Your library has a local copy, but PaperEnjoyer also provides cloud services. Account sync, cloud parsing, server-based AI reading and share links can send content off your device. Turning off library sync does not turn off those other features.
1. Who handles your information
The operator providing services under the name PaperEnjoyer is responsible for the personal information processed for our website and online services (the “controller”, where that term applies). Use the same email for support, privacy requests and refund assistance.
PaperEnjoyerCorrespondence: Huazhong University of Science and Technology, Wuhan, China[email protected]The university is a correspondence location only. This policy covers PaperEnjoyer’s handling of information, not the separate practices of a publisher, model provider or other service you use independently.
2. Information we use and why
- Account and sign-in information: account identifiers, email address, available profile details and authentication/session information. We use these to sign you in, associate your devices and library, secure access and respond to requests.
- Library and research content: PDFs, paper metadata, extracted text and images, notes, annotations, selected conversation content, reading positions, folders and supported preferences. The features you use determine which items are processed locally, synchronized or sent for a task.
- AI and parsing requests: selected papers or passages, questions, instructions, relevant conversation context, generated results, model settings, task status and usage measurements. These let us perform, resume and deliver the requested work and enforce usage limits.
- Technical records: IP address, request times, device or client information, request routes, response status and diagnostic/security events. Hosting and network services process these to deliver requests, investigate failures and prevent misuse.
- Support correspondence: the address, message, attachments and other details you send us. Please include only information necessary for the request.
- Future purchases: when Paddle checkout opens, Paddle will collect payment and billing details for its transactions. We may receive the account, order, subscription, payment-status and tax/invoice information needed to provide entitlements and support. This website does not currently collect payment-card details.
Paper metadata may also come from public research sources such as arXiv and OpenAlex, including authors, titles and abstracts. Shared material comes from the person who shares it. Requests to these sources can expose network information and search terms to them.
Where a data-protection law requires a lawful basis, account and requested-feature processing is necessary to provide the service under our agreement. Our legitimate interests include securing and maintaining the service, diagnosing failures, responding to support and improving the quality and reuse of standard reading results; these interests must be balanced against your rights. We rely on consent where required for optional processing, and on legal obligations where records must be retained or disclosed. Consent can be withdrawn without affecting earlier lawful processing.
You need not supply research content to browse the website. An account identifier is needed for account services, and cloud AI cannot complete a task without the relevant input. AI answers and recommendations are assistive features; we do not use them to make decisions about you with legal or similarly significant effects.
3. Local, cloud and AI processing
Local library and account synchronization
The app keeps a local library on your device. With account cloud sync enabled, supported library content and preferences are uploaded and synchronized between your devices. Some released versions enable automatic account sync by default; newer setup flows ask you to choose. Review your sync setting before adding restricted material. Disabling sync stops future automatic synchronization; it does not itself erase existing cloud copies.
Cloud parsing and reading tasks
Cloud parsing can upload PDFs to MinerU. PaperCore and custom HTTP/API (“bring your own key” or BYOK) close-reading tasks upload the materials needed to our server for execution, even with library sync disabled. Relevant content can then be sent to parsing, model and text-grouping providers. These jobs can continue while the app is closed, with results retained for later delivery.
For these server-based BYOK reading jobs, the credential you supply is held in server process memory, not intentionally written to the job database, files or application logs. A restart requires the client to provide it again. This describes that execution path; it does not mean your device or chosen provider never stores credentials or request data.
Local Agents and other connected services
Codex and DeepSeek/DSH Agent execution is managed locally. Those tools can still send prompts and selected files to their providers, and authorized tools may access additional resources. Provider account settings, retention and any model-training controls are governed by the provider you select. This policy does not promise identical data practices across external providers.
Website requests and cookies
The interactive demo contains example content, not your research library. Your browser may cache website assets. Download checks may contact GitHub and our release mirror. We do not embed advertising trackers or marketing analytics scripts in these pages. Our hosting and Cloudflare network/security services can process request records and diagnostics and may use necessary security cookies.
5. Service providers and other recipients
Only providers relevant to the feature or request are involved. The current service uses:
- Tencent Cloud: server hosting and COS object storage for service data and files.
- Cloudflare: DNS, content delivery, network diagnostics and security for website/service traffic.
- Our Logto-based sign-in service and Aliyun Direct Mail: authentication, account records and sign-in emails.
- MinerU: cloud document parsing when that parser is used.
- Alibaba Cloud DashScope / Qwen and TypeSafe: configured PaperCore model inference and text grouping for reading tasks.
- Providers you select: your custom model endpoint, OpenAI/Codex, DeepSeek/DSH or other connected services, according to the task and your configuration.
- GitHub: software releases and download delivery when accessed.
- Paddle, once checkout is available: payment, tax, billing, fraud prevention and transaction support as merchant of record, under its own Privacy Policy.
Authorized administrators may access information needed for support, security and standard-reading review. Share recipients receive the content you expose. We may also disclose information when legally required or necessary to protect people, investigate abuse or establish and defend legal claims, subject to applicable law. We do not sell personal information or use it for cross-context advertising.
6. Where processing happens
The operator is based in Wuhan, China. Our current application hosting and COS storage are in Singapore. The configured DashScope endpoint processes requests in mainland China. Cloudflare and other external providers can process data in additional countries according to their infrastructure and your selected service.
Using these cloud features therefore involves processing outside your country, potentially under different data-protection laws. We do not offer an EU-only or UK-only storage option. Contact us for information about a particular processing route or the transfer arrangements applicable to it before sending data subject to location restrictions. This notice does not itself constitute consent to every transfer or replace any safeguards required by applicable law.
7. Retention and deletion
- Local files: remain on your device until you remove them. Uninstalling may leave the chosen library folder in place.
- Account and synchronized data: kept to maintain the account and library until deletion is requested or the data is otherwise removed under the service’s operation. Version history, shared files and copies referenced by other accounts can have separate lifetimes.
- Server reading jobs: completed job materials and results are normally scheduled for cleanup after a 30-day retention window. Copies delivered to your library, synchronized to your account or accepted into the shared collection are separate records and do not expire under that job timer.
- Temporary parsing jobs: temporary server-side MinerU task records and materials are normally scheduled for cleanup after the configured 24-hour expiry. This is not a promise that every upstream provider or library copy is erased within 24 hours.
- Shares: access follows the selected expiry or revocation; saved recipient copies are outside our direct control.
- Security logs, support records and backups: retention depends on incident investigation, resolving support requests, recovery needs and applicable recordkeeping or claim requirements. There is currently no single automatic deletion period covering all backups. Live-record deletion does not immediately erase every historical backup.
- Transaction records: if purchases become available, billing and tax records may need to outlast an account under applicable law and Paddle’s separate retention practices.
Email us for account or cloud-data deletion. We will verify the request proportionately, explain any necessary exceptions and handle it within the period required by applicable law. We may need information sufficient to identify your account; do not send passwords, API keys or full payment-card details.
8. Security
We use HTTPS, access controls and encryption for supported server-stored data. Server-side encryption is not end-to-end encryption: our service holds the keys required to process that data, and authorized processing or administration can access it. No storage or transmission system can guarantee absolute security.
Protect your device, sign-in email and provider credentials. Limit what you upload to what a task needs. If you suspect exposure of account data or a credential, contact us promptly and revoke the affected credential with its provider.
9. Your choices and rights
You can change sync settings, choose whether to run a cloud task, choose an external provider, delete local content and revoke share links. These controls affect different processing paths; disabling one does not remove data already processed through another.
Depending on applicable law, you may request access, correction, erasure, a portable copy or restriction of your personal information. You may withdraw consent where we rely on it. You may object to processing based on legitimate interests, including standard-reading quality and reuse processing. Contact [email protected] and describe the account and request.
You may complain to your local data-protection authority, including the UK Information Commissioner’s Office where applicable. Contacting us first is optional. We do not require you to waive these rights or accept marketing to obtain support.
10. Children and policy updates
PaperEnjoyer is intended for adults aged 18 and over. We do not knowingly offer accounts to children. If you believe a child’s information was provided, contact us so we can review and address it.
We will update the date on this page when practices change and provide additional notice or seek consent where required. A policy update does not retrospectively authorize a new use of information where a separate legal basis or permission is needed.