Privacy

Reedr is operated by Melusi Ndoro in the United Kingdom, and is the data controller for everything described here. For anything on this page, including a request to see or delete your data, write to hello@reedr.co.

Your account. Your email address, your password (stored only as a cryptographic hash, never as text), and whatever you choose to add: a display name, a username, a short bio, a profile picture.

Your reading. The books on your shelves and how you organise them. Ratings and sub-ratings, tags, spice levels, notes, saved quotes, reading progress and page counts, dates you started and finished, why you abandoned something, the format you read it in, who you lent it to, your reading goal and your streak.

Your connections. Who you follow, who follows you, and the activity that appears in their feed.

Your subscription. Which plan you are on, when it renews, and a reference that identifies you to Stripe. Card numbers never reach Reedr; Stripe handles payment details and Reedr never sees them.

Technical bits. A cookie that keeps you signed in and one that remembers you have finished setting up. Records of which screens and features get used. If you turn on notifications in the iPhone app, the device token Apple needs to deliver them.

Messages you send us. If you use the contact form on the help page, your email address and message are kept so we can reply, and for up to two years after in case you write again.

Reedr only sets cookies it needs to work. There are no advertising or tracking cookies.

• Sign-in cookies (Supabase): keep you signed in until you sign out.
• reedr-onboarded: remembers that you finished setting up, so you are not sent back to it.
• reedr-language: remembers the language you chose for Reedr.
• reedr-getting-started: carries your choice about getting-started emails from the signup screen to your new account, then is deleted. It lasts a day at most.
• reedr-book-preview: only if you try a book mix without an account, as described below.

When you start the personal preview, an essential cookie remembers this browser for up to 400 days. We keep your two book choices and saved recommendation so refreshing can return the same result. Browser storage also remembers that the preview was used and whether the trial invitation was shown.

To limit repeat use, we keep a keyed, non-readable version of the connecting network address. We do not store the raw address in the preview records. This identifier is used for a rolling 24-hour limit and is cleared during routine preview or weekly-example processing after seven days. Guest results are cleared during that processing after 400 days.

Your selected books, qualities and public catalogue descriptions go to TypeSafe to assess the match. No account, email, private notes or reading history is needed for this preview. Anonymous browser recognition is imperfect: changing browsers or clearing storage can lose access to the saved result.

Every shelf starts private, including the one created when you sign up. Reedr gives your account a neutral address such as reedr.co/reader-x7k2mq so nothing about you, not even part of your email address, appears in a link you did not choose. You can pick your own username in Settings, and you need to before publishing a shelf or letting search engines list your page.

Your profile page, whether or not any shelf is public, shows only what you put there: your username, display name, photo and bio, your reading goal, and your streak if you allow it. A shelf you mark as public can be seen by anyone with the link. Even then your notes stay yours: private notes are never shown on a public shelf, and neither is your email address, your settings or your billing details.

Search engines are told not to list your profile unless you turn on “Show my profile in search engines” in Settings. Until then the page is reachable only by its link.

Nothing about your reading is sold, and nothing is handed to advertisers or data brokers. Reedr does no cross-app or cross-site tracking, carries no advertising code, and does not use Apple’s advertising identifier.

• To run your account, which is the contract between us. Without your books there is no shelf.
• Legitimate interests: keeping the service working, keeping it secure, and understanding in aggregate which parts of it people actually use.
• Getting-started emails. When you sign up, Reedr sends a welcome email about your new account. Unless you untick the box on the signup screen, it also sends a few getting-started emails in your first month, and one check-in if you have not opened Reedr for 30 days. These rely on legitimate interests in helping new readers use what they signed up for. Every one has an unsubscribe link, and they also stop from Settings.
• Your consent, for the things you switch on: the weekly digest, streak reminders, product news, push notifications. Each one can be switched off again in Settings, and every email has an unsubscribe link.

Reedr is a small operation built on other people’s infrastructure. Each of these sees only what it needs to do its job:

• Supabase: the database that holds your account and your shelves, the sign-in system, and storage for pictures you upload.
• Vercel: hosting, plus aggregate traffic and performance measurement.
• Stripe: subscription payments.
• Reedr itself: which pages are opened and, when you sign up, which page or link brought you here. This stays in Reedr’s own database and is used to see where readers get stuck, never to advertise to you.
• PostHog: which features get used, tied to your Reedr account id so the numbers are not double-counted.
• Resend: delivering the emails you have asked for.
• Google Books and Open Library: book titles, authors and cover images. They receive what you searched for. They do not receive who you are.
• TypeSafe (Jev): reading matches and two-book mixes. It receives your current request and public catalogue facts. When you choose “Use my reading memory”, it also receives a summary of ratings, detailed ratings, genres and reading outcomes. A fresh-start search includes the selected book and its structured stopping reason. It does not receive your name, email, private notes, quotes or uploaded book text.
• Google Gemini: the recommendation features. It receives titles and authors from your shelf in order to suggest something. It does not receive your name, your email or your notes.
• Google Gemini, for shelf photos: when you choose to photograph a shelf, the photo itself is sent to Gemini so it can read the spines. Your device shrinks the photo first. Reedr passes it straight through, does not save the photo, and keeps only the titles and authors you approve. Gemini does not receive your name, your email or your account id. A count of your scans is kept so the monthly AI allowance can be applied. If the photo shows more than books, for example people or a room, that is sent too, so frame the shelf on its own.
• Apple: delivering push notifications to your device, if you have turned them on.

Some of these companies are based outside the United Kingdom, so your data is processed abroad. Transfers rely on the safeguards in each provider’s own data processing terms, including standard contractual clauses where they apply.

For as long as you have an account. Delete your account and your shelves, books, notes, quotes, ratings and profile go with it, immediately and permanently. Unsubscribe links in emails stop working after 90 days by design, so an old email cannot be used to change your settings later.

Under UK data protection law you can:

• Get a copy of everything. Settings has an export that hands you your whole account as a file, without having to ask anyone.
• Correct anything wrong. Most of it is editable in the app; write to us for the rest.
• Delete it all. Settings → Delete account. It is immediate and it cannot be undone.
• Object to how it is used, or withdraw a consent you gave.
• Complain to the regulator. In the UK that is the Information Commissioner’s Office, at ico.org.uk. Please give us a chance first.

Reedr is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and it will be removed.

If what Reedr collects changes, this page changes with it and the date at the top moves. Anything significant will be told to you in the app or by email rather than left here to be discovered.

Questions: hello@reedr.co. See also the terms of use.