Privacy Policy
1. What we collect
Account data: email, name, optional phone and avatar (via our authentication provider, Supabase).
Reading activity: pages you log, books you add, assessment and training results (speed, comprehension, scores), reading interests and goals you choose during onboarding.
Content you provide: text you paste into the flash reader or upload for training. Uploaded documents are converted to text on your device; the original file is discarded and never uploaded to our servers or anyone else's.
2. What we use it for
Running the product: your history, streaks, programs, and results.
AI features (for example generated quiz questions) send the relevant text to Google's Gemini, our AI provider, for processing. The app asks for your permission before the first use of these features, and this content is not used to train AI models under our agreements.
Recall training uses speech recognition that runs entirely on your device. Your voice is processed on your phone and is never transmitted to us, to Google, or to anyone else.
Transactional email (sign-in links, account notices) and, only if you opt in, reminder emails, with one-click unsubscribe.
3. What we don't do
We don't sell your personal data. We don't show third-party advertising. We don't claim ownership of text you paste or upload.
4. Where data lives
Data is stored with Supabase (Postgres, auth, file storage). Subscriptions purchased in the iOS app are processed by Apple through the App Store; payment details never touch our servers.
Every service provider that handles your data on our behalf (Supabase for storage and authentication, Google for AI processing, Apple for payments) does so under agreements that require protection of your data equal to the commitments in this policy.
5. Your rights and data retention
We keep your data for as long as your account is active. You can access and correct your profile in Settings, export your data on request, and delete your account (Settings, then Delete account), which permanently removes your personal data from our servers. EU/UK users: the legal basis for processing is contract performance (running the service) and consent (optional emails); contact us to exercise GDPR rights, including withdrawing consent at any time.
6. Cookies
We use only the cookies required to keep you signed in. No advertising or cross-site tracking cookies.
7. Changes and contact
Material changes will be announced in the app. Privacy questions: koster@readmaxxing.org