This policy explains how MyCFIBook handles information across its website and apps, including account access, offline downloads, and personal work stored on a device.
Who We Are
MyCFIBook.com, doing business as My CFI Book, is a sole proprietorship based in McKinney, Texas. This policy covers the website and MyCFIBook web and installed apps. Privacy questions and requests can be submitted through the Contact form.
Information Collected and Used
MyCFIBook uses account information to provide member access, maintain content, process purchases, respond to support requests, and protect the service. Depending on the features used, this includes:
- Account and profile information, including names, usernames, email addresses, preferences, membership dates, and group associations.
- Website content, including custom Book Pages and Lesson Plans, uploads, comments, contributions, and support messages.
- Order and transaction information, including items purchased, amounts, billing details, and shipping information when applicable.
- Technical information, including IP addresses, browser or app information, request times, and session records. Some of these records are associated with an account.
WordPress stores password hashes rather than readable passwords. Authorized administrators can manage account and service information. MyCFIBook does not sell personal information. Information is shared with service providers as needed for the functions described below, or when required by law.
App Sign-In and Offline Storage
The app sends sign-in information to MyCFIBook over HTTPS and does not save the password. The web app uses a protected browser cookie; installed apps keep a sign-in credential in device secure storage. Account identity, sign-in expiry, profile and membership information, downloaded Book Pages and Lesson Plans, announcements, images, bookmarks, and preferences are stored locally.
Offline reading requires a valid saved sign-in, normally up to 30 days from the last successful sign-in or renewal, or until membership expiry if sooner. Near expiry, the app attempts to renew access when online. Downloads have no scheduled deletion date, but account or access changes can require fresh downloads. Content updates can be checked and downloaded through Downloads & Updates.
Instructor notes and whiteboard drawings are saved on the device and are not uploaded by the app or synchronized between devices. Search uses downloaded content. Notes and drawings remain after sign-out for the same account. The tools provide clear controls; clearing browser or app storage, removing the app, or losing the device may also erase local work. Keep a separate copy of important information. Device backups are controlled by the operating system and are not a guaranteed app backup.
Website Content and Contributions
Website customizations and uploads are stored with account and content metadata. Group content can be shared with other members of that group. Contributions submitted for inclusion in the shared publication may be incorporated into site content. Public recognition can include a name, username, location, and contribution statistics; available account preferences or the Contact form can be used to request removal of recognition.
Website content is not guaranteed to be deleted exactly 30 days after membership expiry. Scheduled cleanup can remove eligible expired or inactive accounts and their content after a minimum grace period, but membership, ownership, shared-content, and safety checks can require retention. A privacy request is separate from scheduled cleanup.
Service Providers
Service providers process information needed for hosting, payment processing, email delivery, support, security, spam prevention, and optional website tools. The website is hosted by HostGator. Provider processing and retention depend on the service used, its configuration, and the provider's applicable terms.
- Payments: The payment provider offered at website checkout receives relevant transaction and billing information to process payments and prevent fraud. Where Stripe is used, its Privacy Policy applies. MyCFIBook keeps order records.
- Spam and Site Services: Enabled spam, security, and statistics services may process submitted comments or forms and associated IP, browser, and request information. Relevant provider notices include Akismet Privacy and the Jetpack Privacy Center. Provider retention is separate from the website's own records.
- PDF Generation: Requesting a website PDF sends the assembled document content and title to DocRaptor. This can include personalized content or information included in the document. See DocRaptor's Privacy Policy.
- AI Writing Tools: Using enabled website AI tools sends entered or selected text, relevant instructions, and sometimes the page title to OpenAI. Account-linked usage counts administer service limits. Avoid submitting unnecessary sensitive information. See OpenAI's Privacy Policy and its API data controls.
These website tools do not automatically receive the app's local instructor notes or drawings. The app bundles its fonts and does not request them from Google Fonts. Opening a website from the app uses that website's services and privacy practices.
Cookies, Sessions, and Logs
Website cookies support sign-in, preferences, and shopping-cart sessions. Their duration depends on the feature and selected settings; ordinary website login and app login use separate sessions. Blocking required cookies can prevent web sign-in or checkout. Browser controls can be used to manage cookies and stored website data.
Website, hosting, and security systems may record request details for operation, troubleshooting, and abuse prevention. IP addresses, browser information, and account-linked session records can be personal information. Logs are not represented as anonymous merely because they do not contain a name.
Uploads and External Content
Uploaded images may contain embedded location or other metadata. Review images before uploading, since anyone able to retrieve the file may be able to extract that information. Embedded media and linked websites can collect information under their own policies. Content images that have not been downloaded may be requested from their source when viewed in the app.
The app does not request device location, contacts, camera, or microphone access. It uses network access and local storage to provide sign-in, downloads, and personal tools.
Retention and Privacy Requests
Account and website content are retained to provide the service, subject to account cleanup and verified privacy requests. Order, transaction, and security records may be retained after account deletion only as necessary for accounting, tax, dispute handling, fraud prevention, or applicable legal requirements. Retaining an order does not retain an active login or membership. Provider records and backups can have separate retention schedules; a website request does not instantly erase those copies or copies already downloaded to offline devices.
Use the Contact form to request access, correction, an export, or deletion of personal information. Control of the existing account or email address must be verified before account-specific action. The response will explain the request's scope, expected handling time, and any information that must be retained. Deletion involving a group or previously shared content needs an ownership review so that another member's account is not mistakenly removed.
Signing out or uninstalling the app does not delete the website account, cancel a membership, or automatically erase local work. Account deletion and payment refunds or recurring-payment cancellation are separate actions. Local device data must be cleared separately when its removal is intended. Keep a copy of important personal work before requesting deletion.