Privacy Policy

Last updated: February 3, 2026

The Read ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains in detail what information we collect, how we store and use it, and your rights regarding your data when you use our mobile application.

1. Information We Collect

We collect different types of information to provide and improve our service. Here is a complete breakdown:

1.1 Account Information

• Email Address: Required for account creation, password recovery, and important notifications
• Display Name: The name you choose to show to game partners
• Profile Photo: Optional profile image you upload
• Age Confirmation: Verification that you are 18 years or older (we do not store your exact age)
• Authentication Provider: If you sign in with Apple or Google, we receive your name and email from that provider

1.2 Game Response Data

• Question Responses: Your answers to all questions during game sessions (the specific answer choice selected)
• Response Timing: How long you took to answer each question (in milliseconds)
• Answer Changes: If you changed your answer before submitting, we track the number of changes and previous selections
• Timeouts: Whether you ran out of time on any questions
• Session Metadata: Game type (partner read, self read, etc.), quick vs. full read, completion status

1.3 Device and Technical Data

• Device Identifier: A unique ID assigned to your device for session management
• Operating System: iOS, Android, or web platform
• App Version: The version of The Read you are using
• IP Address: Collected for security, fraud prevention, and legal consent records
• Push Notification Token: If you enable notifications, we store your device's push token

1.4 Usage and Analytics Data

• Screen Views: Which screens you visit in the app
• Feature Usage: Which features you use and how often
• Session Duration: How long you spend in the app
• Funnel Events: Sign-up completion, game starts, game completions, results views
• Error Events: App crashes and errors for debugging purposes

1.5 Payment Information

• Transaction Records: Purchase history, subscription status, payment dates
• Store Customer ID: A reference ID linking to your payment profile
• Note: We do NOT store your credit card numbers, CVV, or full payment details. All purchases are processed securely through the Apple App Store and Google Play (via RevenueCat).

2. How We Store Your Data

2.1 Database Storage

Your data is stored in a PostgreSQL database hosted on secure cloud infrastructure. We use:

• Encryption at Rest: All database storage is encrypted
• Encryption in Transit: All data transmitted between your device and our servers uses TLS/HTTPS
• Access Controls: Only authorized systems and personnel can access the database
• Regular Backups: Data is backed up regularly for disaster recovery

2.2 Password Security

If you create an account with email/password, your password is hashed using scrypt (a secure one-way hashing algorithm). We never store or have access to your plain-text password.

2.3 Session Security

Authentication sessions use secure, HTTP-only cookies with 30-day expiration. Sessions are stored server-side and can be invalidated at any time.

3. Do We Sell or Share Your Data?

We only share data in these limited circumstances:

3.1 With Your Game Partner

When you play a game with someone, limited information is shared between you:

• Your display name and profile photo
• Your game responses (so results can be calculated)
• The calculated results, flags, and compatibility insights

Important: You both must mutually agree to play together. Your partner only sees the results and insights, not your raw timing data or internal scores.

3.2 With Service Providers

We use trusted third-party services to operate The Read. These providers only receive the minimum data necessary to perform their function:

Provider	Purpose	Data Shared
Apple App Store / Google Play (via RevenueCat)	Payment processing	Email, payment info (handled directly by the app stores)
PostHog	Product analytics	Device ID, usage events, screen views (anonymized)
Sentry	Error tracking & monitoring	Device info, error logs, stack traces
SendGrid	Transactional emails	Email address, notification content
Expo Push	Push notifications	Push token, notification content
OpenAI	Content moderation	User-generated text (for safety screening only)

3.3 For Legal Reasons

We may disclose information if required by law, court order, or government request, or to protect the rights, safety, or property of The Read or others.

4. Analytics and Tracking

4.1 PostHog Analytics

We use PostHog for product analytics to understand how users interact with the app and improve the experience. PostHog collects:

• Anonymous usage events (button clicks, screen views, feature usage)
• Session information (duration, device type, app version)
• Funnel data (sign-up flows, game completion rates)

PostHog data is used solely to improve The Read and is not shared with advertisers.

4.2 Sentry Error Tracking

We use Sentry to monitor app stability and fix bugs. Sentry collects error logs, crash reports, and technical diagnostic information. This data helps us identify and resolve issues quickly.

4.3 No Advertising Trackers

We do not use Google Analytics, Facebook Pixel, or any advertising tracking tools. We do not serve ads or participate in ad networks.

5. Data Retention

We retain your data for different periods depending on the type:

Data Type	Retention Period
Account Information	Until you delete your account
Game Responses & Results	2 years from game completion, or until account deletion
Payment Records	7 years (required for tax/legal compliance)
Analytics Data	2 years (anonymized after 90 days)
Error Logs	90 days
Legal Consent Records	7 years (for compliance documentation)
Audit Logs	3 years (security and compliance)

After the retention period, data is permanently deleted or anonymized so it can no longer be linked to you.

6. How to Delete Your Data

You have the right to delete your data at any time. Here's how:

6.1 Delete Your Account (In-App)

1. Open The Read app
2. Go to Settings (gear icon)
3. Scroll to "Delete Account"
4. Confirm deletion

This permanently deletes your account, profile, and all associated game data.

6.2 Request Data Deletion (Email)

You can also email us at admin@thereadgame.com with the subject "Data Deletion Request" and include:

• The email address associated with your account
• A clear statement that you want your data deleted

We will process deletion requests within 30 days and confirm when complete.

6.3 Request Data Export

Before deleting, you can request a copy of all your data. Go to Settings → "Request My Data" or email us at admin@thereadgame.com. We will provide a downloadable JSON file containing:

• Your account information
• All game sessions and responses
• Purchase history

6.4 What Happens After Deletion

• Your account and profile are immediately inaccessible
• Your data is queued for permanent deletion
• Backups containing your data are purged within 30 days
• Some anonymized, aggregated data may be retained for analytics (not linkable to you)
• Legal records (consent, payments) may be retained as required by law

7. Your Privacy Rights

Depending on your location, you may have additional rights:

7.1 For All Users

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Opt-Out: Disable push notifications and marketing emails

7.2 For California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

7.3 For EU/UK Residents (GDPR)

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You may also lodge a complaint with your local data protection authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your information:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for data at rest
• Secure password hashing (scrypt)
• Regular security audits and vulnerability testing
• Access controls and authentication for internal systems
• Rate limiting to prevent abuse

9. Children's Privacy

The Read is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. If you believe we have collected information from a minor, please contact us immediately at admin@thereadgame.com and we will delete it.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place when transferring data internationally, including standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last updated" date at the top
• Sending an in-app notification for significant changes
• Emailing you if the changes affect your rights

Continued use of the app after changes constitutes acceptance of the updated policy.