At Must Read ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.
1. Information We Collect
Information You Provide
When you use Must Read, you may provide us with:
- Account Information: When you sign in with Apple, we receive your Apple ID, email address (which may be hidden), and name.
- Reading Data: Books you add, reading progress, ratings, reviews, quotes, and highlights.
- Preferences: Your reading goals, notification settings, and app preferences.
Information Collected Automatically
We automatically collect certain information when you use the app:
- Usage Analytics: We use TelemetryDeck, a privacy-first analytics service, to understand how the app is used. This data is anonymized and does not include personal identifiers.
- Crash Reports: If the app crashes, we collect diagnostic information to help us fix bugs. This may include device type, iOS version, and crash logs.
- Device Information: Device type, operating system version, and app version.
Information We Do NOT Collect
- We do not track your location
- We do not access your contacts, photos, or other personal data
- We do not sell your data to third parties
- We do not use advertising trackers
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Must Read service
- Sync your reading data across devices
- Send you notifications about your reading goals and streaks (if enabled)
- Improve the app based on anonymized usage patterns
- Respond to your support requests
- Process subscription payments through Apple
3. Data Storage and Security
Your data is stored securely using industry-standard practices:
- Local Storage: Your reading data is stored locally on your device first, ensuring you always have access even offline.
- Cloud Sync: Data is synced to our servers (powered by Supabase) using encrypted connections (TLS 1.3).
- Authentication: We use Sign in with Apple for secure, privacy-preserving authentication.
- Encryption: All data transmitted between your device and our servers is encrypted.
4. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only in these limited circumstances:
- Service Providers: We use trusted third-party services (Supabase for backend, TelemetryDeck for analytics) who are contractually bound to protect your data.
- Legal Requirements: If required by law, court order, or government request.
- Safety: To protect the rights, property, or safety of Must Read, our users, or others.
5. Your Rights and Choices
You have control over your data:
- Access: You can view all your data within the app.
- Export: Premium users can export their data as CSV or PDF.
- Delete: You can delete your account and all associated data from within the app settings.
- Notifications: You can enable or disable notifications at any time.
- Analytics Opt-Out: You can opt out of analytics in the app settings.
6. Children's Privacy
Must Read is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
7. Third-Party Services
Must Read integrates with the following third-party services:
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated through the app.
10. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
11. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion of your data. To exercise these rights, please contact us at the email above.
12. European Privacy Rights
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
To exercise these rights, please contact us at [email protected].