Privacy policy

Last updated: 2026-11-10

This policy covers the Peony iPhone app and this website, run by Eladio Caritos. It says what is stored, where, and for how long.

On your device

Your books, highlights, notes, bookmarks and reading settings are stored only on your device. The app has no accounts, no analytics, no advertising and no tracking, and it contains no third-party SDKs.

Network calls the app makes

The only network calls the app makes are to peony.caritos.com, and only for PDF conversion. This happens only while PDF conversion is switched on in Settings (it is on by default). Then every PDF you add is sent over HTTPS to peony.caritos.com, converted there into a reflowable EPUB, and the EPUB is sent back to the app.

• With PDF conversion switched off, nothing is sent anywhere and PDFs open as pages.
• Each request carries a random ID that the app makes on your phone the first time it converts a PDF. It is not derived from your name, email, phone number, device hardware or other apps, and it is not shared with anyone. The server uses it only to count conversions per install and to stop abuse.
• EPUB files you add are never sent anywhere.
• Your highlights, notes and bookmarks are never sent anywhere.

What the server keeps

• The PDF and the converted EPUB are deleted after the app has downloaded the EPUB, or within 24 hours at the latest. The 24 hours count from when the conversion finishes (a conversion that is waiting or running comes first).
• A numbers-only record per conversion and per-install counts (tied to the random ID above): status, when it ran, how long it took, the file sizes and whether it succeeded. The server never keeps file names or file contents in these records. A job record can stay up to 30 days.
• Account details for people who have an account on this site: the email address and a hash of the password (never the password itself). If you sign in to the website, a session cookie keeps you signed in; it is needed for the site to work and is not used for tracking.
• Server request logs: the client IP address, the requested path (without the query string), the status, the size, the time and a request id. They do not contain cookies, tokens or request bodies. They are kept on the same server for a short time and rotated.

Buying the app

Peony is sold through the Apple App Store. Apple handles the purchase, your payment details and your Apple ID under its own privacy policy. We do not receive them: we never see your name, card or Apple ID, and the app does not ask for them.

The website

This website serves plain pages and, for signed-in users, a page to convert a PDF in the browser. The same deletion rules apply to files uploaded there. The site uses no advertising or tracking services and sets no cookies for visitors who are not signed in. It counts page views anonymously with a small script from caritos.com (the same owner): it records the page, the site that referred you and clicks on a few links, never your IP address or name, and it respects Do Not Track and Global Privacy Control. The counts are kept on caritos.com.

Who receives your data

No one. We do not sell or share your data, and no third party receives it.

Deleting your data

To stop sending anything, switch off PDF conversion in the app's Settings. Your highlights and notes can be deleted in the app, or by deleting the app. The random ID and its conversion counts are not tied to you by name; to have the records for your install or your website account deleted, email eladio@caritos.com or use the support page.

Changes

If this policy changes, the date above changes with it.