Privacy Policy

Readual is published by Haloban Capitalis, EURL with share capital of €10,000, 58 rue de Monceau, 75008 Paris, France. RCS Paris 988 949 491, VAT FR83988949491. Publication director: Victor Nihoul. Contact: contact@readual.app.

Haloban Capitalis is the data controller. For any privacy question or request, write to contact@readual.app.

Readual is not intended for children under 13 (or the age of digital consent in your country). Onboarding asks for your age range.

You sign in with Apple or Google through Rork Auth. We receive a unique account ID, your email (possibly Apple's private relay address), and your name and photo if the provider shares them. Your first name is used to greet you.

Readual never creates or stores a password. Session tokens are kept in the iOS Keychain.

First name, age range, native language, language you learn, reading frequency, estimated vocabulary (level test result), and your preferences: new-word pace, read-aloud, sound effects, reminders, text size, "new word" banner.

• Books in your library: title, author, cover, text split into pages, current page, bookmarks (with a short excerpt).
• Words you met: word, meaning, context sentence, memory level, reviews.
• Daily stats: pages, minutes, reading days, streak.
• Books unlocked with your subscription and when.
• An internal activity log (last 3,000 events at most, e.g. pace changes, paywall views, purchases, unlocks). It runs the app and helps diagnose issues. It is synced with your account and not sent to any analytics tool.

EPUB files are read and split on your iPhone. The pages are then saved in your account's private space so you can find them on another phone. An imported book is never shared with other readers. For an import by link, the app downloads the file directly from the address you give.

Your account data (profile, books, words, stats, activity log, unlocks, book pages and covers) is stored on the Readual server, hosted on Cloudflare via the Rork platform. Each account has its own isolated storage, reachable only with your sign-in token.

Your search terms and language are sent to the Readual server, which queries DILICOM (publishers' catalogue), Project Gutenberg (public-domain classics), and Open Library and Apple iTunes Search (covers and summaries). These calls carry no personal data. When you add a book, our server fetches the file and the app downloads it from our server.

We keep anonymous popularity counters (number of additions per book, with title, author, language and dates). They are not linked to any account.

We use Firebase Analytics (Google) with automatic collection only: app instance ID, sessions, first opens, updates, device model, iOS version, language, approximate country and in-app purchase events. Readual does not use the advertising identifier (IDFA) and does not track you across other apps or websites.

Local reminders (reading reminders, and a reminder the day before your free trial ends) are scheduled on your iPhone, only if you allow notifications.

Push notifications go through OneSignal: your device push token and OneSignal ID, linked to your Readual account ID, with tags for interface language, learned language, level and plan (free/pro). Turn them off in the app's reminder settings or in iOS Settings.

• No selling of data, no advertising, no ad trackers, no cross-app or cross-site tracking.
• No public content: nothing you read or learn is shown to other users, except the anonymous popularity counters.

• Contract: account, sync, translation, subscription.
• Legitimate interest: audience statistics, popularity counters.
• Consent: push notifications.

• Account data: until you delete your account (immediate erasure).
• Data on your phone: until you sign out (the phone is cleared) or uninstall.
• Popularity counters: kept, as they are anonymous.
• Service providers (RevenueCat, Firebase, OneSignal, OpenAI, Google, Vercel): according to their own policies; Firebase Analytics keeps data for up to 14 months.

• Rork: sign-in, AI proxy, backend hosting.
• Cloudflare: server and storage.
• Apple: Sign in with Apple, in-app purchases, notifications.
• Google: Sign in with Google, Firebase Analytics, Gemini models.
• OpenAI: main translation model.
• Vercel: AI gateway.
• RevenueCat: subscriptions and price tests.
• OneSignal: push notifications.
• DILICOM: publishers' catalogue and book files.
• Project Gutenberg, Open Library (Internet Archive), Apple iTunes Search: classics, covers and summaries (no personal data).

OpenAI, Google, Vercel, RevenueCat, OneSignal and Cloudflare are US companies. Transfers rely on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

Under the GDPR you can access, correct, delete, and port your data, and object to its processing. You can delete everything yourself at any time: Settings → Delete account erases all data stored under your account immediately, then clears your phone. Deleting your account does not cancel an Apple subscription.

For any other request, email contact@readual.app. You can also complain to the French data protection authority, the CNIL.

We update the date at the top of this page when the policy changes, and tell you in the app for important changes.