Privacy Policy

Readino is a learning-to-read app for children aged 3–8, published by Héctor Ullate ("we," "our," or "us"). This policy explains what information we collect when you use the Readino app on iOS and Android, our website readino.app and our web sign-up at get.readino.app; why we collect it; who helps us handle it; and the choices you have. Readino is set up and managed by parents and guardians, and children use it under their supervision.

1. Who is responsible

Héctor Ullate, the publisher of Readino, based in Spain, is responsible for your information (the "controller" under the EU General Data Protection Regulation). You can reach us at the address at the end of this policy.

2. What we collect and why

In the app, without an account

During onboarding you may enter your child's name or nickname, age, gender and avatar and answer a few questions about their reading. The app stores this, your child's progress and your settings on your device only. It is used to personalize the reading experience and is not sent to us. The same applies to the web version of Readino (app.readino.app), which keeps its progress in your browser.

With a Readino account (optional)

You can create an account with your email address to save your child's progress and use Readino on up to two devices, or to use a subscription you bought on our website. With an account we keep:

• Your email address, to log you in with a one-time link or code and to send you account emails, such as login codes.
• Your child's profile and progress: name or nickname, age, gender, avatar, the lessons and activities completed, level and reading streak.
• The devices logged in: a random identifier the app creates for each installation, the kind of device (for example "iPhone"), its platform and app version, and when it was last used, so you can see your devices and log them out.
• Security information about each login: the IP address and app version, used to protect your account.
• Store purchases: if you subscribed in the App Store or Google Play and log in, the app sends us the store's record of that purchase so we can confirm it with Apple or Google and unlock your other devices.

We use this information only to provide the service you asked for.

Web sign-up and purchases (get.readino.app)

When you sign up on our website we collect your answers (such as your child's name, age and reading level, and your preferences), your email address, and the campaign that brought you to us (for example, which ad). We use them to recommend and set up your plan and, if you subscribe, to set up your child in the app. When you pay on our website, the payment is processed by Stripe and Link (see section 5). We receive your email address, the plan you chose, the payment status and Stripe's identifiers for the payment, never your full card number.

Emails and messages you send us

When you write to us (for example to support@readino.app or through the press form on readino.app), we receive your email address, the message and anything you include, and use them to answer you.

Technical information

Like any online service, our servers and hosting provider process technical information such as IP addresses, browser or app details and the time of each request, to deliver the service, keep it secure and prevent abuse.

3. Advertising and measurement

We advertise Readino to parents and measure whether our ads work. We never use your child's name, age, profile or progress for this, and the app shows children no ads.

• In the app: we use the Meta (Facebook) SDK to measure our ad campaigns. It sends standard events such as app opened, content viewed, checkout started and purchase. On iOS, Apple's "Allow Tracking" prompt lets you decide whether this may be linked to your activity in other apps and websites, and you can change it at any time in your device settings. On Android, the Meta SDK stays off unless the parent confirms during onboarding that they are 18 or older.
• On our website: where the law requires it (for example in the EU and the UK), we ask for your consent first. With your consent, the Meta Pixel and Meta's Conversions API may record that a visit led to a sign-up or purchase, using cookies (such as _fbp and _fbc), your IP address, browser details and a scrambled (hashed) copy of your email address. You can change your choice at any time with "Cookie settings" at the bottom of each page of the sign-up.

4. Children's privacy

• Readino is directed at children aged 3–8 and meant to be used with a parent or guardian. Accounts, purchases and the web sign-up are for adults only.
• Information about a child (a name or nickname, age, gender, avatar and reading progress) is provided by the parent and limited to what the app needs. We don't ask children for contact details.
• In the app, Settings (including the account) and the ways to contact us are behind a grown-up check, so children can't reach them on their own. The first-time setup, including subscribing, is meant to be completed by the parent, and purchases go through Apple's or Google's own payment screen.
• We do not knowingly collect personal information directly from children. If we learn that we have, we delete it.
• Parents can review, change or delete their child's information at any time: in the app (Settings), by deleting the account, or by writing to us. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR).

5. Who helps us

We do not sell your personal information. We share it only with service providers that handle it on our behalf, under our instructions:

• Cloudflare: hosting, our database (stored in the European Union), and sending and receiving our email.
• Apple and Google: the app stores, in-app purchases and confirming subscriptions.
• Stripe and Link: payments on our website. For those purchases, Link (a Stripe company) is the seller of record and handles the payment, taxes and refunds under its own terms and privacy policy.
• Google (Gmail): our support inbox.
• Resend: delivering messages sent through the press form on readino.app.
• Meta: measuring our ads, as described in section 3.

We may also disclose information when the law requires it, or to protect the rights and safety of our users or others.

6. Where your information is stored

Our database is hosted by Cloudflare in the European Union. Some of our providers may process information in the United States or other countries. When they do, they rely on legal safeguards such as the European Commission's standard contractual clauses or the EU–U.S. Data Privacy Framework.

7. How long we keep it

• On your device: until you reset progress or delete the app.
• Account information: until you delete your account. It is then removed from our database; copies in our backups are gone within 30 days.
• Login requests (email address, time and device identifier; codes and links are stored only in scrambled form): 30 days, to protect against abuse. The codes and links themselves stop working after a quarter of an hour.
• Web sign-up answers: as long as needed to set up and follow up on your sign-up and account, or until you ask us to delete them.
• Payment records: as long as tax and accounting law requires. After an account is deleted they are no longer linked to it.
• Emails with us: as long as needed to help you.

8. Your rights and choices

You can ask to access, correct, delete or receive a copy of your information, object to or restrict how we use it, and withdraw any consent you have given. You can:

• Edit your child's profile or reset progress in the app (Settings).
• Delete your account in the app (Settings → Account → Delete account) or at readino.app/delete-account, which also works without the app.
• Delete everything kept on a device by deleting the app.
• Change your tracking choice in your device settings, or your cookie choice with "Cookie settings" on our website.
• Write to us for anything else. We answer within one month.

If you are in the EU, you can also complain to a data protection authority, such as the Spanish Agencia Española de Protección de Datos (aepd.es) or the authority where you live.

9. Security

We use encrypted connections (HTTPS) everywhere, store login codes and links only in scrambled form, make them work once and expire quickly, and limit the number of devices per account. No system is completely secure, but we work to protect your information.

10. Changes to this policy

We may update this policy as Readino changes. We will post the new version on this page with a new date and, for significant changes, tell you in the app or by email.

11. Contact us

For questions about this policy, your information or your child's, write to:

support@readino.app