Privacy Policy
Canon is a writing workspace for novelists. This policy explains what information Canon handles, why, who else handles it, and what choices you have. It is written to match what the app actually does.
1Who runs Canon
Canon is operated by Noven Empire, a brand of Uwuigiaren David Osaretin, Nigeria. For anything about your data, write to idlechipexpo85@gmail.com.
2Who can use Canon
Canon is for people aged 13 and over. If you are under 18, you may use Canon only with the permission of a parent or guardian.
3What Canon handles
- Account details, if you sign in: your email address, name and account identifier, provided through Google sign-in and Firebase Authentication.
- Profile details you choose to add, such as a pen name and display name.
- Your writing and project content: novels, chapters, story framework entries, outlines, chat conversations with the assistant, images and imported documents.
- Subscription details, if you buy Canon Pro: your plan, billing period, renewal and cancellation status, and reference codes issued by our payment provider (see section 7).
- Feedback you send from inside the app, including your message and any contact detail or survey answers you choose to add.
- Push alert details, if you turn Push alerts on: a device token that lets Canon send notifications to this device, kept with your account until you turn Push alerts off.
- Usage and technical information collected by Firebase services such as analytics and app-integrity checks, which helps us measure and improve Canon.
- Public share content, if you choose to publish a novel (see section 6).
- Reader reactions and notes, if you share a novel and readers use them (see section 6).
4Where your content is stored
Canon works on your device first. Your projects are stored in your browser or device storage, and you can use the core workspace without signing in or syncing anything.
If you turn on Cloud Sync and sign in, Canon copies your projects to Google Firebase (Firestore) so they are available on your other devices. Firebase is operated by Google.
5The AI Assistant
AI features are optional. You bring your own API key for a supported provider: Google Gemini, Anthropic Claude, OpenAI, xAI Grok or OpenRouter. You can also use a local model that runs on your own device or network.
- When Cloud Sync is off, Canon sends your request straight from your device to the provider you chose.
- When Cloud Sync is on, the request is processed by Canon’s own processing service, hosted on Cloudflare, so it can finish even if the app is closed. While it runs, the request (which can include chapter text, story framework and other project context) is saved in your account. Your API key is passed to that service, including through a Cloudflare queue, to make the call, and is not saved to your account.
- Whatever is sent to a provider is handled under that provider’s own terms and privacy policy. Don’t send anything you aren’t allowed to share.
Your API key is stored on your device. Canon doesn’t sell your content or use it to train AI models.
6Public sharing
If you publish a novel, Canon creates a public copy that anyone with the link can read, without an account. Depending on your choices, it can include the title, synopsis, pen name, chapters and selected framework entries. You can unpublish it at any time, and deleting your account removes your published links.
Readers can also react to chapters and, if the author turns it on, send the author a private note of up to 1,000 characters, with a name only if the reader chooses to give one. Reactions are tied to a random identifier saved in the reader’s own browser, not to an account. Notes go only to the author of the novel, are never shown publicly, and the author can read, mark and delete them. To limit spam, Canon’s processing service (hosted on Cloudflare) may run a bot check using Cloudflare Turnstile and limits how often one device or connection can send reactions or notes.
7Payments
Canon Pro subscriptions and one-time passes are processed by Paystack. Your card or bank details go to Paystack, not to Canon, and we never see or store your full card number. We receive and keep the payment information described in section 3 so that Pro can be turned on, renewed, extended and cancelled. Canon’s processing service on Cloudflare receives payment notifications from Paystack to do this. Paystack keeps its own payment records under its own policy and legal obligations.
8Who else handles your data
- Google / Firebase: sign-in, cloud sync, public shares, analytics, app-integrity checks and push notifications (Firebase Cloud Messaging).
- Cloudflare: Canon’s processing service for payments, subscription cancellation and AI requests when Cloud Sync is on.
- Paystack: subscription payments.
- The AI provider you choose, only when you use an AI feature.
We don’t sell your personal information and we don’t share it for advertising.
9How long we keep it
- Your content and account details are kept until you delete them or delete your account.
- Feedback messages are kept until you ask us to delete them.
- Subscription records are kept while your subscription is active, and afterwards for as long as the law reasonably requires for accounting and disputes.
- Paystack, Google and your AI provider keep data under their own policies.
10Your choices and rights
You can use Canon without an account, switch Cloud Sync off or pause it, and stop using AI features at any time. Under the Nigeria Data Protection Act 2023 and other applicable law, you can ask to access, correct, delete or move your personal data, object to or restrict how it’s used, and withdraw consent. Write to idlechipexpo85@gmail.com and we’ll respond within a reasonable time. You can also complain to the Nigeria Data Protection Commission.
11Deleting your account
In the app: Settings → Data → Delete Account. This permanently removes your account and everything tied to it: novels, chapters, framework entries, chats, public share links, pending AI requests and your sign-in account, in the cloud and on that device. If you have an active Pro subscription, Canon cancels it first. Full steps, and how to ask by email if you can’t use the app, are at canon-writer.web.app/delete-account.html.
12Security
Data travels over encrypted connections and is stored with Google Firebase’s security features. No system is perfectly secure, so keep your own backups of work that matters to you.
13Changes
If we change this policy in a way that matters, we’ll update the date and, where we can, tell you in the app.
14Contact
Noven Empire, a brand of Uwuigiaren David Osaretin, Nigeria. idlechipexpo85@gmail.com