Novo is a mobile application for reading novels in Urdu and English. This policy explains what we collect,
why, who we share it with, and how you control it. It covers the Novo mobile app for iOS and Android
(com.novels.novo) and this website.
Novo is operated by iExtendLabs, DHA Phase 4, Lahore, Pakistan (“Novo”, “we”, “us”). Where the GDPR applies, iExtendLabs is the data controller for the personal data described here.
For anything in this policy — privacy questions, data requests, or support — contact games@iextendlabs.com.
| Data | When | Why |
|---|---|---|
| Email address | Creating an account, or signing in with Google or Apple | Identify your account, sign you in, send password-reset mail |
| Password | Creating an account with email | Stored only as a salted hash — we never see it |
| Display name and handle | Creating an account, editing your profile | Shown on your public profile, reviews and comments |
| Profile bio | Editing your profile (optional) | Shown on your public profile |
| Profile picture | If you choose to upload one | Shown on your profile and next to what you post. Chosen from your photo library or taken with your camera, cropped on-device, then uploaded to our storage |
| Reviews, ratings and comments | When you post them | Displayed publicly in the app |
| Reports and blocks | When you report a post or block a reader | Moderation, and hiding blocked readers’ content from you |
| Support correspondence | When you email us | Answering you |
If you sign in with Google or Apple, we receive your email address and, where the provider supplies it, your name — never your password. If you use Apple’s Hide My Email, we only ever see the relay address Apple gives us.
| Data | Why |
|---|---|
| Reading progress — which novel, which chapter, how far through | Resume where you left off; sync across your devices |
| Library, bookmarks and reading history | Your saved novels |
| Reading time per chapter, in approximate minutes | Award reading XP, and enforce daily caps against abuse |
| Coin balance and transaction history | Run the coin economy, prevent abuse, answer support requests |
| Unlocked chapters and premium novels | Give you continued access to what you unlocked |
| Streak, XP, level, quest, daily-reward and achievement progress | Operate the rewards features |
| Rewarded ads watched (count and date) | Enforce the daily earning cap |
| Reading preferences — theme, font, size, spacing | Apply them across your devices |
| Reminder settings you switch on | Schedule reading reminders on your device |
We do not sell your personal data, and we do not share it for cross-context behavioural advertising beyond the advertising use described in §5.
Where the GDPR, UK GDPR or a similar law applies, our legal bases are performance of a contract (providing the app, your account, your library and your unlocks), legitimate interests (security, fraud and abuse prevention, moderation, product improvement), consent (personalised advertising, and device notifications — each withdrawable at any time), and legal obligation where we must retain or disclose data by law.
We do not sell your personal data. We share it only with service providers processing it on our behalf, and only for the purposes below:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database and file storage, and the account email we send (password resets, sign-up confirmation) | Email, display name, handle, bio, profile picture, and all account, progress, coin and posted-content data |
| Cloudflare (R2) | Delivering novel text and cover images | IP address and request metadata |
| Google AdMob | Serving and measuring rewarded, interstitial and native ads | Advertising identifier, device data, coarse region |
| Unity LevelPlay (ironSource) mediation, incl. Unity Ads | Running the ad auction for rewarded and interstitial ads | Advertising identifier, device data, coarse region, consent signals |
| Google Analytics for Firebase | Product analytics | App instance id, account id, device data, usage events |
| Google Sign-In / Sign in with Apple | Signing you in, if you choose them | Email address, and name where the provider supplies it |
These providers operate internationally, so your data may be processed outside your country, including outside the EEA and the UK. Where required, transfers rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism. We may also disclose data where legally required, to enforce our Terms, or to protect our rights or our readers’ safety.
Novo is free, and advertising is how it stays free. Three kinds of ad appear:
Ads are served by Google AdMob and, for rewarded and interstitial formats, through Unity LevelPlay (ironSource) mediation, which runs an auction across ironSource, Unity Ads and AdMob. These partners may use your advertising identifier and device data to select and measure ads, including personalised ads where you have consented.
Your controls
AdMob’s own practices are described in Google’s privacy & terms; Unity’s in the Unity player privacy policy.
Reading reminders are scheduled on your device by the app itself. We do not operate a push server, we do not collect a push token, and no reminder content leaves your phone. You are asked for notification permission before any reminder is scheduled, and you can turn reminders off in the app’s Settings or revoke the permission in your device settings.
Depending on where you live, you may have the right to access, correct, export (port), restrict or delete your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority.
We do not use your data for automated decision-making that produces legal or similarly significant effects.
You can delete your account and its data at any time:
Deletion removes your account and login, profile and profile picture, reading progress, library and bookmarks, coin balance and history, chapter and premium unlocks, streak, XP and rewards progress, and the reviews and comments you posted.
It cannot be undone, and unspent coins are forfeited without refund. Deletion completes within 30 days. We may retain minimal records where the law requires it, and anonymised aggregate statistics that can no longer identify you.
| Data | Retention |
|---|---|
| Account, profile, progress, library | While your account exists, then deleted per §8 |
| Coin and unlock records | While your account exists — they represent entitlements you earned |
| Reviews and comments | Until you delete them, or your account |
| Analytics events | Per Google Analytics for Firebase retention, up to 14 months |
| Content delivery and security logs | Up to 90 days |
| Support correspondence | Up to 24 months |
Novo is not directed at children under 13 (or under 16 where local law sets that age, including parts of the EEA), and we do not knowingly collect their personal data. Novo is not a child-directed app under COPPA or Google Play’s Families policy, and we do not knowingly serve ads to children.
Some novels carry age ratings and mature-content warnings; please use them. If you believe a child has given us personal data, email games@iextendlabs.com and we will delete it.
Data is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted hashes. Access to reader data is enforced at the database level so that one account cannot read another’s, and privileged operations run server-side rather than in the app. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.
We will update this policy as Novo changes. Material changes will be announced in the app or by email before they take effect. The “last updated” date above always reflects the current version.
games@iextendlabs.com — privacy requests, support and content
reports.
iExtendLabs, DHA Phase 4, Lahore, Pakistan