- fetch your feeds, receive your newsletters and store them as articles in your library;
- rank and recommend articles, and write the short line that says why a card was picked for you;
- send notifications inside the windows you set, if you turned them on;
- answer you when you contact us;
- keep the service working: find bugs, prevent abuse, and measure whether recommendations are getting better (using totals, not individual reading histories).
We do not sell your personal data, share it for advertising, or use it to build profiles for anyone other than you.
Our legal bases
Where data protection law asks for a legal basis (including Kenya’s Data Protection Act, 2019 and the EU and UK GDPR), we rely on:
- Contract: most processing is needed to provide the service you signed up for.
- Consent: push notifications, and signing in with Google. You can withdraw either at any time, in the app or in your phone’s settings.
- Legitimate interests: security, preventing abuse, fixing errors and improving recommendations, in ways you would reasonably expect.
- Legal obligation: when the law requires us to keep or disclose something.
Email you send to LearnitPal
Every account gets a private address such as you-7f3a@in.learnitpal.com. Mail to that address is checked for spam, viruses and sender authentication (DKIM or DMARC) and rejected if it fails.
- A newsletter that reaches your address becomes a private article. Only you can see it, even if someone else reads the same newsletter. It may contain your name, links personal to you, or paid content, which is why it is never shared.
- Mail from a new sender waits until you choose to keep or ignore it. Ignoring a sender removes its unread articles.
- When you set up forwarding in Gmail, Google sends a confirmation link to your LearnitPal address. We show that link to you in the app. We never open it ourselves.
Please don’t forward personal mail to your LearnitPal address. It is meant for newsletters.
What stays on your phone
The app stores your sign-in token, your settings and articles you keep for offline reading on your device. Signing out removes your sign-in token. Uninstalling the app removes everything the app stored on the phone. It does not delete your account; see deleting your account.
How long we keep it
| Data | Kept for |
|---|---|
| Account, preferences, sources, library | Until you delete your account. |
| Unread articles | 30 days after they arrive (or 14, if you choose that in Settings). Articles you read, saved or dealt with stay in your history until you delete your account. |
| Detailed reading events and notification records | 180 days. After that they are rolled into daily totals that are not linked to you. |
| Sign-in sessions | Until they expire, you sign out, or you reset your password (which signs out every device). |
| Email codes | 10 minutes, or until used, whichever comes first. |
| Original incoming emails | Until you delete your account, so a message can be processed again if something goes wrong. |
| Backups | Short-term backups kept by our database provider roll off automatically within 30 days. |
How we protect it
Data travels over encrypted connections (TLS) and is stored with providers that encrypt it at rest. Passwords are hashed, never stored in readable form. A new account with an email address must confirm it with a code before it can sign in. Codes are 8 characters, work once, expire after 10 minutes and allow five tries; sign-in and code requests are rate-limited to stop guessing. Resetting your password signs you out everywhere, and we email you whenever your password changes. Access to production systems is limited to the people who run LearnitPal, using short-lived credentials. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
Your rights and choices
Depending on where you live, you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- object to, or ask us to restrict, some processing;
- receive your data in a portable format;
- withdraw consent you have given, at any time;
- complain to a data protection authority. In Kenya that is the Office of the Data Protection Commissioner.
Many choices are in the app: edit your interests, remove noticed interests, remove sources, turn notifications off, and delete your account, all in Settings. For anything else, email support@learnitpal.com from the address on your account. We reply within 30 days, usually much sooner.
Deleting your account
You can delete your account at any time in the app: open Settings, scroll to the last section and tap Delete account. If you can’t open the app, email support@learnitpal.com and we’ll do it for you.
We delete your account and the data tied to it, and keep only what’s needed to run the service safely or what the law requires, such as an address that bounced on our do-not-email list. The full list is on the account deletion page.
Children
LearnitPal is not meant for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Where your data is processed
Our servers run in the European Union, and our database and email are handled in the United States, so your data may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards for those transfers, such as the standard contractual clauses our providers offer.
Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
Contact
Questions, requests or complaints: support@learnitpal.com. A person reads every message.