Your reading.
Your choices.

Your library

Imported books, PDF files, reading positions, bookmarks, annotations, library organisation and reading preferences are stored on your device. Importing makes an app-owned copy; it does not modify the original file in Files. The app does not require its own account and does not include advertising, tracking or an analytics SDK. We do not operate a server that receives your books or notes.

Exporting shares the selected document or notes with the destination you choose through the system share sheet. Removing a book removes its app-owned local copy and its notebook records; it does not delete the original file from Files. Keep an independent copy of important documents. Local app data may be included in device backups according to your Apple settings.

Optional iCloud sync

Sync is off by default. If you enable iCloud sync, the app sends supported books, covers, reading positions, bookmarks, notes, collections and related library metadata to the private CloudKit database for the Apple iCloud account signed in on your device. Apple provides this service and manages its availability and account settings. Sync is optional; local reading works with it turned off.

If you switch iCloud accounts and enable sync again, the library currently on this device—including books downloaded from a previous account—will sync to the newly selected account. Review your local library before enabling sync with a different account.

Sync uses revision metadata to reconcile changes and may retain previous versions so you can recover conflicting edits. Removing a book is recorded as a deletion for other connected devices. A deletion does not immediately purge every retained revision or backup. Turning sync off stops new synchronization and keeps the local library; it does not erase existing iCloud copies. Uninstalling the app removes its local documents but does not itself remove retained iCloud data or Apple backups. You can manage the app's iCloud storage through your Apple account settings.

Catalog passwords and PDF-opening passwords are not included in library sync. The app does not send document content to an app-developer-operated cloud service.

Online libraries and personal catalogs

Using online library search sends the query and ordinary network connection information, such as your IP address, to the selected provider. Built-in native search uses Project Gutenberg or Open Library. Browsing a provider website opens Apple's browser view; the provider's privacy policy and account settings apply. Standard Ebooks and Internet Archive are website connections. Downloading a book contacts its provider and saves a local copy. Catalog searches do not upload your existing library or annotations.

If you add a personal OPDS or Calibre catalog, its name and address are stored on this device. Login credentials are stored in this device's Keychain and are sent only to the configured server origin. They are not shared with other catalog hosts or synchronized through the app. Deleting a saved catalog removes its stored login. The operating system may retain Keychain items after the app is uninstalled; remove catalog logins in the app before uninstalling if needed.

Internet catalogs require HTTPS. You may explicitly allow unencrypted HTTP for a trusted local-network server. In that case the catalog, downloads and login travel without transport encryption. iOS may request local-network permission to reach your server. Personal catalog browsing does not run background scraping or bulk harvesting.

Read aloud and passwords

Read aloud uses Apple's on-device speech system and installed voices. The app stores voice/speed choices and the listening position locally. It does not send your document text to a developer-operated speech or AI service. Voice availability and downloads are managed by iOS.

Passwords used to open a PDF are held in memory for the reading session. They are not stored in the library index or uploaded by library sync. Annotated encrypted PDFs retain their file encryption and permissions when saved; if protection cannot be preserved, the app refuses to replace the source.

Purchases

Apple processes purchases and provides verified purchase/entitlement status. The app does not receive payment-card details. The app records which documents have used the free annotation allowance; deleting a document does not reset that allowance. Purchase restoration is handled through Apple's StoreKit service.

Your choices and contact

You can read locally without enabling sync or using online catalogs, remove imported documents, export your notes, delete saved catalog logins, and manage Apple backups and iCloud storage through your device settings. Files you share or export are controlled by the destination you choose. Third-party providers are responsible for their own services and policies.

The app uses Readium for EPUB rendering and Apple's PDFKit for PDFs. Dependency notices are available in Settings → Acknowledgements. For questions about this policy, contact support@opalreader.com.

This website

The interactive reading preview stores theme, font size, chapter and bookmark choices only in the current page session. This website does not include an analytics SDK, advertising scripts, an account system or a payment form. Fonts are loaded from Google Fonts, which receives ordinary connection information such as your IP address. The hosting provider may process requests and technical logs needed to serve the site.

For help or privacy questions, email support@opalreader.com.