Readery — Privacy Policy

Readery helps you learn a language by reading texts you choose. This policy explains what personal data we collect, why, how it is shared, how long we keep it, and the rights you have. An account is required to use Readery so that we can save your learning progress across sessions and provide the service described here.

Who we are

The data controller for Readery is Yasin Taib (“we”, “us”). You can reach us at hello@theproductpeople.se for any privacy question or request.

What we collect

• Account. If you use Sign in with Apple, we store the anonymous Apple user identifier and, if you choose to share it, your email (which may be an Apple private-relay address). If you sign up with email, we store your email and a securely hashed password. We never see your Apple password.
• Onboarding preferences. The language you are learning, your self-rated level, the age you enter, and the kinds of text you like to read — used to tailor the experience.
• Learning data. The texts and links you add, the words you learn, and your progress, streak and score.
• Content you submit for translation. Words and sentences from the texts you add (see “How your text is processed”).
• Usage analytics. Product-usage events (for example: screens opened, onboarding steps completed, features used) tied to a random per-install identifier, and basic anonymous visit analytics on our website readery.se (for example: page views and which links are clicked). Our website analytics are cookieless and not tied to your identity. Analytics are used only to understand and improve the service. They are not sold, not shared with data brokers, and not used for personalised advertising or to track you across other apps and websites.
• Notifications. If you turn on reading reminders, we store a device push token (issued by Apple) linked to your account so we can send you goal and streak reminders. You can turn these off any time in iOS Settings, and we delete the token when you delete your account.
• Advertising measurement. To see how well our ads perform, the app uses Apple’s SKAdNetwork, which reports app installs and conversions to ad networks in an aggregated, privacy-preserving way that does not identify you and does not use the advertising identifier (so no App Tracking Transparency prompt is required). We may also send aggregated, non-identifying install and subscription measurements to advertising platforms such as Meta. This measurement carries no name, email, device identifier or similar, so it is not used to track you across apps or websites.
• Technical data. Basic information needed to operate the service, such as your app version and IP address seen by our servers (used for security, rate-limiting and diagnostics).

We do not request access to your contacts, location, camera, microphone (beyond on-device text-to-speech), photos, or advertising identifier.

How we use your data

• Provide the core service — translations, reading, saving your words and progress.
• Create and secure your account, and send account emails (e.g. password-reset codes).
• Understand product usage and improve the app.
• Send reading reminders you have opted into (goal and streak notifications).
• Measure how our ads perform, using only aggregated, non-identifying signals.
• Protect the service against abuse (e.g. rate-limiting sign-in attempts).

How your text is processed

To produce translations, grammar notes and examples, the words and sentences from the texts you add are sent to OpenAI (our translation provider) and the results are cached on our servers so we do not have to re-translate the same words. Please do not paste sensitive personal information into texts you add.

Legal bases (EU/EEA users)

Where the GDPR applies, we process your data on these bases: performance of a contract (providing the app you asked for — account, translations, progress); consent (which you may withdraw at any time — for example the Terms/Privacy acceptance at sign-up); and our legitimate interests (keeping the service secure and improving it through usage analytics).

Who we share it with (service providers)

• OpenAI — translating words and sentences you submit.
• Fly.io — application hosting and database (EU region).
• Apple — Sign in with Apple, delivering push notifications, processing your subscription purchase and billing through the App Store, and privacy-preserving install measurement via SKAdNetwork. We do not receive or store your payment-card details.
• PostHog — product-usage analytics (EU-hosted).
• Meta — aggregated, non-identifying measurement of ad installs and subscriptions, only if we advertise on their platform. No personal identifiers are shared.
• Resend — delivering account emails such as password-reset codes.

These providers process data only on our instructions. We do not sell your personal data.

International transfers

Our hosting and analytics are EU-based. Some providers (e.g. OpenAI, Apple) may process data outside the EU/EEA; where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Retention

We keep your account and learning data for as long as your account exists. If you delete your account, this data is removed from our systems. Cached translations (which are not personal to you) and routine server logs are kept only as long as needed to run and secure the service.

Your rights

You can delete your account and data at any time in the app: Profile → Delete account. This erases your account and learning data from our servers and, for Apple accounts, revokes the Sign in with Apple token. You may also contact us to exercise your rights to access, correct, export, restrict or object to processing, or to withdraw consent. EU/EEA users have the right to lodge a complaint with a supervisory authority.

Children

Readery is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

Security

Data is transmitted over encrypted connections (HTTPS). Passwords are stored only as salted hashes. Access to production systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes

We may update this policy; material changes will be reflected here with a new “last updated” date. Continued use after an update means you accept the revised policy.

Contact

Questions or requests: hello@theproductpeople.se.

Last updated 2026-08-24.