Privacy Policy

Last updated 1 November 2026 · Effective from this date

This policy explains what personal data LabariX collects when you use our app and website, why we use it, who we share it with, how long we keep it and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the rules of the Nigeria Data Protection Commission (NDPC).

1. Who is responsible for your data

Labarix Digital Ltd (RC 9979150), Adusco Building, 19 Hospital Road, Ado, Ekiti State 360101, Nigeria, is the data controller for personal data processed through LabariX. You can reach us using the details at the end of this page.

2. What we collect

Information you give us

• Account details: name, username, email address, password (stored only as a secure hash), profile photo, and language and genre preferences.
• Profiles: your writer details (pen name, bio, social links), voice artist details (stage name, voice samples, the voices you create) and any podcast guest links.
• Content you create: stories, chapters, covers, cast and media, narrations and recordings, podcast episodes, universe entries, reviews, comments and reports.
• Payment and payout details: what you bought, when and for how much, and for writers and voice artists the bank account used for payouts. Card and bank details for payments are entered with Paystack and never reach our servers.
• Delivery details: the name, phone number and address you give for printed books.
• Messages: what you send us through the contact form, help screens or email.

Information we collect as you use LabariX

• Reading and listening activity: the chapters and audio you open, how far you get, bookmarks, your list, likes, follows, ratings, reading streaks and reminders you book.
• AI usage: which AI tools you use, how many coins they cost and the text or audio you send to them.
• Device and log information: device type, operating system, app version, IP address, approximate location from your IP, crash reports and a push-notification token if you allow notifications.
• Cookies and similar storage: our website uses only the cookies and local storage needed to keep you signed in, remember your choices and keep the site secure. We do not use advertising cookies.

3. Voice data

If you create a voice from recordings, we process those recordings and the resulting voice model. This is sensitive personal data, so we only do it with your explicit consent, and only for the speaker who gave it. We keep a record of that consent. The original recordings are deleted after the voice is created unless you choose to keep them, and you can ask us to delete the voice at any time.

4. Why we use your data, and our legal basis

We do not sell your personal data, and we do not show third-party advertising based on it.

5. Who we share it with

We share personal data only with service providers that help us run LabariX, under contracts that limit how they use it:

• Paystack, to process payments, subscriptions and refunds.
• Hosting, database and storage providers (including Cloudinary for images and audio), which keep the service running.
• AI providers we route AI requests through (for example OpenRouter and the model providers behind it, such as Google Gemini), and ElevenLabs for narration and voice creation. They receive only the text or audio needed for the request you made.
• Email and notification providers (including Expo and Google Firebase Cloud Messaging) to send account emails and push notifications.
• Error monitoring (Sentry), which receives technical details when something breaks.
• Printing and delivery partners, who receive what they need to print and deliver printed books.

Other users can see your public profile: your username or pen name, profile photo, published work, reviews and comments. Writers and voice artists see totals about their audience, not who each reader is. We may disclose data if the law requires it, to respond to a valid legal request, or to protect people's rights and safety. If LabariX is ever reorganised or sold, your data would move with it under this policy.

6. Where your data is stored

Some of our providers store or process data outside Nigeria. When that happens we rely on the safeguards the NDPA allows, such as the provider's contractual commitments to protect it, and we only use providers that keep it secure.

7. How long we keep it

• Account data: while your account is open.
• After you delete your account, we delete or anonymise your personal data within 30 days.
• Payment, payout and tax records: as long as the law requires, usually six years.
• Voice recordings: deleted after your voice is created unless you choose to keep them; voice models until you ask us to delete them or close your account.
• Content linked to an open report, dispute or legal claim: until it is resolved.
• Stories and narrations you published may stay available to readers who already paid for them, unless you ask us to take them down.

8. Your rights

Under the NDPA you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• send your data to you or another service in a common format;
• correct data that is wrong or incomplete;
• delete your data;
• stop or limit some uses of your data, or object to uses based on our legitimate interests;
• withdraw consent at any time (for example for voice creation or notifications), without affecting what we did before;
• not be subject to a decision made only by automated means that significantly affects you.

You can edit most details in the app and delete your account under Settings, or on our delete account page. For anything else, contact us using the details below. We will reply within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

9. Children

LabariX is for people aged 13 and over. If you are under 18, you need a parent's or guardian's permission. Stories carry maturity ratings so readers and parents can choose what is right for them. If we learn that a child under 13 has an account without a parent's permission, we will delete it.

10. Security

We protect your data with encryption in transit, hashed passwords, access controls, staff roles with the least access they need, audit logs and monitoring. No service is perfectly secure; if a breach is likely to put you at risk, we will tell you and the NDPC as the law requires.

11. Changes to this policy

We will post any changes here with a new date and, if they are significant, tell you in the app or by email before they take effect.