Privacy Policy
Last updated: 21 August 2026
The short version. We collect the account details you give us, the reading data the app needs to work, and what you choose to post in shared collections. We do not sell your personal information, we do not show advertising, and we do not include any analytics, tracking or advertising software in the app. You can delete your account and everything attached to it from inside the app at any time.
1. Who we are
SCREAD, LLC (“SCREAD”, “we”, “us”, “our”) provides the SCREAD Books mobile application and the website at screadbooks.screadlabs.com (together, the “Service”). We are the controller of the personal information described in this policy.
Questions, requests or complaints: hello@screadlabs.com.
2. Information we collect
2.1 Information you give us
- Account details. Your email address and a password. If you sign in with Apple or Google, we receive an authentication token and the email address associated with that account instead of a password. If you use Sign in with Apple and choose to hide your email, we receive only Apple’s private relay address.
- Profile. Your username, display name, and profile picture if you add one.
- How you heard about us. The optional answer you give during setup.
- Content you create. Notes, saved sentences, comments and reactions, collections you create, and the books you add to them.
- Beta access codes, where you redeem one.
- Correspondence, if you contact us for support.
2.2 Information created by using the Service
- Reading data. Your library, reading position within a book, reading progress and streaks, and the goals you set.
- Subscription status. Whether your account is on a trial or a paid plan, when a trial started and ends, your subscription state, and the identifiers Stripe uses for your customer and subscription records.
- Device notification token. If you turn on push notifications, the token Apple issues for your device, so we can send them.
- Technical information necessarily processed to deliver the Service, such as IP address and app version, in ordinary server logs kept by our hosting provider.
2.3 Device permissions
The app asks for these only at the moment you use the feature, and works without them:
- Camera — to scan a physical book.
- Photo library — to choose a profile picture or a book cover.
- Notifications — to send reading reminders and alerts about activity in collections you belong to.
Read Aloud uses the speech voices built into your device. The text being read is not sent to us or to anyone else for that purpose.
2.4 What we do not collect
- We do not collect payment card numbers. Payments are handled entirely by Stripe and card details never reach our systems.
- The app contains no analytics, advertising, attribution or crash-reporting software, and no third-party tracking technologies.
- We do not track you across apps or websites owned by other companies, and we do not ask for permission to do so.
- We do not knowingly collect precise location, contacts, health data, or biometric information.
3. Why we use it, and our legal bases
| Purpose | Information used | Legal basis (UK/EU) |
|---|---|---|
| Create and secure your account | Account details, profile | Performance of a contract |
| Save your place, library and notes across devices | Reading data, content you create | Performance of a contract |
| Run shared collections and show your posts to their members | Profile, comments, reactions, collection membership | Performance of a contract |
| Take payment and manage subscriptions | Subscription status, Stripe identifiers | Performance of a contract |
| Send push notifications you asked for | Device notification token | Consent (withdraw any time in Settings) |
| Keep the Service secure and prevent abuse | Technical information, account details | Legitimate interests |
| Understand where users come from | “How did you hear about us” answer | Consent (the question is optional) |
| Meet legal and tax obligations | Transaction records | Legal obligation |
4. What other people can see
Some of the Service is deliberately social. Please treat the following as visible to others:
- Your username, display name and profile picture are visible to members of any collection you join, and to anyone who can search for you by username.
- Comments and reactions you post in a collection are visible to that collection’s members, along with your profile.
- Books you add to a shared collection, and your reading activity within it, are visible to its members.
Notes and saved sentences you keep to yourself are private to your account, and your personal library is not shown to other users.
5. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share it only with the service providers that run the Service on our behalf, and only as far as each needs:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosting, database, sign-in, file storage | Account details, profile, reading data, content, technical logs |
| Stripe | Payments and subscriptions | Email, subscription and payment details you enter with Stripe |
| Apple | App distribution, Sign in with Apple, push delivery | Authentication tokens, device notification token |
| Sign in with Google, where you use it | Authentication tokens |
We may also disclose information where we are legally required to, to enforce our terms, or to protect the rights and safety of our users or the public. If SCREAD is involved in a merger, acquisition or sale of assets, personal information may transfer to the successor, and we will give notice before it becomes subject to a materially different policy.
Books in the catalog come from public sources including Project Gutenberg, Standard Ebooks, Open Library and Wikipedia. Requests for that content are made by the app; we do not send those sources your account information.
6. International transfers
We are based in the United States and our providers process information in the United States and elsewhere. Where information is transferred out of the UK or European Economic Area, that transfer is made under an approved safeguard — normally the European Commission’s Standard Contractual Clauses, together with the UK Addendum where relevant.
7. How long we keep it
- While your account is open, we keep your account, profile, reading data and content so the Service works.
- When you delete your account, the deletion runs immediately and is irreversible. There is no grace period and no soft delete. It removes your profile, account record, reading positions, notes, collections you own, your collection memberships and the books in them, your comments and reactions, your profile picture and your notification tokens, and it cancels any active subscription.
- Records we must keep — chiefly transaction records held for tax and accounting — are retained for as long as the law requires. Stripe retains payment records under its own obligations.
- Backups and server logs may hold residual copies for a short period before they age out on their normal cycle.
8. Security
Connections to the Service use TLS. Passwords are stored only as salted hashes by our authentication provider and are never visible to us. Access to your data is enforced at the database with row-level security, so one account cannot read another’s private data. Access by our staff is limited to what is needed to run and support the Service.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information and the law requires it, we will notify you and the relevant regulator within the applicable deadline.
9. Your rights
9.1 Everyone
You can view and change your profile in the app, turn notifications off in Settings, and delete your account and its data from Profile → Settings → Delete Account. For anything else, email us and we will respond within the time the law allows.
9.2 UK and European Economic Area
You have the right to access your personal data; to correct it; to erase it; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting processing already carried out. You may complain to your supervisory authority — in the UK, the Information Commissioner’s Office.
9.3 California
Under the CCPA as amended by the CPRA you may request to know the categories and specific pieces of personal information we have collected, their sources, the purpose, and the categories of third parties involved; to delete it; to correct it; and to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, including of anyone under 16. We will not discriminate against you for exercising these rights. In the twelve months before the date above, we collected the categories of information described in section 2 for the purposes in section 3, and disclosed them for business purposes to the providers in section 5.
9.4 Other US states
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana — have comparable rights of access, correction, deletion, portability and opt-out, and may appeal a refused request by replying to our decision. We do not use personal information for targeted advertising, sale, or profiling that produces legal or similarly significant effects.
9.5 Verification
So that we do not disclose your data to someone else, we will ask you to make requests from the email address on the account, and may ask for more information to confirm your identity. An authorised agent must provide proof of authority.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we will delete it. Users between 13 and the age of digital consent in their country should use the Service only with the involvement of a parent or guardian.
11. Do Not Track
The app does not track users across other companies’ apps or websites, so there is nothing for a Do Not Track or Global Privacy Control signal to change. We honour such signals where law requires it.
12. Changes to this policy
We will post any revised policy at this address with a new “last updated” date. If a change materially affects how we handle information already collected, we will give notice in the app or by email before it takes effect, and obtain consent where the law requires it.
13. Contact
SCREAD, LLC
hello@screadlabs.com