Updated 23 October 2026
Green Room processes your books for your account. We do not build a shared corpus of readers’ books, train models on them, or serve your book content to another reader. AI companion context is limited server-side to text before your reading position.
We use Google Analytics on our public website and reader sign-in pages only after you choose Accept. Choose Reject to continue without Google Analytics. No Google Analytics scripts load or analytics requests are sent before acceptance. You can change your choice here: . We remember that choice for six months across greenroom.ing and api.greenroom.ing.
When accepted, Google Analytics measures page visits, approved campaign attribution, public book and collection identifiers, catalog navigation and filters, successful waitlist signups, outbound download and retailer clicks, and completed reader sign-ins or new accounts, including the sign-in method when available. Outbound clicks do not confirm an installation or purchase. Analytics cookies help group visits. We exclude email addresses, account identifiers, authentication tokens, form contents, private reader content, and raw URL query strings. Advertising personalization is disabled. Internal admin pages are excluded. Withdrawing acceptance stops future collection and clears analytics cookies. How Google uses information from sites that use its services.
We collect feature usage and outcomes to understand reading, Green Room, Concierge, catalog discovery, narration and the other app features, and to diagnose failures. Events include account and session identifiers, app version and platform, a per-account book identity where relevant, occurrence time, durations, counts and bounded feature choices. Measurement events exclude book passages, conversation messages, note contents, search queries, images, audio, transcripts, email addresses, local file paths, access tokens and raw provider errors.
Events are stored offline on your device and sync to our backend when you are signed in and connectivity returns. Offline delivery can be delayed. We keep raw measurement events for one year (365 days from server receipt); local pending events expire after 365 days and are subject to storage limits. Content-free daily contributions and duplicate-prevention records may remain longer so trends and safe retries continue to work. There is no opt-out for this app feature measurement. This is separate from optional website analytics described above.
A small authorized team can inspect account, catalog, billing and operational records. They may deliberately reveal existing conversations, notes and submitted support information to debug issues. Sensitive content access is audited. Measurement does not collect extra reader content, and the admin cannot change your product data.
When you delete a book or your account, we remove its associated measurement events and daily contributions alongside the applicable product data. Content-free book deletion markers and receipt keys prevent delayed device events from restoring deleted data; account deletion removes those keys too. Support diagnostic attachments remain a separate, reader-confirmed flow with their own retention policy. Photos and documents selected in Support are uploaded when you choose Send and are accessible to your account and authorized support staff. They follow the same evidence-retention policy as screenshots. Deleting the associated book or your account removes these files. Files left staged by a failed submission are automatically cleaned up.
Account deletion is available in app Settings. For help with access or deletion, use the in-app Support flow.