ReadGoodr Privacy Policy

Version 1.3 Effective and last updated: 13 October 2026

ReadGoodr is provided by Stockholm MediaMakers AB, organisation number 559021-7195, Wallingatan 11, 111 60 Stockholm, Sweden ("ReadGoodr", "we", "us"). We are responsible for the personal data described in this policy. Contact us at [email protected].

Website waitlist

Website addendum: 28 September 2026. Joining the waitlist is optional. By entering your email and submitting the waitlist form, you ask us to email you when ReadGoodr launches and consent to our use of your email for that purpose. We store your email address and the time of your request. We do not use the list for newsletters, other marketing or advertising profiles, and joining does not create an account or subscription.

Cloudflare provides our website hosting, security and waitlist storage. The waitlist database is configured for storage in the European Union. This does not mean all website traffic, security processing or provider support takes place only in the EU; the international-transfer safeguards in section 6 apply where relevant. To prevent abuse, our form also uses a short-lived, coded network identifier and request counter, based on our legitimate interest in keeping the service secure.

We remove your address from the active waitlist within 90 days of signing up, or earlier if you withdraw your request. If ReadGoodr has not launched during that period, your entry expires. Security counters expire separately and are normally removed within three hours. Restricted recovery copies may retain deleted records for up to 30 additional days under Cloudflare D1's backup cycle; they are not used for launch messages.

You can withdraw consent and request removal at any time by emailing [email protected] from the address you registered. Withdrawal does not affect earlier lawful processing. You can use our website without joining the waitlist. The controller, contact details and rights in this policy also apply to the waitlist.

1. What this policy covers

This policy covers the ReadGoodr app, our website and support. ReadGoodr does not require a ReadGoodr account in version 1.

Your library, scans, reading position, settings and stored audio are normally kept on your iPhone. We do not receive them merely because they are stored in the app. If you delete an item or uninstall the app without a backup you control, that local data may be lost.

2. Data we process

Depending on what you choose to use, we process:

Content you select for a cloud feature, such as text, a page image or a web address needed to create speech, scan text, import an article, clean text or explain a word. ReadGoodr does not upload your whole library for these actions.
Service and security data, such as an installation identifier, app and device information, request time, entitlement, usage allowance, fraud-prevention signals and limited network information.
Purchase data, such as product, entitlement and transaction status received from Apple. We do not receive your full payment-card details.
Support data you send to us, such as your email address, message and any attachment you choose to include.
Connected-storage data, such as name, email or other account/contact information, approximate location and technical service information that may be processed when you choose to connect and use a storage service. Connecting storage does not create a ReadGoodr account.
Optional crash diagnostics and usage measurement, if you choose to allow them. These are two separate purposes, both off until you choose. Crash diagnostics uses Sentry for crash and error information, including stack traces, error types and codes, and app, iOS and device-model versions. Usage measurement uses PostHog for named feature events and limited technical and usage information: app and operating-system versions, device type, whether the app is in the foreground or background, distribution and simulator indicators, SDK version, app language, screens and actions, import type and file format, page-count ranges, subscription and purchase choices, voice category and speech engine, failure categories, playback start and voice-switch times, listening duration and time served by each speech engine or cache, and feature-flag variants. These reports do not include your books or document text, scans, spoken text, audio, web addresses, name or email. Each provider's SDK stores an installation identifier. PostHog reports also carry an installation identifier and may include a session identifier. The provider receives the network address used to send a report.
Website data, such as basic request, browser and security information generated when you visit our site.

An optional nickname and age range are stored locally. We do not ask for your exact date of birth, gender, diagnosis, school or legal name.

3. Why we use data and our legal bases

We use personal data on the following grounds, where applicable:

Contract or steps you request: to provide a selected app, cloud, connected-storage or support feature; verify a purchase; and maintain an entitlement or unused purchased value.
Legitimate interests: to secure ReadGoodr, prevent fraud and abuse, diagnose faults, maintain reliability and establish or defend legal claims. These interests are limited by data minimisation, short retention where possible and your rights.
Consent: for optional analytics and crash diagnostics and, where applicable, a cloud action you choose. If selected content contains sensitive personal data, we ask for separate explicit consent before that cloud processing. You can withdraw consent for future processing.
Legal obligations: to meet applicable accounting, tax, consumer, privacy, security and regulatory duties.

Where data comes from and what happens if you do not provide it

Most data comes from you or your iPhone when you use a feature. Purchase and entitlement status comes from Apple. Connected-storage data comes from the storage service you choose, and website data comes from your browser and the systems that protect the site. We do not buy personal data from data brokers.

Data needed for a requested cloud feature, purchase verification, security check or support request must be provided for us to perform that action. If you do not allow a cloud action, that action will not run and a local option remains available where stated in the app. Optional analytics and crash diagnostics can be declined without losing the app's main features. ReadGoodr does not require a ReadGoodr account in version 1.

4. Local and cloud processing

Apple Voice works on your iPhone without sending the text to ReadGoodr's cloud providers.

When you choose a cloud feature, only the data needed for that action is sent to contracted providers in categories such as cloud hosting, speech generation, artificial-intelligence text processing and optical character recognition. The app explains this before the first such sharing and asks for permission. If you choose not to allow it, no data is sent for that cloud action and a local option is used where available.

We do not sell personal data or use it for third-party behavioural advertising.

5. Who receives data

We disclose personal data only as needed to:

contracted cloud, speech, AI and scan-processing providers that perform the selected feature for us;
Sentry for optional crash diagnostics and PostHog for optional usage measurement, only for the purpose or purposes you enable;
support, email, hosting and security providers;
Apple for app distribution, subscriptions, purchases, refunds and platform security;
a storage service you independently choose to connect; or
authorities, advisers or a successor organisation where required by law or a legitimate corporate transaction.

Service providers may process data only for the agreed service and must provide the same or equivalent protection of your data as described in this policy and required by applicable law and Apple's App Review Guidelines. Any third party with whom we share user data must provide the same or equivalent protection of your data.

6. International transfers

Some providers may process data outside your country, including outside the EEA, United Kingdom, Canada, Australia or New Zealand. Where required, we use an adequacy decision, standard contractual clauses, the UK transfer addendum or another lawful safeguard. We assess whether the safeguard and any additional measures provide a level of protection essentially equivalent to that required by applicable law; if they do not, we do not make the transfer unless a specific legal exception applies. Contact us for information about the safeguard relevant to your data.

7. How long we keep data

We keep data only for the purpose described or as required by law:

Local app data remains until you delete it or uninstall the app.
Content selected for a cloud action is not kept as a ReadGoodr cloud library. Contracted providers may retain limited request data temporarily to operate and protect the service, normally no longer than 30 days.
Ordinary operational and security records are normally kept for 30 days. A content-free record required for audit, fraud prevention or a legal obligation may be kept for up to 400 days.
Optional analytics events have a one-year query window in PostHog EU Cloud. PostHog states that, on our current Free plan, this window is not an automatic deletion deadline: the plan has no configurable retention period, and retained data is deleted only if we delete the PostHog organisation. PostHog states that its backup retention window is two weeks. Optional crash records may be kept for up to 30 days. This describes scheduled retention, not the scope or outcome of an individual rights request.
Support information is kept while we handle the case and afterwards only while reasonably needed for follow-up, a dispute, security or a legal duty.
Purchase, entitlement and usage records are kept while needed to deliver an active entitlement or remaining purchased value and for the period reasonably needed to resolve refunds, prevent duplicate grants, keep required accounting records and handle disputes. When identifying details are no longer needed, we delete or de-identify them and may retain a non-readable reference needed to prevent the same purchase being granted twice.
Privacy-request records are kept while we review and complete the request and afterwards only while needed to document the response, protect the request process or meet a legal duty.

We may keep a record longer if law, a dispute or a security investigation requires it, and delete or de-identify it when that reason ends.

8. Your choices and rights

After the welcome screen, you can accept both crash diagnostics and usage measurement, decline both, or customize the two choices separately. Neither purpose is preselected. You can use the app's main features if you decline, and you can change or withdraw either choice independently in Settings. Saving a choice does not override the app's age-eligibility checks.

In ReadGoodr Settings you can withdraw cloud-processing permission, turn optional analytics and diagnostics off, and start a request to access, copy or delete relevant data. Withdrawing consent does not affect earlier lawful processing.

Depending on where you live, you may also have rights to correct data, restrict processing, receive portable data and complain to a privacy regulator. Requests are normally free. We normally respond within one month, or within the period required by applicable law. We may ask for limited information needed to verify that the request belongs to the correct installation or purchase.

Contact [email protected]. You may also complain to the Swedish Authority for Privacy Protection (IMY) or your local regulator.

UK representative. If you are in the United Kingdom, you can also contact our representative under the UK GDPR, Data Protection Representative (UK) Limited, trading as DataRep UK, about our processing of your personal data or to exercise your UK GDPR rights: by email to [email protected] with "ReadGoodr" in the subject line, through www.datarep.com/data-request, or by post to DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom. Address letters to "DataRep", not to ReadGoodr, or they may not be delivered. You can always contact us directly at [email protected].

9. Your right to object

Where we rely on legitimate interests, you may object at any time for reasons relating to your particular situation. We will stop the affected processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. We do not use app data for direct marketing. If you separately join our website waitlist, we use your email only for the launch notification you requested, as described in the Website waitlist section above. You may withdraw that request at any time.

Contact [email protected] to object. You may also ask for information about our legitimate-interest assessment.

10. Age

ReadGoodr is not a children's app. The minimum age is 13 in the United States, United Kingdom and New Zealand, 14 in Canada, and 15 in Australia. If the storefront cannot be determined, the minimum is 15. Users below the applicable age are blocked before their content is sent for cloud processing. ReadGoodr version 1 does not offer a parental-consent flow.

11. Security

We use reasonable technical and organisational safeguards appropriate to the data and service. No internet service can guarantee absolute security. Protect your iPhone and contact [email protected] if you believe your data or purchase has been misused.

12. Changes and contact

We may update this policy when the service or law changes. We will show the effective date and give an in-app notice or a fresh choice when a material new purpose, data category or recipient requires one. Prior published versions are archived.

Stockholm MediaMakers AB Wallingatan 11 111 60 Stockholm, Sweden [email protected]