BENARI · Legal documents
Privacy Policy
How BENARI uses personal data, protects your account and handles your privacy choices.
1. This Policy and the controller
This Policy explains what data BENARI processes, why, who receives it and how to exercise your rights. The data controller is BENARI INTERNATIONAL LTD., Poole (Dorset), England. Contact: privacy@voiceofbenari.com.
It covers voiceofbenari.com, app.voiceofbenari.com, open.voiceofbenari.com and the mobile app: accounts, library, audiobooks, ebooks, podcasts, education, creator accounts, moderation, purchases, subscriptions and support. Reading this Policy does not mean consenting to every type of processing: where consent is needed, we request it separately.
2. Data we receive
- Account and profile: email, identifier, legal and display names, avatar, date of birth, country of residence, language, settings, roles, registration and sign-in dates and marketing preference. The information depends on fields completed and features used.
- Google sign-in: name, email and a profile-picture link. The permissions are openid, email and profile. We do not receive your Google password or request access to Gmail, contacts or Google Drive files. Your name and picture may become your public BENARI display name and avatar.
- Security: authentication and session data, two-factor status, a hash of the recovery key and a record of its use. Supabase processes the authenticator secret. Passwords are not stored in plain text; we do not retain the recovery key itself.
- Usage: library, favourites, welcome titles, activations and subscription slots, reading and listening progress, last chapter and position, and marks used to count reading and listening.
- Payments: product or plan, amount, currency, tax, exchange rate, date, status, transaction, customer and subscription identifiers, refunds, and billing-address and card-issuing country received from Stripe. We do not receive the full card number or security code.
- Creators and rights holders: applications, contact details, phone, postal address, PayPal payout details, identity and address documents, biography, professional information, contracts and rights evidence. Podcast creator applications also include date of birth.
- Tax and payouts: tax-residence country, individual or company status, tax identifier type and number, legal name; accruals, threshold, accounting periods, statements, due dates, amounts, status and transfer reference.
- Content and correspondence: books, EPUB, audio, covers, descriptions, ISBN, applications, attachments, emails, support requests, comments and moderation history.
- Technical data: IP address, browser, device, operating system, app version, language, request times, session identifiers, error and security logs, cookies and local storage.
Data comes from you, your use of the service, Google when you choose that sign-in method and payment providers. Registration does not automatically grant access to your microphone, contacts, precise location or device files: access depends on the feature used and the necessary permissions.
3. Why we use data
We use data to create and secure accounts; deliver content and save progress; manage purchases, subscriptions, refunds and payouts; assess applications and rights; publish and moderate; provide support and service emails; diagnose problems, prevent abuse and resolve disputes.
Residence, tax residence and buyer-country indicators help determine payout treatment, place of supply and taxes. Tax-profile information is needed to fulfil tax obligations relating to remuneration. Visit analytics and advertising measurement are enabled only with consent where used.
4. Lawful bases
- Contract and steps you request before a contract: accounts, library, progress, purchases, subscriptions, creator applications, publication and payouts.
- Legal obligations: applicable accounting and tax records, payout documentation and lawful mandatory requests.
- Legitimate interests: security, fraud prevention, technical diagnostics, necessary moderation and protection of rights, balanced against your interests and fundamental rights.
- Consent: optional analytics, advertising technologies and marketing communications where consent is required.
You may withdraw consent at any time. Withdrawal does not affect earlier lawful processing or processing with a separate lawful basis. If information required for a particular service is not provided, we may be unable to deliver that service or make a payout.
6. Recipients
- Supabase: authentication, two-factor protection, database and selected file storage.
- Vercel: web-app hosting, server functions and technical logs.
- Cloudflare: DNS and delivery infrastructure; R2 provides private audio and media storage.
- Stripe: payments, subscriptions, refunds and transaction checks.
- Google: Google sign-in; Google Analytics only with consent; Google Play for Android distribution and enabled store functions.
- Meta: advertising measurement through Meta Pixel in the web app, only with consent.
- Resend: email delivery. The shared hosting provider for domain email stores voiceofbenari.com mailboxes and correspondence.
- PayPal: creator payouts where a transfer is made through PayPal.
- Apple / App Store: iOS distribution and testing, and store functions where used.
- Authorised staff and contractors: support, moderation, technical, accounting and legal services as necessary.
- Competent authorities and parties to proceedings: where disclosure is required by law or necessary to protect legal rights.
Providers may act as processors on our behalf or as independent controllers for their own services. Their policies apply to that independent processing. We do not sell personal data.
7. Payments and creator accounts
Stripe processes full payment credentials; BENARI retains a limited financial record for access, accounting, tax, refunds and disputes. Billing-address country and card country are separate indicators; they do not replace a creator’s declared tax residence.
Creator accounts include accruals, the selected threshold, statements, dates and transfer confirmations. Tax information and identity documents are not published in the catalogue. Where app-store payments are used, the relevant store policies also apply.
8. What others can see
Your display name, avatar, author, lecturer or podcast creator status and interface language may be publicly accessible. A technical profile identifier, creation and update dates and a technical welcome-access flag may also be accessible with them. Material, reviews and creator information you choose to publish appear in the relevant areas.
Your legal name as a separate field, date of birth, country, marketing preference, administrative permissions and two-factor status are not available to outsiders through the public profile. However, a real name or email is visible if included in a display name, review or published material. Check your display name and avatar after Google sign-in.
Applications, identity and address documents and tax details are accessible only for the relevant operational tasks. Authorised staff review uploaded works and rights documents. Do not include another person’s data without a lawful basis.
9. Retention and listening statistics
Retention depends on the purpose, contractual needs, legal duties and relevant dispute periods. When the basis ends, data is to be deleted or irreversibly anonymised.
- Account, library and progress: for the life of the account, then deleted with it, subject to the justified exceptions below.
- Personal listening marks: to prevent duplicate counting and maintain accurate statistics; in the current implementation they are linked to the account and deleted with it. A separate fixed automatic-cleanup period has not yet been established.
- Anonymous aggregates: may be kept indefinitely. They do not contain a user identifier; account deletion does not reduce a work’s accumulated statistics.
- Tax and financial documents: for the period applicable law requires for the relevant record, including mandatory accounting, checks, refunds and disputes. This does not mean keeping an entire creator profile indefinitely.
- Identity and address documents and applications: during verification and, where needed, to evidence contracts or rights; further retention requires a continuing lawful basis. There is no single fixed period for all these documents.
- Correspondence, deletion logs and security: as needed to handle enquiries, evidence requests being fulfilled, prevent abuse or protect claims. The specific period depends on the category and circumstances.
For audio, the usual counting threshold is 60 seconds or 5% of the duration, whichever is less; completion and progression to later chapters may also count. Personal progress and anonymous statistics are separate records. You may ask us for the retention period or criteria for your particular data.
10. International processing
Providers may process data in the UK, EEA and other countries, including the United States. Actual locations depend on the service and provider settings.
Where a transfer is restricted by applicable data-protection law, it requires an appropriate basis: an adequacy decision, appropriate contractual safeguards or another basis permitted by law. Using BENARI is not itself consent to an international transfer. Contact us for information about recipients and applicable safeguards.
The UK GDPR applies to processing in connection with the UK operator’s activities; the EU GDPR also applies, within its scope, when offering services to people in the EU or monitoring their behaviour. EEA-to-UK transfers within the scope of the current European Commission adequacy decision may rely on that decision. It does not replace a separate basis for onward transfers to other countries.
11. Security
We use HTTPS, authentication, access controls, restricted administrative permissions and private storage for restricted material with time-limited access links. Two-factor authentication adds a code check; recovery-key information is used to restore access and record use of the key.
No system guarantees absolute security. Protect your password, email, device and recovery key. If you suspect unauthorised access, change the sign-in credentials available to you and contact support.
12. Your rights
Depending on applicable law, you may request information, access, correction, erasure, restriction or a portable copy; object to processing based on legitimate interests; and withdraw consent. You may object to direct marketing at any time.
Email privacy@voiceofbenari.com. We may carry out proportionate identity checks to protect your data. We respond within the statutory period; under the UK GDPR or GDPR, this is usually one month, with any legally permitted extension notified to you.
You may complain to the UK ICO or another competent authority, including in your place of residence where the law allows. Contacting us first is not a condition of making a complaint.
13. Account deletion
Request deletion in the app’s account area, through the public deletion page or by email. Account ownership must be verified. Active recurring Stripe payments are cancelled first; if this fails, deletion does not complete.
Successful deletion removes the account, profile, favourites, progress, activations, personal settings, linked personal listening marks and unpublished drafts, and ends library access. Registering again does not restore this information.
Retained purchases, subscriptions and payout records lose their direct profile link, but transaction identifiers and other necessary information may remain personal data. We do not describe them as fully anonymous merely because the account link is removed. A deletion-request log may retain email, dates, status and the reason for retaining data. Correspondence and financial documents are kept only where there is an appropriate basis.
The in-app tax profile is deleted with the account. Separate accounting and tax documents subject to mandatory retention are not part of that deleted profile. Published works may remain under valid rights, with the personal account link removed. Check app-store subscription settings as well if you subscribed through a store.
14. Children’s data
Independent use requires the age at which applicable law permits entering the relevant contract and, where needed, giving valid data-processing consent. Where parental or guardian consent is required, it must be obtained before use.
Date of birth may be entered in the profile and is collected in podcast creator applications. The presence of that field does not mean every user’s age or a parent’s identity has been verified. Contact us if you believe a child’s data is being processed without a proper basis so we can investigate and act as needed.
15. Emails and notifications
We send necessary messages about security, payments, subscriptions, moderation, support and material changes. Resend delivers emails; the mail hosting provider stores domain correspondence. Message contents, recipients and attachments are processed as necessary for that correspondence.
Marketing messages require the basis or consent prescribed by law. You can opt out through an available unsubscribe mechanism or our contact email. Opting out does not stop necessary service or legal notices.
16. External links
Links to third-party websites, Google, payment pages and app stores lead to other organisations’ services. Their policies explain processing for which they are responsible. BENARI does not control external content.
17. Changes and languages
This version is dated 18 September 2026. It applies upon publication, but no earlier than that date. We will notify material processing changes or a change of controller through the website, app or email as required by law; any necessary consent will be requested separately.
The same version is provided in Russian, English, Spanish, Polish and German. Please report translation discrepancies. Mandatory rights apply in every version.
18. Contact
BENARI INTERNATIONAL LTD. Location: Poole (Dorset), England. Brands: Voice of Ben Ari / BENARI.
For personal data, correction, deletion or rights requests: privacy@voiceofbenari.com.
Company registration number: *****.
Full registered address: *****, Poole (Dorset), England; postcode: *****.
EU representative under GDPR Article 27, if required: ___ (appointment requirement and contact details to be confirmed).
Alternative contact: info@voiceofbenari.com.