Reedr
Privacy
Reedr holds a record of your reading life, which is a personal thing to hand over. This page says exactly what is kept, why, who else touches it, and how to take it back.
Last updated 30 July 2026
Who is responsible
Reedr is operated by Melusi Ndoro in the United Kingdom, and is the data controller for everything described here. For anything on this page, including a request to see or delete your data, write to hello@reedr.co.
What Reedr holds
Your account. Your email address, your password (stored only as a cryptographic hash, never as text), and whatever you choose to add: a display name, a username, a short bio, a profile picture.
Your reading. The books on your shelves and how you organise them. Ratings and sub-ratings, tags, spice levels, notes, saved quotes, reading progress and page counts, dates you started and finished, why you abandoned something, the format you read it in, who you lent it to, your reading goal and your streak.
Your connections. Who you follow, who follows you, and the activity that appears in their feed.
Your subscription. Which plan you are on, when it renews, and a reference that identifies you to Stripe. Card numbers never reach Reedr; Stripe handles payment details and Reedr never sees them.
Technical bits. A cookie that keeps you signed in and one that remembers you have finished setting up. Records of which screens and features get used. If you turn on notifications in the iPhone app, the device token Apple needs to deliver them.
What is private and what is not
Your shelf is private until you decide otherwise. Claiming a username creates a public profile page, and a shelf you mark as public can be seen by anyone with the link. Even then your notes stay yours: private notes are never shown on a public shelf, and neither is your email address.
Nothing about your reading is sold, and nothing is handed to advertisers or data brokers. Reedr does no cross-app or cross-site tracking, carries no advertising code, and does not use Apple’s advertising identifier.
Why Reedr is allowed to hold it
- To run your account, which is the contract between us. Without your books there is no shelf.
- Legitimate interests: keeping the service working, keeping it secure, and understanding in aggregate which parts of it people actually use.
- Your consent, for the things you switch on: the weekly digest, streak reminders, product news, push notifications. Each one can be switched off again in Settings, and every email has an unsubscribe link.
Who else touches your data
Reedr is a small operation built on other people’s infrastructure. Each of these sees only what it needs to do its job:
- Supabase: the database that holds your account and your shelves, the sign-in system, and storage for pictures you upload.
- Vercel: hosting, plus aggregate traffic and performance measurement.
- Stripe: subscription payments.
- Reedr itself: which pages are opened and, when you sign up, which page or link brought you here. This stays in Reedr’s own database and is used to see where readers get stuck, never to advertise to you.
- PostHog: which features get used, tied to your Reedr account id so the numbers are not double-counted.
- Resend: delivering the emails you have asked for.
- Google Books and Open Library: book titles, authors and cover images. They receive what you searched for. They do not receive who you are.
- Google Gemini: the recommendation features. It receives titles and authors from your shelf in order to suggest something. It does not receive your name, your email or your notes.
- Apple: delivering push notifications to your device, if you have turned them on.
Some of these companies are based outside the United Kingdom, so your data is processed abroad. Transfers rely on the safeguards in each provider’s own data processing terms, including standard contractual clauses where they apply.
How long it is kept
For as long as you have an account. Delete your account and your shelves, books, notes, quotes, ratings and profile go with it, immediately and permanently. Unsubscribe links in emails stop working after 90 days by design, so an old email cannot be used to change your settings later.
What you can ask for
Under UK data protection law you can:
- Get a copy of everything. Settings has an export that hands you your whole account as a file, without having to ask anyone.
- Correct anything wrong. Most of it is editable in the app; write to us for the rest.
- Delete it all. Settings → Delete account. It is immediate and it cannot be undone.
- Object to how it is used, or withdraw a consent you gave.
- Complain to the regulator.In the UK that is the Information Commissioner’s Office, at ico.org.uk. Please give us a chance first.
Children
Reedr is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and it will be removed.
Changes to this page
If what Reedr collects changes, this page changes with it and the date at the top moves. Anything significant will be told to you in the app or by email rather than left here to be discovered.
Questions: hello@reedr.co. See also the terms of use.