RoyFoundry · Firebrat

Privacy policy

Your books, your choices. This policy explains what Firebrat processes on your device and when optional online services receive data.

Firebrat by RoyFoundry · Effective 24 October 2026 · Contact royduck@duck.com

Reading and conversion on your device

Imported/downloaded books, narration, pictures, original PDFs, reading progress, settings and downloaded models are stored on your device. Reading local books does not require an account. Android on-device conversion processes the selected PDF locally when “Allow cloud helper” is off. Kokoro and language models need initial downloads. System speech is provided by your device’s speech engine; choose an installed offline voice for offline narration.

The PWA supports server conversion and saved-book playback; it does not run local book conversion. Browser storage may be cleared or evicted by the browser. Offline book processing does not mean that optional account or Android analytics services are disabled; SDK events may be queued until connectivity returns.

Continue as guest on Android

Choose Continue as guest on the Android sign-in screen to use account-free features. This creates no Firebase Authentication account. Guest mode supports local reading/import, on-device conversion after model setup, and downloading books from a public server shelf. Server uploads/job management require sign-in; Google Drive backup requires Google authorization. The guest choice is stored locally and can be changed through Menu → Sign in.

Guest mode does not disable Firebase Analytics or installation/device identifiers described below. Optional downloads and server requests still disclose normal network information to their destinations. Books and reading data remain on the device until removed. If you previously created an account, choosing guest or signing out does not delete it.

Accounts and online library

Optional Google/email sign-in uses Firebase Authentication. It processes your account ID, email address and, when supplied, name/profile information, along with service/device/network information needed for authentication. Email passwords are handled by Firebase Authentication; they are not sent to the book-conversion server.

When signed in with sync enabled, Firestore stores private library metadata (book IDs/titles, source, optional hash/Drive backup ID/size, section count/duration and timestamps) and reading checkpoints (section ID, audio position, conversion signature and timestamps). These records let the same account resume on another device. Book text, PDFs, images and audio are never stored in Firestore. Menu → Sync & backup can disable future metadata/progress sync. Optional Google Drive backup uploads selected book packages to your own Drive using app-specific file access. Restore downloads these files from Drive and verifies their hash. Guest checkpoints remain local. Offline changes are retried when syncing online; newer checkpoint timestamps win, assuming reasonably synchronized device clocks.

Android analytics and notifications

The Android Play build includes Firebase Analytics and Cloud Messaging. These services can process app interactions, installation/device identifiers, advertising identifiers where available, device/app information, notification tokens and coarse location inferred from network addresses. The app does not request GPS location for book reading. Custom usage events describe features, conversion modes, model IDs, counts and downloads; they do not intentionally include book text, account email or API keys. Firebrat contains no advertisements.

The public information pages do not load analytics scripts. Firebase web authentication in the PWA is separate from the Android analytics SDK. Details of Google’s SDK processing are available in Firebase privacy information and Analytics data disclosures.

Servers, API providers and model downloads

Choosing Server uploads the selected PDF/ZIP to the Firebrat server you configure. Its operator can access uploaded documents, generated scripts, narration, images and conversion status. The server stores these files until its operator removes them; automatic expiry is not currently implemented. Server libraries are shared: anyone with the server address can read/download its shelf. Use a private server for private books.

The RoyFoundry review server currently provides a public-domain sample and restricts conversion actions to authorized accounts. Its language model and voice generation run locally on that server. This is a review/demo deployment, not an unrestricted public conversion service.

If you enable a cloud helper or configure an LLM API, the selected provider receives content sent for that conversion. Voice generation in Firebrat’s backend remains local. Hugging Face and other configured model distributors receive ordinary download/network requests when models or voices are installed. Service operators’ terms apply to their processing.

Security and retention

Firebase/Google services and the hosted review endpoint use HTTPS. Firebrat also permits user-configured HTTP servers for local networks; those connections do not provide HTTPS encryption. Use HTTPS or an encrypted private network for remote access. Do not upload secrets to a public/shared shelf.

Device files remain until you delete them or clear the app/browser data. Account and cloud-library records remain until removed through an account/data-deletion request. Uploaded server files remain until deleted by the server operator. Drive backups remain until removed in Drive. Analytics and service logs follow the relevant provider/project retention settings; aggregated statistics may remain after account deletion and are not automatically removed by deleting a local book.

Your controls and deletion requests

Delete a downloaded book from the library to remove its local copy. Clearing app/browser storage removes local data and settings. Local deletion does not automatically remove server copies or Drive backups. You can revoke Google/Drive access in your Google account.

You can request deletion of your Firebrat account and associated cloud-library data, or request specific hosted data removal, at the account and data deletion page. Requests are handled manually after identity verification; we confirm completion by email. Do not send passwords, access tokens or API keys. We may ask for book/job identifiers to locate server files, because conversion jobs are not organized into private per-user shelves.

Audience and updates

Firebrat’s intended release audience is ages 13 and older. We do not intend to collect account data from children under 13. If you believe such data was supplied, contact us for removal. Changes to this policy will be published here with an updated effective date.