Privacy Policy

This policy covers the Slab apps and services: Slab Reader (iPad), Slab Note (desktop), the Slab website, and your Slab account. It explains what we store, why, and the rights you have over it. The data controller is E Labs Collection Ltd (company no. 17383365), registered in England and trading as E_Labs. Contact: support@slab-apps.com.

What we store

• Account— the pseudonymous identifier your sign-in provider (Apple or Google) gives us, your email address (which may be Apple's private relay), your plan, and the names of devices you've signed in from.
• Your content — the documents you add, and the highlights, notes, comments and reading progress attached to them. Stored so we can sync them to your devices and, if you choose, your connected AI assistant.
• AI connections— when you connect an assistant we store a label (e.g. "Claude") and a hashed access key. We never see or store your credentials for any AI service.
• Payments — purchases are processed by Apple (App Store) or Lemon Squeezy (web). They are the merchants of record; we receive transaction and entitlement records, never your card details.
• Service logs — short-lived technical logs (including IP addresses) used for security, rate limiting and debugging.

What we don't do

• We never send your content to any AI provider. If you connect an assistant, it connects to us, using a key only you can create — and revoke at any time in the app. What your assistant does with what it reads is governed by your agreement with that provider.
• We don't sell your data or use it for advertising.
• We don't train AI models on your content.

Where it lives

Content and account data are stored with Cloudflare (databases and object storage). The website is hosted by Vercel. Our processors are Cloudflare, Vercel, Apple and Lemon Squeezy, each under their standard data-processing terms.

Legal basis and retention

We process your data to provide the service you signed up for (contract), and minimally for security and abuse prevention (legitimate interests). We keep it until you delete it: deleting a document removes it immediately; deleting your account (Settings → Delete account) permanently removes your documents, annotations, connections and account record. Residual copies in infrastructure backups clear within 30 days.

Your rights

Under UK and EU data protection law you can access, correct, export, restrict or delete your data, and object to processing. Deletion and access are self-serve in the app; for anything else, email support@slab-apps.com. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local authority.

Children

The Slab services are not directed at children under 13.

Changes

If this policy changes materially we'll note it in the app and on this page before it takes effect.