Privacy policy
Last updated 1 October 2026.
Frostmark eReader is made by NovaFrost Technologies ("we"). This policy explains what we collect when you use the app, why, and what you can do about it. We follow the Protection of Personal Information Act (POPIA) and, for readers in the EU and UK, the GDPR.
The short version
- Your books stay on your devices and in cloud storage you choose. We never receive or keep your book files, except a book you email to your library or build from a web page, which we hold only until your device downloads it (at most 14 days).
- There is no advertising and no advertising or analytics tracking in the app.
- Your highlights and notes are encrypted in our database. Our staff cannot read them.
- You can download everything we hold about you, and delete your account, from inside the app.
What we collect
- Account details: your email address, display name, a scrambled (hashed) version of your password, and which sign-in providers (Google, Apple or Facebook) you linked. From those providers we receive only an identifier, your email address and, if you allow it, your name.
- Devices: the name, type and app version of each device you sign in on, when it was linked and last used, and a push notification token if you allow notifications.
- Library catalogue: for each book, its title, authors, genres, format, file size, a fingerprint of the file (used to recognise the same book on another device), the folder it sits in, when you added it, whether it is a favourite and your reading status. Also your collections.
- Reading data: your position in each book, bookmarks, highlights and notes (the highlight and note text is encrypted), and your reading settings such as theme, font and page texture.
- Send-to-library email: the addresses you approve as senders, and emails sent to your personal library address. We keep the attachment until your device downloads it and delete the email itself straight away.
- Web import: the web page addresses you build books from, the chapter list, your confirmation that you are entitled to an offline copy, and your chapter-watch settings.
- Backups: which storage providers you connected and the account name each shows, and the history of backup runs. Your backups themselves go straight from your device to your provider, encrypted, and never pass through us.
- Purchases: if you subscribe, the store, product, purchase reference and expiry date that Apple or Google confirm to us. We never see your payment card.
- Security records: a log of sign-ins, account changes and admin actions, with the time and IP address, used to protect accounts and investigate misuse.
Why we use it
- To run your account and keep your library, reading position and notes in step across your devices (performance of our agreement with you).
- To send you codes, security notices and the notifications you choose (agreement and legitimate interest in account security).
- To apply your plan and its limits, and confirm purchases with Apple or Google (agreement).
- To keep the service secure and prevent abuse (legitimate interest and legal obligation).
We do not sell your information, use it for advertising, or build reading profiles about you.
Who we share it with
- Our hosting provider, which runs our servers and database.
- Our email provider, to send you emails and receive books sent to your library address.
- Expo, Apple and Google, to deliver push notifications.
- Apple and Google, to confirm sign-ins and purchases.
- Websites you import from receive ordinary page requests from our server, identified as FrostmarkReader, without any information about you.
These providers only process information on our instructions. Some are outside South Africa; where that happens we rely on agreements that give your information the protection POPIA and the GDPR require. We may disclose information if the law requires it.
How long we keep it
- Account and reading data: until you delete your account, then removed immediately.
- Emailed and web-built books waiting for download: until downloaded, or 14 days.
- Security records: kept after account deletion with only an anonymous account number, so we can investigate misuse.
Your rights
You can see and correct your details in the app, download a copy of everything we hold (Settings, Account, Download my data), and delete your account in the app or on our account deletion page. You can also object to processing or ask us to restrict it. Write to support@novafrost.co.za for anything else. If you are unhappy with our answer you can complain to the Information Regulator of South Africa, or your local data protection authority.
Children
Frostmark eReader is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has an account, contact us and we will delete it.
Security
Connections to our servers are encrypted. Passwords are stored with Argon2id hashing. Highlight and note text, backup keys and provider tokens are encrypted in the database. Backups are encrypted on your device before upload.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change applies.
Contact
NovaFrost Technologies, support@novafrost.co.za.