How we handle your data

Accounts use email/password sign-in backed by our authentication provider. Sessions are stored as secure tokens in the browser, and passwords are never stored or visible to us.

Role-based access separates readers, authors, and administrators. Admin tools and author dashboards are gated server-side.

Application data is stored in a managed Postgres database with row-level security policies. Each user only sees the rows their role permits — readers see published tutors, authors see their own books and submissions, and administrators manage the catalog.

Sensitive configuration fields (such as tutor system prompts) are not exposed to readers.

The application is built and hosted on the Lovable platform, which provides the server runtime, database, file storage, and edge delivery. Traffic is served over HTTPS.

Mention of Lovable here describes the platform we build on and is not a Lovable-issued certification of this app.

For readers: account email, conversations you have with a tutor, and basic usage needed to power the product.

For authors: profile details (name, bio, photo, contact), the books and source files you upload, and payment status for setup fees. Card details are handled by our payment processor and are never stored on our servers.

We rely on third-party providers to operate the service, including our hosting and database platform, our payment processor, an email-sending provider, and AI model providers used to power tutor responses and audiobook narration.

Content you submit to a tutor may be sent to these AI providers solely to generate the response.

You can delete your conversations at any time from inside the app. For account or full-data deletion requests, contact us and we will process the request.

Security questions or vulnerability reports: support@actionwealthpublishing.com.